Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a/bdc96c1f-abcc-3a67-a4ab-61f96ac7a4c3.roa
File: bdc96c1f-abcc-3a67-a4ab-61f96ac7a4c3.roa (raw, json)
Hash identifier: R0yUSjMmQDIfUOSLBjsnNT/4vvwNyHzOMeGvF1FF+SU=
Subject key identifier: 6A:16:09:E0:15:29:5D:13:96:D4:1F:1A:1E:BD:AA:C6:6D:1D:32:26
Certificate issuer: /CN=d8308179-dac5-4523-ac26-62164ec5c58a
Certificate serial: 010D0C9F432858490CB1705CC05CB9CAF2750600
Authority key identifier: AB:94:0B:E7:BE:4E:89:8B:54:EA:1B:FA:7E:8F:E5:62:85:3C:87:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a/bdc96c1f-abcc-3a67-a4ab-61f96ac7a4c3.roa
Signing time: Sun 02 Mar 2025 02:00:40 +0000
ROA not before: Sun 02 Mar 2025 02:00:40 +0000
ROA not after: Sat 31 May 2025 01:00:40 +0000
asID: 22497
IP address blocks: 23.167.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0c:b1:70:5c:c0:5c:b9:ca:f2:75:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8308179-dac5-4523-ac26-62164ec5c58a
Validity
Not Before: Mar 2 02:00:40 2025 GMT
Not After : May 31 01:00:40 2025 GMT
Subject: CN=f2aedfa8-8fbe-4883-b66f-7d979ebbb1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:b1:e4:ab:bf:6c:51:7a:63:6f:ab:cb:65:
7e:f8:b3:6a:d9:23:08:b5:61:c6:d1:21:7f:32:6c:
fa:d6:bd:75:59:09:cb:d5:dc:70:c0:5e:d0:42:2d:
85:55:2e:b2:68:6f:d8:74:78:23:e1:e6:fd:73:ef:
0d:9a:d2:31:6a:cb:2c:a3:f7:90:67:ad:14:bf:b9:
1d:5d:71:7e:a2:49:0d:d3:26:e4:c9:6f:ce:46:75:
b1:dc:68:11:4a:0b:da:a4:e4:82:7b:66:67:33:28:
59:9e:f3:08:e6:4c:cc:88:7a:af:6c:8e:05:e1:b7:
99:b2:d7:9b:90:6d:8c:61:76:d1:5b:5b:1f:96:52:
cf:a5:8a:1e:76:aa:6c:25:22:8c:65:f0:1e:33:b4:
80:a4:44:98:57:c9:13:16:34:ef:de:d3:50:25:37:
b9:b9:9f:5b:3e:ef:75:9b:0c:82:41:15:a5:86:84:
e9:11:ef:13:52:ce:04:0f:6e:8a:5e:a3:11:e4:e7:
2f:a2:32:43:7c:d9:57:a3:c7:3b:4c:48:34:23:15:
0c:36:2b:f7:3a:3c:f1:7f:53:82:15:5c:e0:9b:5e:
37:3b:ec:6f:1d:79:02:fb:73:9c:36:33:4a:b9:21:
b1:58:85:62:f1:83:5f:6f:7d:4e:44:f0:31:80:38:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:09:E0:15:29:5D:13:96:D4:1F:1A:1E:BD:AA:C6:6D:1D:32:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a/bdc96c1f-abcc-3a67-a4ab-61f96ac7a4c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a/d8308179-dac5-4523-ac26-62164ec5c58a.crl
X509v3 Authority Key Identifier:
keyid:AB:94:0B:E7:BE:4E:89:8B:54:EA:1B:FA:7E:8F:E5:62:85:3C:87:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d8308179-dac5-4523-ac26-62164ec5c58a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:6f:5f:bc:b5:81:cd:a7:3e:8d:2c:13:c0:df:c3:31:f1:43:
2a:a1:8e:27:2e:f5:f0:f0:a8:af:6b:a4:27:c3:00:2d:24:9c:
e9:50:47:ec:11:c0:b9:7c:16:a3:2a:0e:e4:7f:ab:b3:25:47:
5b:1c:e3:97:cf:92:58:f6:51:33:53:9e:62:06:19:7b:9f:41:
60:82:7b:0d:56:35:5c:2b:a8:90:86:a7:1a:a2:f2:97:69:a5:
24:2c:b3:6b:a7:db:9f:98:de:5a:b3:46:59:02:1b:c2:f4:ef:
f8:3a:6c:a9:65:51:3d:57:34:cd:65:71:4d:9e:e4:34:d5:5c:
88:7e:fc:5c:3f:8d:51:cc:bc:98:27:a5:27:72:c8:13:5f:2f:
48:0f:e7:4d:f1:c8:e7:ba:a0:20:35:5a:b1:14:b0:ef:b0:b3:
d5:6c:85:6b:99:b1:bc:d7:ee:de:af:39:df:0f:97:ca:da:e0:
9e:cf:5e:a2:5a:2e:fd:2d:9b:47:8d:de:35:b6:e4:f9:2e:5e:
28:e8:b7:c6:00:0f:d9:07:8a:a9:1c:a8:f3:02:6d:a0:78:30:
e6:3f:7d:29:15:a1:00:12:5d:bf:aa:78:6b:db:3f:b4:fc:4a:
dc:73:e2:fd:a1:1e:6b:c0:83:08:30:43:fa:dd:58:da:66:52:
c6:af:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:49:36 2025 by rpki-client