Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa
File: dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa (raw, json)
Hash identifier: 68JhqZUNItiJVTQJZKV1rokVxOpaNZ0QdBxPuoe7+sQ=
Subject key identifier: F2:6F:F8:29:CA:F1:59:01:28:84:F7:A0:89:D2:61:C9:F7:02:0C:62
Certificate issuer: /CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e
Certificate serial: 010D0C9F43285848AF2B80D55EFE6D39B9AB9400
Authority key identifier: 58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 400289
IP address blocks: 23.132.40.0/24 maxlen: 24
23.152.8.0/24 maxlen: 24
2606:9440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:80:d5:5e:fe:6d:39:b9:ab:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=85f5aa6c-a354-4632-b35f-0aea328921c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:39:1f:c6:db:06:34:2e:65:33:54:c0:6c:
67:6b:a9:bf:23:06:f6:ad:6f:98:8f:7b:ca:38:ee:
8d:dc:88:6d:03:e3:56:1f:28:d9:c0:a1:d2:44:a4:
55:de:dd:52:71:8c:06:96:b3:71:9c:5f:06:54:b9:
c5:e5:82:70:a2:ba:a4:06:de:bc:b6:74:8d:f7:87:
87:19:cf:d7:b5:86:94:dd:64:ac:c1:99:5a:81:af:
ac:a0:e4:83:7e:29:09:f9:ca:81:4a:8b:8d:b3:ef:
97:00:35:26:30:c5:69:92:5e:56:4d:3b:9f:a7:b1:
99:69:04:27:d3:c5:d7:ed:77:b7:14:94:13:27:eb:
27:6a:9e:c9:64:21:d8:38:ec:75:4a:d6:97:b6:88:
75:77:f9:57:7b:2c:18:c4:dd:1a:86:77:5e:e6:2a:
52:9f:65:fc:75:39:0a:17:05:4f:01:f2:2e:2e:60:
1b:0a:69:09:a9:a0:d1:ad:9d:2e:b3:e2:c1:82:31:
f8:f7:e9:58:88:40:c9:2b:5a:66:db:e4:0a:c6:36:
c4:9b:b2:c2:58:33:bf:40:96:c9:2e:1f:90:c8:1b:
b4:a3:78:09:f8:eb:88:a7:aa:63:ab:e0:06:92:b7:
b8:a7:8b:ed:bd:54:bb:8d:75:0b:f0:93:bb:bb:da:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:F8:29:CA:F1:59:01:28:84:F7:A0:89:D2:61:C9:F7:02:0C:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl
X509v3 Authority Key Identifier:
keyid:58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.40.0/24
23.152.8.0/24
IPv6:
2606:9440::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:9e:63:4b:eb:57:93:83:b8:7e:92:29:9b:8b:88:46:3e:32:
ac:25:20:ed:bd:e8:7f:f6:02:2b:6b:c4:db:21:11:8d:a3:98:
4a:6a:e7:b3:b3:37:e2:ea:ee:d1:60:15:9b:fb:1f:0e:29:d3:
77:f4:8d:1d:a0:e3:3f:65:63:7a:66:b1:5f:48:8a:51:f4:ce:
24:88:db:d2:97:a5:69:3e:98:f6:47:05:59:eb:30:0b:3d:2b:
68:61:84:fd:cf:4d:94:ea:8b:7e:28:40:c4:e4:97:69:09:6d:
fd:7b:f7:b2:6c:17:93:81:e6:6a:0b:40:af:6f:ec:36:a3:34:
ad:68:cf:a2:b0:d9:71:5b:bc:9d:9d:3a:93:31:c1:c0:5d:15:
69:91:74:a9:62:dc:5c:cc:b9:fb:e2:a0:f8:24:b3:18:f1:74:
ea:06:78:29:fe:41:53:5c:be:aa:46:f3:8a:36:5d:c6:3f:e9:
fd:8d:eb:db:78:5c:57:a1:9c:c0:21:68:89:03:cd:81:d8:cc:
eb:d0:af:06:f4:06:9a:2c:7c:47:a7:3b:24:d6:04:0e:c9:c7:
98:53:03:03:0e:fc:88:6c:79:e5:29:bb:ee:1b:ad:37:b5:b1:
84:97:f5:35:d3:85:13:2a:26:5b:66:8c:77:3c:2e:45:a7:27:
aa:7b:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:24 2025 by rpki-client