Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa
File: ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa (raw, json)
Hash identifier: xDUtlF9u1HzgAyv7Vw+UqzbVe0GeGMHmWiTqe/N1sAQ=
Subject key identifier: D3:64:EE:FB:BA:FA:60:10:6D:C2:5B:14:95:9A:60:1D:87:24:70:FB
Certificate issuer: /CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e
Certificate serial: 010D0C9F43285848CDE1106CCFBC8D7D6F36BA00
Authority key identifier: A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 35870
IP address blocks: 23.144.200.0/24 maxlen: 24
2602:fac0::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:10:6c:cf:bc:8d:7d:6f:36:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=41f4b883-e002-4c02-8e43-5b5c7370c0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:7b:f1:70:f6:77:77:b0:26:92:e2:8c:cc:
11:47:5c:77:14:2d:16:bb:fb:a6:cb:b1:50:b8:e3:
c1:26:02:fc:24:37:fe:c1:fe:ae:d6:cb:ab:d0:62:
d9:1f:ba:18:2e:f1:bd:d4:9a:dd:81:ca:d2:18:82:
e5:5d:d1:06:27:e1:df:ea:bd:3b:2f:f1:11:52:0a:
22:89:1c:e3:ad:b0:89:9e:43:7c:a2:ab:2c:bc:eb:
2d:18:a8:72:dd:5b:bc:d8:4e:27:81:30:a8:7d:67:
e7:8c:1f:3f:2d:0e:2f:1e:c0:85:fa:96:58:bb:b3:
7a:0f:60:c1:90:da:cf:19:66:b9:25:0b:c8:33:2c:
5b:8f:78:10:e6:c8:13:01:38:07:81:d0:d4:56:6d:
77:0f:e9:14:00:d9:66:c0:e1:10:03:1f:99:c3:90:
37:1a:eb:ef:d9:a8:30:2b:a4:ec:5d:ec:ab:09:af:
dc:09:88:8c:3b:6f:a3:1e:04:d7:cf:84:d1:66:14:
70:8e:71:b6:c9:2d:7f:de:47:ee:c9:8e:0c:b9:6f:
ad:4f:98:ea:d2:e6:b8:51:99:69:ea:66:34:1c:44:
a9:61:31:1c:c7:54:a7:6a:76:7c:f7:b5:e6:ac:bd:
2f:e6:e0:6a:11:e0:2e:05:46:ce:8b:5b:8e:89:d7:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:64:EE:FB:BA:FA:60:10:6D:C2:5B:14:95:9A:60:1D:87:24:70:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/ec42e5db-129d-3e21-a678-85b4b5f3ba38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.crl
X509v3 Authority Key Identifier:
keyid:A6:3B:19:6E:4C:31:08:67:74:57:05:6A:AD:1D:28:E3:BF:03:CA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9f9ca02c-721e-4ca8-96d4-6eb10d8ea38e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.200.0/24
IPv6:
2602:fac0::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:69:84:70:5d:80:22:7b:06:c7:50:da:71:02:2d:96:94:c2:
79:a3:bb:62:f1:a8:9d:78:4f:d0:1e:b0:21:2f:de:1f:15:81:
8d:48:f0:8e:9f:3f:96:0b:53:7a:81:05:a5:a0:2a:03:89:95:
5f:c2:d2:62:f3:41:92:da:72:06:6f:d6:f3:40:69:e3:8a:e1:
95:32:92:37:33:06:5a:67:95:33:49:c5:f5:51:12:95:b0:ad:
f4:54:5b:92:4f:38:3e:96:13:f4:e0:cc:ae:0e:b2:99:e0:50:
ee:8f:3e:0b:ec:a0:80:3c:24:ee:a6:a6:46:fd:61:24:e9:04:
a2:e4:c1:a9:6b:75:63:93:8b:e0:3f:70:20:4e:38:f0:bf:a2:
ce:77:62:8c:27:90:a3:07:74:45:9b:b5:e4:7e:04:ae:2d:03:
e4:05:8a:e9:51:f2:08:11:90:07:68:67:48:7e:21:1c:eb:14:
b7:29:00:51:f5:e5:f3:40:66:4c:71:d6:1b:69:4b:a8:a5:0c:
69:39:1a:dc:f6:ce:9e:3a:42:df:a5:3d:73:92:33:5b:04:45:
35:64:b8:c8:57:19:04:d5:9f:73:a7:e8:c1:f2:9d:63:9a:e3:
5c:e3:8c:33:73:2d:d3:b3:10:c5:fc:c6:59:0c:fe:db:ce:4a:
2c:e2:ed:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:45 2025 by rpki-client