Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa
File: da93378e-6d07-3a1e-98f7-6ec0063c7938.roa (raw, json)
Hash identifier: IV+LnJbkOGAHycRgUfF/F1yT/Lbh+9aF9IYMm6P6PMo=
Subject key identifier: F1:C8:B8:13:12:EB:E8:F4:F3:18:D7:04:CD:A7:BD:DE:13:7E:B7:D6
Certificate issuer: /CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Certificate serial: 010D0C9F432858494B641D23091DB8F89326CEE0
Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 211392
IP address blocks: 23.145.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:1d:23:09:1d:b8:f8:93:26:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=8ccf0b17-c2bf-4a56-830b-253d64d9fa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:2c:12:5e:b8:15:b2:5e:44:c4:1a:68:6d:
4a:8c:e6:f0:2a:d1:f1:96:00:74:cf:8a:40:82:55:
3b:84:2f:23:57:a6:d1:d2:c7:b6:1f:3b:80:02:01:
e5:9e:60:33:11:ab:d6:eb:ce:2d:e5:c4:59:fe:eb:
f2:c6:16:d8:8c:c2:66:50:2f:b9:d3:04:69:75:53:
70:74:28:f9:d4:32:06:eb:65:aa:10:ed:c3:62:82:
d2:b3:87:b1:7d:3f:18:9b:d7:ae:ac:35:fe:7e:ec:
b1:e9:8b:52:30:25:55:0e:8d:dd:fa:bc:02:43:c2:
a7:dc:64:9f:bb:a8:03:ce:02:57:d1:50:88:8c:69:
c8:3e:9f:0e:52:e5:c9:fe:a0:f2:dc:7a:c3:0b:e3:
c2:cc:fb:84:0f:45:f9:16:fc:e9:1b:06:72:4a:2c:
e4:03:11:ef:f3:d1:73:93:f4:84:18:df:92:b3:30:
ea:bf:9c:fd:14:07:91:99:af:05:c2:46:af:2a:44:
c6:9f:56:fd:81:fc:1b:32:f1:ca:89:d2:cd:55:69:
19:78:e0:7a:8f:7d:06:55:ac:16:1a:05:87:04:c8:
b8:01:34:c7:6b:58:07:e5:4f:5a:5a:66:f6:a1:1e:
10:12:9d:06:b7:61:29:13:0f:a9:26:30:d2:97:19:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C8:B8:13:12:EB:E8:F4:F3:18:D7:04:CD:A7:BD:DE:13:7E:B7:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl
X509v3 Authority Key Identifier:
keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:08:b1:e3:98:72:37:12:a5:9a:30:e6:4d:6f:b2:d2:b1:fc:
fd:ed:66:06:17:db:ba:f2:65:18:90:25:01:d4:39:3d:58:d6:
f2:9f:e7:11:7a:72:79:76:5b:d2:71:7c:ad:20:6c:f5:ae:0a:
69:19:bb:1c:8b:2a:ca:6f:84:9e:05:5e:f9:5f:26:6a:2d:e0:
74:84:70:cb:1c:2e:e5:88:80:02:0a:63:cf:f2:b2:4d:6d:8d:
9b:7f:d0:33:69:3e:03:e3:9c:58:ef:35:47:23:71:fe:35:3e:
09:59:b9:15:48:2a:3c:2e:7c:36:3b:d0:da:57:bf:e2:8e:55:
89:04:c3:a1:0c:1a:28:15:0b:69:c7:7b:51:54:a9:af:40:61:
cf:09:7d:7e:ef:e2:39:1b:07:67:ca:6f:42:cf:a1:7e:5c:90:
98:e3:a3:ee:bd:b4:2c:8e:fe:f5:b8:a3:de:02:b0:77:25:46:
73:62:ed:6f:b9:80:90:79:10:16:4c:86:53:e0:c6:1e:95:73:
c9:30:81:80:a7:92:ca:db:2d:a1:aa:b3:6d:9b:a5:35:14:76:
7e:e0:9d:12:b3:68:d3:2c:6b:2f:4c:ae:02:af:7e:ae:b0:4b:
f1:15:bd:90:c4:0f:06:50:66:41:f5:26:e2:0a:87:9b:5f:76:
2e:55:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:46 2025 by rpki-client