Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa
File: 494bc969-36fb-3c89-a5c5-f2e89d093b91.roa (raw, json)
Hash identifier: g8MK1Nd9SbvOcuFtTHS/ZcE+6umPUk2Ky0fp2VV30XQ=
Subject key identifier: 77:0C:C9:48:EC:75:16:B2:6F:96:0A:A9:42:EE:BB:C5:6D:52:D1:57
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F43285848F65BEBB223F2080CBD7E53C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 396190
IP address blocks: 23.19.53.0/24 maxlen: 24
2607:f5b5:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:eb:b2:23:f2:08:0c:bd:7e:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=20405a06-4c85-4d74-a41f-a1c50ddb5c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:47:ea:b5:dc:6d:31:99:9a:30:bd:e3:6d:
b9:6a:94:be:ae:64:c1:06:6c:6f:ab:aa:b1:18:21:
da:21:25:d8:07:97:2a:9a:55:28:51:ab:28:06:b0:
33:09:dc:b0:f4:03:60:aa:5c:3d:0a:54:bd:5c:9c:
69:0c:78:c0:e1:f9:d4:16:2a:9b:e3:9e:49:9b:26:
d9:42:40:fc:1a:94:57:0d:54:86:8f:b8:e4:e1:39:
96:ce:41:12:2b:e1:65:cc:d1:54:24:00:3a:9c:0b:
24:9f:c6:62:62:fc:d5:2b:52:2e:4c:66:e0:c1:01:
7f:f6:44:f1:d0:e0:cd:f4:33:03:82:fa:76:4f:9b:
09:a9:a9:f3:ce:e4:0d:b2:eb:0b:96:d3:df:88:c0:
e1:23:de:e9:a0:bd:1e:ee:ec:a9:7e:af:42:bd:7a:
c1:19:2b:38:d1:91:dd:81:e3:20:09:5f:2a:81:a1:
42:97:e9:55:f3:38:5f:77:65:1e:0c:b0:cb:dd:78:
92:0b:14:48:36:d6:36:36:dc:23:52:9e:e0:1c:4b:
76:5e:6b:1b:7a:c5:19:a9:80:12:04:01:c8:ac:e1:
10:28:59:1c:e8:4c:17:bc:a2:cb:d2:cf:65:08:a2:
86:54:20:76:fb:ae:85:b0:5a:e3:f4:1c:1c:bd:58:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0C:C9:48:EC:75:16:B2:6F:96:0A:A9:42:EE:BB:C5:6D:52:D1:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/494bc969-36fb-3c89-a5c5-f2e89d093b91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.53.0/24
IPv6:
2607:f5b5:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:b9:53:15:95:35:bd:21:c6:9e:30:c0:b9:74:32:49:2f:d4:
59:2d:c0:f0:51:52:79:b0:ca:40:53:b8:1d:80:8a:f6:70:3a:
07:c7:9b:5d:1f:2c:dc:6d:0d:25:45:27:00:7f:e1:92:ff:db:
69:48:5c:08:a3:81:79:85:a7:66:a1:aa:83:68:47:8c:66:c8:
22:c1:af:6d:05:eb:4f:ba:13:3e:22:69:18:bb:4a:5f:03:0f:
39:66:f7:5c:28:8b:28:7c:f9:0f:9a:b8:37:78:ac:55:05:0e:
2c:14:77:f7:75:28:52:4e:0c:d0:bc:bb:9c:2f:75:7c:b5:ad:
de:06:39:18:d3:5b:d6:16:27:2f:2f:6b:84:96:e2:59:53:0f:
67:6c:6c:19:cd:93:72:49:5e:92:05:27:e0:36:67:20:b1:e0:
33:94:7e:a1:60:3d:af:5d:d3:05:d4:95:a0:85:de:22:c1:5e:
42:fb:6b:c5:4e:45:67:4a:b9:27:f4:c3:90:f1:61:d4:ab:ff:
38:14:57:55:8f:c5:0b:b5:50:a4:2c:df:66:10:70:46:f2:b5:
7b:3c:0d:a2:4a:85:d2:72:c6:87:d6:38:a8:a5:02:30:9e:89:
35:8f:25:7f:5c:55:70:ee:ae:94:d2:56:9d:7d:63:1c:26:ba:
60:00:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:05:50 2025 by rpki-client