Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa
File: 3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa (raw, json)
Hash identifier: DjvsERxl6R0azohUdA9N4hrbNfVX5yhAzTzn5RFdlHM=
Subject key identifier: 55:62:69:AF:5B:A3:0C:D7:64:77:04:AF:2D:EE:71:FB:D3:D7:F1:46
Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial: 010D0C9F4328584913AC20822672682358247180
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 6977
IP address blocks: 23.188.16.0/24 maxlen: 24
2602:fc4b::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:20:82:26:72:68:23:58:24:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=8a1a39c2-899a-45fd-9736-93d1e149fe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:7a:88:73:e4:f8:fc:ed:ab:97:a5:b1:42:
a5:2b:87:e3:93:ac:2a:da:36:88:0b:f0:06:68:84:
26:ea:43:59:d5:59:60:48:77:3d:12:ff:cd:38:4b:
fc:95:99:58:67:43:55:26:f0:f0:aa:a2:a1:e4:88:
70:ca:f1:c3:3e:7b:da:a2:dd:d2:ef:4c:02:5c:82:
5c:c2:47:72:b6:41:bf:82:4a:71:7a:0f:da:81:e1:
69:46:ea:72:1d:0e:19:03:aa:35:ec:96:eb:ca:d4:
4c:e6:4f:3e:03:0b:90:f5:cd:b1:0e:56:77:43:be:
57:e5:2e:eb:3b:57:2e:84:f2:98:ad:a8:a1:7d:a6:
d6:bb:95:49:0c:26:69:31:89:3e:69:34:3e:05:cd:
70:a2:a9:8a:a9:7d:66:87:44:f0:1f:3e:3b:a7:40:
0f:03:ca:e0:07:06:dd:34:02:de:5c:34:6b:d2:6e:
e0:95:36:98:f1:f7:85:11:09:59:44:6d:f3:42:54:
80:ff:61:d2:ab:20:1d:23:aa:55:32:ff:07:95:61:
d7:72:b5:5a:7e:c9:cb:71:23:fb:1c:9c:f4:2f:e3:
93:a6:24:d2:81:46:31:9d:1d:32:03:54:55:1b:69:
68:b7:73:d6:b1:25:07:34:df:23:6c:b8:ae:38:df:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:62:69:AF:5B:A3:0C:D7:64:77:04:AF:2D:EE:71:FB:D3:D7:F1:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
X509v3 Authority Key Identifier:
keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
sbgp-ipAddrBlock: critical
IPv4:
23.188.16.0/24
IPv6:
2602:fc4b::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:a1:cf:66:a2:f6:c9:28:fa:e7:27:a7:29:63:80:13:ae:7c:
58:10:49:ce:03:8d:e1:f7:40:82:ac:b4:62:95:2e:ab:1b:ff:
ac:f1:02:fd:be:c6:89:e2:77:25:2a:7d:0d:3e:d2:c1:e3:04:
a8:15:c3:3a:a8:6a:7e:ba:b2:ea:2c:72:ad:42:d2:4c:26:9a:
45:fa:e1:c2:9a:3f:29:d2:df:50:60:14:4a:79:71:2e:18:cc:
c0:0d:4d:ef:11:4d:2e:4e:a5:11:d9:cf:98:c0:30:b0:1e:32:
3c:5c:25:f3:c9:33:36:dc:a0:c4:92:83:d4:b2:2c:a6:3f:3f:
f9:ca:90:80:8f:39:64:a2:45:b8:1a:80:eb:90:3f:24:97:6b:
b1:01:d0:83:c4:99:29:71:21:b2:23:72:01:cc:20:ab:7b:8e:
24:f9:96:c8:c3:68:dd:03:8c:fd:65:0f:ed:21:44:02:c6:31:
43:8e:70:d0:c4:5a:37:78:4d:b7:b6:89:76:c6:94:b0:f1:8a:
b0:9c:fe:3d:03:af:1b:a3:4d:36:7b:77:6d:fa:f1:0f:54:f3:
86:82:f0:7c:f5:dc:58:54:d3:e9:24:93:9c:a1:20:84:35:36:
1b:86:ba:fb:e9:62:e9:0a:7a:08:4c:c2:e4:ce:43:1d:b3:69:
72:0d:9b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:50 2025 by rpki-client