Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa
File: 46773a05-ae39-36bd-a950-0d64b5b7e334.roa (raw, json)
Hash identifier: 6v5iPjgxErRVwv9m1sjjc5xV4FQiQrmlLCRxv7cBLx0=
Subject key identifier: DE:5D:92:37:C4:D8:F5:ED:49:27:2D:21:AC:66:02:07:4D:33:38:00
Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Certificate serial: 010D0C9F432858492CAE7E51E70D38EB4AA8FC00
Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 17017
IP address blocks: 23.247.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:7e:51:e7:0d:38:eb:4a:a8:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=45bf0c21-4291-448a-ac66-9ab516179660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:66:38:ee:0d:d6:b0:9a:db:d9:56:d8:30:
1e:87:ae:7f:90:7e:50:11:4b:f2:a2:53:61:38:ef:
f5:5b:ef:99:80:a6:6f:72:78:cd:46:21:c7:94:ed:
2c:9c:21:c0:73:d3:cc:fb:55:2c:43:45:58:c0:3d:
71:13:b9:3f:c8:3e:19:7d:17:a2:5d:3c:99:4d:44:
8a:36:ed:9a:2e:61:4e:39:02:81:3f:a4:71:60:40:
36:c7:83:6a:be:b1:f5:37:1e:ca:4b:0c:31:36:ef:
08:66:a9:93:48:d9:f7:70:86:d8:c6:71:48:d8:42:
45:ca:98:66:c6:7e:38:e5:46:fe:69:82:35:32:f4:
04:be:ac:55:5a:12:d0:3a:8f:b9:47:0f:5a:1f:86:
4d:ca:8a:57:f3:ea:50:c6:47:ea:c9:cd:96:80:dc:
68:61:95:e8:96:10:d5:a4:03:3a:62:0b:07:fe:b8:
75:c2:23:9d:43:bc:f9:ba:a0:b0:a4:cb:b9:cf:bc:
f9:46:c1:de:e5:0f:9f:78:59:82:d1:13:d1:6d:b1:
ba:be:d8:2a:07:b8:15:c3:53:11:98:a0:5b:06:36:
9d:83:6f:ba:ac:c6:8c:e3:2f:04:a5:08:83:3c:9c:
5f:73:cf:5d:f8:5f:d2:d3:08:e5:0d:67:41:1c:f1:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5D:92:37:C4:D8:F5:ED:49:27:2D:21:AC:66:02:07:4D:33:38:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl
X509v3 Authority Key Identifier:
keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:66:4f:bd:0a:9c:a7:69:33:fd:dc:ff:d6:c7:72:0f:04:00:
08:72:02:76:67:d4:80:d9:e2:9f:35:e6:32:e5:16:60:cc:ff:
c9:bc:ce:41:9c:c8:ce:57:8b:0b:cb:e7:bb:8f:2d:9f:ac:74:
27:ad:14:63:a9:e1:c1:43:35:9d:e9:33:7d:ca:0d:a1:ae:32:
c2:70:ef:90:d8:57:62:7d:78:19:7f:e1:50:55:a8:af:64:72:
a0:ac:37:2d:15:c3:0b:b6:ea:25:3c:94:8b:d4:04:65:ca:8f:
33:36:c4:a2:8a:1f:32:9d:dc:b2:0f:e5:98:ce:e4:d8:aa:d5:
04:f0:af:4c:41:4b:7b:76:90:fd:6c:2a:e6:84:d1:3d:a4:f8:
22:99:f6:c2:0e:15:ea:80:14:7c:60:21:8b:db:81:44:06:20:
46:8e:00:f0:2c:9b:b0:8d:00:8e:77:4a:e6:af:ad:b7:8c:a8:
b4:01:eb:e2:12:79:00:8a:5d:d0:d2:1e:58:db:04:67:7d:56:
78:9f:0c:71:74:1e:5d:ae:51:9f:23:6e:01:13:a7:91:e3:fd:
e8:be:33:b2:ad:6e:93:65:97:35:32:3b:70:fa:0b:59:e6:43:
c5:11:37:e9:f6:31:87:85:ac:0d:85:2d:fa:95:88:9a:76:b3:
9c:b4:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:34:53 2025 by rpki-client