Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/cf282bcc-6ac2-3810-91aa-421d66fa8561.roa
File: cf282bcc-6ac2-3810-91aa-421d66fa8561.roa (raw, json)
Hash identifier: 1F7CmMS8t4WMZq1YdcD96UN7sqP9nnXbmvZOTBlNkz8=
Subject key identifier: 64:13:12:17:D4:17:D9:EE:81:F1:1B:81:27:A3:32:49:FF:6A:78:C8
Certificate issuer: /CN=4559e616-17ae-4214-9407-2e51c3be0fa4
Certificate serial: 010D0C9F43285848E16BED7814F2E990C9496380
Authority key identifier: C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/cf282bcc-6ac2-3810-91aa-421d66fa8561.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 1030
IP address blocks: 23.165.232.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:ed:78:14:f2:e9:90:c9:49:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4559e616-17ae-4214-9407-2e51c3be0fa4
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=fdc40b43-872f-420d-8872-e90ed0d7dd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:5b:d0:a6:a9:2d:8f:f8:a5:59:24:35:c1:
ef:bd:89:d3:4e:db:6b:8c:2f:e2:0b:71:77:07:19:
22:72:7e:22:60:ed:ef:74:ce:9b:6b:d0:e9:ee:cd:
01:6a:bc:b8:64:4e:ea:dd:48:7a:b2:f8:4f:d3:07:
fa:65:5a:de:fb:72:4e:e0:f8:54:61:81:d3:83:3e:
b9:b4:5f:d3:40:c0:99:cf:dd:d8:0b:4e:65:a3:6a:
66:d0:fa:fb:45:f0:48:51:c7:56:2c:de:df:a5:48:
15:6d:16:ec:9f:a4:5c:97:5b:89:9a:89:10:29:d1:
97:b0:b0:0a:f5:eb:98:9d:c1:1d:01:a9:64:30:a9:
4b:b8:d4:f2:21:32:71:db:77:72:79:08:76:d1:b4:
98:bd:59:a0:4f:4a:e3:c2:c7:aa:b0:4e:77:52:a0:
e5:bc:bb:af:9f:ad:03:3e:fd:91:4d:ba:e9:c9:4b:
dc:c4:ea:75:2c:0d:84:6b:6b:50:5a:04:56:cc:8f:
2c:4f:22:19:c4:e4:71:80:ce:27:cd:1a:37:2d:c3:
06:f2:0a:3f:c4:57:0f:7c:d9:18:bc:18:b4:cd:1c:
21:a7:ff:1b:6e:fe:cc:2f:65:62:be:ef:6e:1b:90:
96:f6:9a:3a:56:14:fe:18:42:38:8f:8e:35:24:69:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:12:17:D4:17:D9:EE:81:F1:1B:81:27:A3:32:49:FF:6A:78:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/cf282bcc-6ac2-3810-91aa-421d66fa8561.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4/4559e616-17ae-4214-9407-2e51c3be0fa4.crl
X509v3 Authority Key Identifier:
keyid:C7:F1:28:E8:A7:9A:65:B5:47:99:3D:CA:EF:64:B1:D7:7B:5F:89:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4559e616-17ae-4214-9407-2e51c3be0fa4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:8d:f6:d8:f4:ac:1e:09:07:fa:12:06:6e:95:3d:2b:21:6a:
bb:43:1d:28:3b:e9:ed:22:c5:c8:80:1a:ac:a5:a7:09:9e:ef:
c1:14:6f:d8:9c:29:d1:e0:c8:b6:7f:44:86:17:c1:21:72:1f:
fb:84:81:54:bb:fe:4b:20:82:a4:bd:2e:03:83:c0:c4:db:d7:
af:a9:18:a2:48:36:d0:ed:a8:c4:d4:f9:b7:00:07:91:d8:93:
20:06:e6:53:fb:6a:df:1f:c1:f5:b8:e4:87:5f:70:28:4e:76:
b6:21:5d:03:04:a3:9a:03:06:72:94:c4:e9:21:6e:bd:ad:5f:
cc:14:de:58:a3:2f:83:e5:e7:38:d2:da:ce:0a:d2:23:77:50:
a8:79:29:56:cd:b8:9e:7f:c2:22:f8:2e:16:85:a7:0e:b1:8f:
2c:d0:ea:1a:13:b8:33:b1:cf:7c:df:61:24:36:36:85:ff:01:
30:87:72:96:53:5b:17:59:34:0e:9f:67:9a:31:02:16:02:ad:
32:94:12:2e:9c:8c:2b:d6:88:ce:8c:b7:bb:f4:98:c2:88:49:
da:99:29:5e:b5:85:a8:8b:96:ad:c1:47:bd:a7:3f:5f:61:46:
e7:c0:40:43:9e:14:54:a8:eb:93:63:3f:a1:86:57:1f:bd:88:
11:aa:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:44 2025 by rpki-client