Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa
File: 3e1f93dc-6520-3778-ad3d-37750549a980.roa (raw, json)
Hash identifier: eyTpFzL3z1hGG5UgJwnlw8oEyvQ6oZec1YAK6Mi9+ks=
Subject key identifier: DE:C1:85:94:89:DF:78:6A:0C:EA:0C:8C:9D:A2:2C:EE:EB:30:08:C6
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F43285848F65BEBD0872058E7008E5E00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 393886
IP address blocks: 23.19.53.0/24 maxlen: 24
2607:f5b5:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:eb:d0:87:20:58:e7:00:8e:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=0ad8996e-4321-4376-8c13-9ad1953d5e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:e4:e3:78:b8:2b:57:28:ef:3c:73:c9:32:
da:33:96:d8:d8:5c:dc:80:da:0c:c2:29:49:97:ce:
f6:d3:19:19:67:e4:b0:40:71:55:f8:bd:b9:46:3f:
8e:35:18:ba:b2:85:22:42:2c:68:06:56:4b:93:61:
9f:e3:bf:f7:a6:c2:48:da:c9:ba:6e:98:f0:0d:e2:
f0:2a:26:af:86:5d:19:32:d5:65:9f:8f:77:60:87:
6f:52:5a:b2:03:23:52:ba:6e:9a:92:7f:39:80:46:
20:b9:00:7d:85:81:d9:0d:e2:d6:47:32:c9:6d:63:
0c:c4:6b:42:e9:52:e4:57:a0:5f:08:9b:c6:4f:c5:
53:d2:7c:1a:5f:ec:1d:7f:95:a3:24:29:2b:b4:6a:
b1:96:e7:b6:50:22:2d:e1:69:5c:f3:ab:a2:49:fc:
7c:38:ca:ee:13:84:dd:95:df:88:4c:32:8b:c4:ee:
a9:20:34:04:aa:53:23:3e:89:ad:90:2b:bd:00:96:
58:3a:df:d7:4b:33:21:a0:7f:c3:38:51:00:6b:63:
96:f7:c2:35:ed:4a:b9:f4:87:a7:6c:4b:1f:74:af:
d7:40:8e:63:e8:46:f2:1a:42:3d:fa:28:dc:7c:81:
b7:5b:4d:f1:e5:a6:67:d9:e0:c5:44:ba:73:5c:bd:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C1:85:94:89:DF:78:6A:0C:EA:0C:8C:9D:A2:2C:EE:EB:30:08:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3e1f93dc-6520-3778-ad3d-37750549a980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.53.0/24
IPv6:
2607:f5b5:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:aa:fc:75:20:f6:ce:7b:9c:67:7a:e7:72:ae:37:ac:72:77:
d7:9c:bf:e0:fb:87:b1:bc:55:69:a8:86:e2:d3:cf:80:7d:7d:
d3:c4:a3:dc:1c:de:1f:0f:7e:38:b1:ab:63:1e:87:3e:d1:da:
1d:c2:20:98:0d:44:70:9b:8b:96:eb:ab:c4:ed:33:c4:cc:7f:
4e:b0:2f:a6:83:d4:0b:b6:82:65:14:d7:fe:cb:b8:ee:43:ef:
1c:a1:eb:30:17:d6:28:a6:ac:f4:8e:49:4c:eb:10:a3:e9:a5:
0e:8b:4c:d1:87:2b:6e:f7:23:95:8d:bc:f1:82:e0:22:d7:f8:
52:2d:b6:23:d9:8d:33:16:9e:5b:fd:20:c1:74:e0:e4:0f:af:
c9:58:bd:11:85:34:93:a9:0e:d9:e6:b8:1b:fa:0d:1f:19:97:
eb:a9:ff:17:3c:72:b4:fc:57:f1:88:25:63:70:56:25:2f:d5:
cc:5a:41:99:a6:22:d0:ab:0e:8f:1d:f5:c6:18:c5:bc:a2:b8:
4d:8d:03:a9:a4:6d:e6:71:ba:1d:0b:aa:d5:58:aa:04:b1:b3:
c6:8f:3c:da:7a:12:dc:aa:94:4e:79:5f:78:b4:d7:2d:98:23:
c9:52:c8:39:a4:5d:db:4d:b2:db:1f:b6:16:5d:8e:51:c7:3c:
bb:e5:f9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:50 2025 by rpki-client