Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/e0878dc4-e471-38f3-8737-f21b100be089.roa
File: e0878dc4-e471-38f3-8737-f21b100be089.roa (raw, json)
Hash identifier: Aq0QWX3fx9TuTNLzMUCB0WNgtiMac61jOnBvQ5vvnGM=
Subject key identifier: CD:E1:04:C9:D5:2F:E6:C7:40:ED:46:E4:C7:2F:DA:55:83:0F:AE:A9
Certificate issuer: /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
Certificate serial: 010D0C9F43285848C84B9D8A88629687C685EEE0
Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/e0878dc4-e471-38f3-8737-f21b100be089.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 40676
IP address blocks: 23.159.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:9d:8a:88:62:96:87:c6:85:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=bb72dc30-48ac-4aab-9093-b09243a40fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:0e:6d:0c:3b:ea:a5:5e:05:71:d9:ca:4d:
c8:4e:8e:c4:1a:fb:1f:84:8b:99:62:70:e9:ad:a6:
17:5b:88:8d:c4:31:fd:02:6f:35:53:cb:78:66:79:
92:c1:94:fc:7d:a1:e8:cd:93:48:cb:5b:e1:0f:9b:
6f:a1:15:e5:8b:f3:68:05:82:f2:ea:aa:41:5b:38:
44:1e:6a:64:50:58:5d:69:3a:4f:9f:cc:6c:f1:c2:
90:de:04:82:ac:28:b1:57:57:7e:98:af:c5:b1:d1:
c5:b5:0d:da:a7:c2:ad:1e:78:85:94:2b:89:32:b8:
c4:00:1a:a4:35:2a:39:63:31:02:65:2c:02:6e:85:
dc:3c:2c:93:4b:88:7b:1f:ca:dd:aa:93:31:69:52:
b2:d0:b9:12:6d:d0:15:88:47:0d:95:f8:d4:ce:9e:
88:e2:20:15:ae:5d:ff:82:f9:26:b2:dd:8a:2f:6a:
57:6a:d1:2c:02:a4:cd:50:8c:54:95:61:93:e4:e9:
6f:2d:69:97:48:42:ec:b9:aa:cc:75:db:e3:90:fd:
3c:c5:dc:8f:7b:77:d2:c5:68:52:77:cc:05:75:c5:
cd:73:0b:3e:8c:2d:be:ac:4a:43:5c:16:66:bf:19:
21:2e:1b:70:44:0f:9f:74:7a:c8:fd:ff:7c:17:3c:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E1:04:C9:D5:2F:E6:C7:40:ED:46:E4:C7:2F:DA:55:83:0F:AE:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/e0878dc4-e471-38f3-8737-f21b100be089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl
X509v3 Authority Key Identifier:
keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:d5:22:68:9c:0e:32:8f:18:e9:28:d8:f9:43:bf:04:d6:72:
37:b3:2d:cd:0e:e6:48:49:5a:89:01:ab:1f:c5:d5:6a:c0:b1:
10:2b:27:b9:ae:13:36:c4:93:8b:9c:17:34:6a:3a:ef:1f:ea:
b4:c7:a3:b9:55:d7:39:5d:c1:06:9a:5e:e6:d4:5c:28:51:98:
a3:35:a4:64:ad:df:c4:ff:f5:cf:dd:31:8b:28:cf:7c:d8:6b:
ee:90:61:31:05:d0:41:dc:82:52:ea:e5:9d:f2:6a:ca:a5:75:
0d:e4:73:24:a5:36:b4:3d:b3:e1:fc:f8:c4:50:3e:06:c8:95:
75:73:28:0e:e1:0f:22:2f:38:ab:bf:0a:ac:01:f5:59:27:2e:
25:ad:6c:3e:ba:9f:a8:63:23:9e:4b:65:05:51:92:03:75:88:
5c:18:52:a1:5f:73:0a:c2:e1:f3:cb:53:14:88:a5:97:31:ab:
fe:50:be:ec:a9:b0:b4:6e:2a:d5:81:1c:d4:9f:f6:b3:7f:ad:
ca:05:52:13:67:dd:63:86:d2:2f:f4:b1:ce:22:4d:bb:c8:85:
b3:72:29:11:f8:1a:ef:c8:99:66:ae:49:5b:81:45:3b:18:22:
7e:7e:fe:0a:5c:01:0b:28:65:cb:36:4f:06:f8:d1:cb:4b:8e:
b2:d1:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:17:33 2025 by rpki-client