Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/0643f9f7-9d02-32fe-847d-014edce56609.roa
File: 0643f9f7-9d02-32fe-847d-014edce56609.roa (raw, json)
Hash identifier: O+OLGpLmhwaCR/pvh8vTR+YhWnNmN7M1AsQdGEyD7H8=
Subject key identifier: 84:8B:88:BB:1F:0A:D5:F8:55:53:BB:D7:B0:3A:9A:B8:6C:18:B6:90
Certificate issuer: /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
Certificate serial: 010D0C9F43285848E16BED510435CE6D66212960
Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/0643f9f7-9d02-32fe-847d-014edce56609.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 1030
IP address blocks: 23.166.8.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:ed:51:04:35:ce:6d:66:21:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=e82ab98c-446a-459d-9bc3-b339960b2f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:ac:5f:49:29:f0:44:56:7e:fb:ef:1e:aa:
3f:a2:2a:af:a5:13:98:03:7d:f1:0a:a6:03:0d:0a:
ee:b4:48:2e:6e:9a:6a:91:85:54:0b:cd:2e:13:13:
6f:20:8a:f5:c3:e6:c8:69:71:d6:0d:2a:dd:c5:4d:
d7:3a:6b:3f:c7:40:5f:ca:b4:54:b9:ae:8a:b0:7d:
4b:28:c4:29:1b:91:57:f4:48:7c:a8:7a:95:65:ab:
dd:e0:0e:f7:2e:c9:a3:d7:e5:61:e5:8e:0f:4d:cd:
9a:ee:28:64:90:b2:0d:18:0d:23:6f:d5:3c:9c:ba:
a1:32:df:5d:2c:8f:a4:18:48:cc:33:cb:2e:f0:48:
5a:ea:29:a5:47:84:57:e3:0a:8e:4d:05:64:7e:ea:
c2:28:78:f0:90:76:80:fd:b8:47:00:71:7f:8a:17:
76:69:a8:2e:e8:07:a1:46:cd:ae:48:5f:e4:38:ac:
5c:9c:e2:69:34:8e:e2:21:fe:eb:a8:dc:57:36:66:
bf:44:27:69:f6:42:57:99:bc:87:34:a3:7b:42:b5:
4b:22:b6:93:01:3f:fd:8f:15:23:52:32:d9:7f:1a:
4c:47:0c:90:45:8f:ca:5b:ec:b9:09:8a:58:30:8f:
67:87:1c:f4:25:e7:fc:60:17:bd:c7:7e:7c:2c:6e:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8B:88:BB:1F:0A:D5:F8:55:53:BB:D7:B0:3A:9A:B8:6C:18:B6:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/0643f9f7-9d02-32fe-847d-014edce56609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl
X509v3 Authority Key Identifier:
keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:90:90:f0:a2:75:d6:0c:2e:b3:27:ee:e0:fd:b2:32:fa:db:
0f:34:6d:fc:c1:37:3e:b2:41:e9:81:15:a3:3f:3e:35:0e:e0:
e3:32:a1:3c:9e:51:62:f7:06:54:9f:d2:da:35:18:8a:01:0c:
6d:8d:bf:b4:d8:25:82:54:72:ad:26:68:42:62:c0:1a:db:8f:
1a:97:88:5f:66:94:eb:d0:0b:dc:37:31:00:b8:b8:27:ad:c0:
b2:58:bf:db:67:9a:83:b1:d5:98:1d:e7:ec:67:35:31:e0:50:
87:d7:96:90:5d:20:db:3c:a5:77:07:6a:66:f2:8b:f3:91:f3:
5e:55:0f:f9:73:ea:70:d8:c1:63:dc:12:47:fc:42:84:8c:aa:
81:82:7c:68:c8:60:18:13:fa:8b:98:51:04:49:c8:28:9a:09:
55:a8:7d:cc:e1:38:10:7c:68:b4:c9:11:cd:48:3b:82:23:16:
3e:d0:c5:5f:26:fe:28:5a:01:ff:28:2b:7e:43:5f:fe:e0:f6:
b9:ae:df:c9:eb:ee:4f:51:7a:1b:79:0e:6c:29:91:0a:25:aa:
ea:19:e7:b5:03:ef:c0:9f:4b:82:74:45:ee:ae:52:29:72:4c:
2a:6d:87:82:1c:8e:6f:a9:bc:ae:2d:b7:4e:0a:5f:73:d6:c0:
67:07:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:56 2025 by rpki-client