Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/f01fa9c6-c8cd-3180-97da-a16e9a3ad136.roa
File: f01fa9c6-c8cd-3180-97da-a16e9a3ad136.roa (raw, json)
Hash identifier: tVuRFG/pgBbKwedAjvuL68+ccjvPXcmH0hJA1s+1NmA=
Subject key identifier: 98:45:12:3C:F8:4B:FE:7F:B7:85:82:C7:B1:9A:DB:7C:2A:9A:C8:16
Certificate issuer: /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial: 010D0C9F432858489340B460D3BD7116A3218100
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/f01fa9c6-c8cd-3180-97da-a16e9a3ad136.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 40401
IP address blocks: 23.144.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b4:60:d3:bd:71:16:a3:21:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=ca929f16-b811-4189-bc80-4d15aa3cf897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:45:70:6f:ab:b5:b8:ce:20:06:e6:06:21:
0d:9c:11:0d:2f:19:53:18:e5:e2:a1:cb:89:42:ae:
06:82:f7:25:0d:57:dd:80:20:b8:c4:c3:12:5b:c5:
ef:82:c4:4e:73:2f:7e:e5:a2:99:3f:54:83:ff:91:
a1:d6:db:63:ce:93:0a:8f:cf:92:fd:e8:24:9f:18:
55:3e:cb:22:b6:01:39:15:0c:7d:86:97:47:17:f1:
36:6a:d7:ba:99:b5:69:c4:e1:6b:ba:13:e4:6e:77:
43:1b:54:4b:dc:20:50:11:5e:dd:28:aa:19:13:dd:
2b:8f:30:a5:ad:f8:cc:ca:17:f2:10:74:1a:19:8f:
3f:24:ed:3b:37:2d:6d:fa:22:38:00:3f:cc:c5:c8:
dc:af:32:76:da:f2:73:2c:ac:0f:30:97:46:b9:05:
6b:37:72:0e:05:74:ab:0b:fd:99:9e:ba:7a:03:2f:
ac:aa:96:ee:65:a9:17:eb:c0:e7:a6:87:0f:a5:1e:
eb:15:16:41:e1:7f:04:4d:f9:c9:0e:6c:cb:1c:88:
ce:b0:b8:5b:30:26:42:a0:c0:1d:f3:42:f7:75:56:
0a:0d:f2:da:da:0e:eb:5c:e1:6e:35:71:51:a5:38:
a0:e2:a4:f8:22:f6:15:6c:31:e2:45:7d:ca:17:7d:
82:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:45:12:3C:F8:4B:FE:7F:B7:85:82:C7:B1:9A:DB:7C:2A:9A:C8:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/f01fa9c6-c8cd-3180-97da-a16e9a3ad136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
X509v3 Authority Key Identifier:
keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:71:8f:1f:bf:30:a7:ef:10:d8:65:7d:ae:d5:ff:e3:8c:49:
4a:f9:bb:f8:ce:51:3a:99:bc:3f:7a:06:65:03:6b:98:e4:f3:
7d:8d:67:7f:7f:01:cf:ba:5f:10:38:b8:df:60:77:81:3a:8d:
ea:02:0d:30:b6:59:4e:7d:2e:02:11:55:60:5b:26:1b:e4:36:
c0:2f:a2:b0:ba:58:0d:b8:44:77:54:62:84:59:97:b1:23:3a:
e9:78:a4:35:66:00:a1:4f:f2:39:35:e9:05:aa:a5:a2:73:22:
26:ef:e4:e3:1e:d7:5d:f4:a1:33:61:93:14:24:71:fc:32:32:
f8:5c:a4:cb:42:73:bc:30:e0:1a:cd:d8:12:00:47:29:3b:9f:
c0:8d:66:d6:ee:59:09:c7:b4:94:c6:a3:e1:36:61:e0:81:39:
f7:03:74:f3:c8:82:b2:c2:45:db:4f:38:d3:26:72:ce:c9:69:
e7:d2:e4:c4:62:f4:d1:5a:f8:e7:21:8d:ac:8b:7a:a6:54:42:
f4:9e:b2:01:3a:8e:b2:19:5c:57:12:df:a4:55:d3:9d:a7:49:
f6:7a:64:f9:b0:69:7a:f7:32:fa:3f:8d:52:36:08:49:21:bf:
36:9a:ba:d0:2b:67:40:08:ce:80:69:41:e4:ab:6c:d2:9d:c9:
75:4a:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:40 2025 by rpki-client