Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa
File: d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa (raw, json)
Hash identifier: tmIon8YEaE54vBO1vRqJpqau2L3szCxirhNfmY1MwHY=
Subject key identifier: 6A:5B:92:F5:96:DE:9D:55:86:17:4E:DA:E1:5A:AB:52:E0:91:5B:BC
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F43285848F65BE9C5651DC125D6331B00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 136988
IP address blocks: 23.19.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e9:c5:65:1d:c1:25:d6:33:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=59296efb-8713-4d28-8070-899f2b7d405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:81:01:8f:a4:a0:2b:0b:61:45:80:62:39:
ff:4d:95:f2:44:5a:79:f6:b7:8a:40:09:58:d6:ad:
0e:94:bd:68:c5:17:5e:32:a3:b1:df:4d:ae:4e:40:
d1:cd:fb:00:a6:8e:e6:31:2c:53:37:29:f8:c3:ea:
f9:31:8b:19:41:6d:b0:08:c6:e3:09:30:dc:93:98:
0c:4b:0e:19:06:e5:6f:8d:31:8c:1f:60:a3:9e:6d:
c4:7b:95:33:63:12:09:68:7e:20:2b:18:5b:58:86:
b5:8b:ef:15:4c:96:89:26:9c:80:85:33:71:18:b4:
bf:16:04:e0:64:a2:a5:8c:a7:73:33:8d:55:ff:6b:
ec:64:f5:15:8f:66:88:f6:a0:f9:1f:b1:94:45:aa:
60:4b:06:46:38:c0:2b:29:ba:a3:a0:55:91:f3:28:
eb:27:c8:a0:a7:e6:c9:16:41:2e:a1:b0:6b:c4:9e:
ea:33:d1:b0:f0:85:0f:b9:d5:dc:26:22:ed:eb:78:
a7:c7:80:10:98:02:c8:86:d5:ef:ea:17:ca:ef:ea:
ee:a0:99:d9:1a:cd:74:62:0b:62:6c:12:0e:0e:e6:
ad:5a:47:44:3a:21:80:19:ce:e6:3c:9c:a2:22:aa:
1d:f6:06:2c:db:25:63:b2:2a:76:33:84:fb:0e:40:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5B:92:F5:96:DE:9D:55:86:17:4E:DA:E1:5A:AB:52:E0:91:5B:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d7fa1618-3b8b-300b-b6b6-f46b616c77d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:42:40:3c:3f:79:e2:42:5e:63:61:f7:1b:5d:06:12:23:68:
3e:00:92:0f:f6:68:b7:e4:01:2b:89:55:20:46:a2:9a:29:a4:
9b:46:19:d4:b6:df:7d:36:2c:65:51:38:eb:17:03:f6:6d:44:
44:cb:ea:8d:50:c3:a8:60:6c:11:c1:57:f8:61:3b:ca:10:15:
54:05:c6:17:fd:5a:7d:87:52:a7:73:81:7b:73:89:b4:c8:d5:
75:a9:4d:34:1b:96:2d:96:a1:92:04:5f:da:a0:41:fd:d7:95:
91:db:c0:0f:0d:62:ca:c3:31:86:72:ce:10:b7:c4:30:b4:d8:
12:0c:2f:ce:9e:49:45:11:6b:02:3d:96:89:b2:0b:a5:f3:10:
85:d1:5e:f9:4f:8a:cc:83:80:4e:19:9b:fa:8a:cb:18:c9:0f:
06:76:b5:c0:c4:d8:67:93:04:ee:79:92:c0:a1:9b:f7:23:70:
af:53:9b:14:48:28:23:f1:cf:fa:56:e9:48:02:da:d1:7c:66:
b1:25:a6:20:e8:eb:bc:cc:a3:d1:08:06:65:de:13:8c:3c:cd:
87:3e:fc:ba:31:b1:71:3b:e7:fb:3e:1c:e4:8d:a0:70:7e:39:
bb:74:13:66:c2:5d:be:50:98:5e:6b:44:b3:07:b7:b3:4d:10:
19:5f:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:38 2025 by rpki-client