Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa
File: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (raw, json)
Hash identifier: /gd3rOA5j9lnKRZu4GBImQ0RF6+4tq18mgyAJZUsHqE=
Subject key identifier: E8:90:3C:22:C9:2A:BB:DA:99:6C:8C:D6:70:5A:33:64:CA:B2:0E:88
Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Certificate serial: 010D0C9F43285848EC96A7201794149F4CF2B6C0
Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 46733
IP address blocks: 23.165.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:a7:20:17:94:14:9f:4c:f2:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=f2a938ef-58ce-4123-b05d-2486c6c69cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:4f:02:c5:38:6c:ef:f2:20:21:63:79:64:
0d:6a:ed:85:16:45:6b:d0:bf:af:1e:98:47:7d:fe:
88:39:32:ba:ee:22:46:6d:0e:cc:f1:05:1d:3a:c8:
ba:e9:5a:de:a7:00:3e:50:ff:66:3c:e0:74:2b:a8:
7a:32:64:a4:ad:55:ff:ae:59:6b:e7:32:a8:13:57:
ec:f4:2c:e1:b2:df:97:2d:41:a9:cb:da:59:e8:99:
79:af:77:e0:25:32:95:25:0d:75:e4:d9:fe:c0:6e:
2f:fa:a8:ec:bf:ff:a3:b8:b1:69:ea:b3:04:ca:43:
ae:a8:04:69:3f:8a:e1:dc:d3:d6:48:0b:9e:33:08:
2f:a8:be:2a:65:b9:3e:9f:2d:d7:ed:22:97:df:af:
3f:b2:66:50:ab:98:39:17:a3:8b:5f:59:b0:39:44:
11:b1:11:11:74:37:20:3d:b7:e9:85:11:21:88:55:
02:71:6d:38:3a:d4:18:70:2b:ed:7f:24:67:47:65:
43:82:47:b3:bc:a1:40:fa:3d:89:75:35:c8:f5:2b:
86:36:82:45:a9:e3:57:b9:42:ad:97:be:a2:19:65:
bd:81:c2:46:a7:1f:41:22:0e:e7:47:e1:31:b3:a0:
ab:11:93:83:2e:93:4f:83:1c:d4:91:d4:a0:bc:7b:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:90:3C:22:C9:2A:BB:DA:99:6C:8C:D6:70:5A:33:64:CA:B2:0E:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl
X509v3 Authority Key Identifier:
keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:2b:21:31:94:e9:9e:37:c1:69:b9:54:ad:20:33:06:1f:fc:
80:45:60:cc:eb:7c:2c:c3:53:d8:5d:62:c7:12:7d:20:69:f3:
05:21:a6:bf:6e:18:40:87:3f:fc:b7:54:c8:6b:f4:f0:70:60:
53:fe:7e:25:23:42:2f:16:a3:4a:af:e5:67:32:43:20:e5:4b:
1b:aa:12:ec:4c:f6:86:4e:7d:48:11:b8:27:44:da:78:e3:56:
9f:bd:4c:43:22:26:4d:05:b0:67:81:d1:96:6a:13:55:62:76:
f9:25:91:42:75:c3:49:0c:47:f9:55:ae:90:ff:a1:65:6d:b1:
8a:c8:3c:62:85:25:d7:39:8b:1c:ba:ac:7a:c7:5d:26:87:58:
e5:40:e7:79:3e:3c:a5:6a:95:eb:e0:74:47:a5:de:67:78:17:
44:7b:95:73:39:9c:39:4a:b5:9b:31:b2:e0:d5:24:47:73:43:
70:1e:07:f0:74:3d:f4:dc:e5:9a:37:08:5b:44:ba:00:c7:14:
84:0c:bb:94:21:2f:d9:66:b2:c4:1d:e7:09:92:74:f4:d4:53:
93:3b:b0:ef:62:9d:91:d7:9a:66:74:bd:b9:01:89:fd:a0:fd:
a8:99:db:0a:19:22:a3:1e:f5:da:cf:4b:e4:63:fc:fc:80:cd:
30:84:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:55:02 2025 by rpki-client