Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
File: 853d2761-430f-3406-8353-e291e87c8b19.roa (raw, json)
Hash identifier: P/lOMVdKwvw7dmF293A4/BrrIfiYpQBlAkRjtytGkzk=
Subject key identifier: 2C:F4:26:FE:BE:5A:EA:0A:4C:78:0A:46:C5:03:1A:FB:47:2C:19:66
Certificate issuer: /CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098
Certificate serial: 010D0C9F43285848E16BED3E0F3C22F7F2124400
Authority key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 399935
IP address blocks: 23.168.216.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:ed:3e:0f:3c:22:f7:f2:12:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=b94000eb-45c1-4f1b-9d32-e3196be35666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b5:39:dd:50:48:56:a2:03:cc:3e:dc:56:44:
a5:ce:c4:25:e8:f8:f1:ae:2a:ee:a5:8a:09:92:96:
c1:1d:58:56:c6:1a:6b:b2:f7:cf:f8:32:2b:9c:93:
01:8a:36:23:24:40:81:63:78:6f:89:b8:b8:7e:43:
42:32:da:da:89:56:e5:9b:9b:a1:82:04:90:9e:27:
56:4f:2d:45:e6:9b:5a:75:c5:e2:ee:e4:bf:a8:81:
72:92:dd:ac:50:2e:c6:c9:44:ce:85:11:af:6c:60:
8c:d6:b3:6d:1c:06:66:4d:f6:19:a8:7a:41:cc:eb:
e5:0a:05:f7:8c:66:ff:de:07:a8:0b:46:20:20:ca:
ad:15:1b:17:57:fb:74:b7:2a:7f:9a:73:b3:de:cc:
00:67:d9:a6:84:26:ac:e2:f4:ce:b8:98:57:a4:7b:
d2:4b:46:56:fc:e7:82:04:eb:92:c8:4e:9b:cc:83:
de:51:48:68:d9:3f:f9:85:37:d7:64:c7:53:8a:a1:
90:78:69:82:e2:19:6c:25:9f:68:37:fe:90:8f:d6:
96:b5:c9:f9:9f:5d:77:87:f0:d7:7a:e2:83:b0:66:
99:55:cf:d3:5f:eb:01:7b:4c:68:b5:a6:04:49:eb:
80:a9:9d:7d:a7:0c:3d:b3:4d:5a:b2:e8:5b:a5:1b:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F4:26:FE:BE:5A:EA:0A:4C:78:0A:46:C5:03:1A:FB:47:2C:19:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl
X509v3 Authority Key Identifier:
keyid:10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:3d:80:b1:05:be:37:0b:3c:39:41:12:60:ca:78:4d:a1:99:
e4:7e:00:86:85:d5:14:e5:c3:f2:bd:9e:7d:a3:18:1d:21:77:
6e:86:9f:45:be:ef:c6:1b:5b:78:20:2c:34:60:b0:57:a8:76:
d6:6f:f1:3a:f8:6b:00:9f:2b:71:c9:84:2c:24:d4:c9:fe:92:
46:2a:f9:c9:93:3e:2f:1f:52:0e:67:1f:1c:07:22:13:75:59:
4b:5a:cb:b9:6c:b9:c0:2a:79:a4:b7:0c:97:65:b4:62:64:ba:
ca:c5:98:dc:14:4d:2b:3b:49:5a:66:ba:2c:12:a2:b4:e8:9f:
e4:e2:f0:5a:34:1f:de:b1:e1:83:7c:52:9b:61:b2:a8:d6:5c:
a9:90:cc:cc:c2:8c:43:87:6e:4f:e5:53:6c:10:cd:20:46:65:
e3:a4:11:3d:3e:c7:c8:28:7a:5a:55:0e:95:c2:e6:67:3d:e9:
30:f1:cc:cf:18:c2:42:dd:65:30:49:c0:fd:09:d4:77:6d:f4:
ca:57:45:2c:5a:27:01:0a:11:ee:c2:0f:8c:c3:45:14:39:4b:
53:1c:62:30:24:26:ae:60:32:59:5c:40:dd:19:2d:51:ee:8e:
26:70:ac:31:07:46:c3:f0:b1:38:6a:6d:f3:5d:aa:a8:8e:4f:
cd:79:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:21:01 2025 by rpki-client