Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/b662fd99-1a23-3aaa-9da3-01d3658ac226.roa
File: b662fd99-1a23-3aaa-9da3-01d3658ac226.roa (raw, json)
Hash identifier: nuecADyH2u1nfTUk/8rqhT8hE+Q/MB9Hwv6ukATV870=
Subject key identifier: DA:7F:31:66:06:70:FB:E5:3A:C4:8E:C9:58:5E:C4:D9:B4:87:86:96
Certificate issuer: /CN=e0d5040c-5662-40a2-8f67-208db4fb8fd0
Certificate serial: 010D0C9F432858487FB5E36F21AE543E40334400
Authority key identifier: CF:71:CB:79:56:FF:01:E1:12:CD:7A:F1:B0:1C:97:9F:93:A6:25:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/b662fd99-1a23-3aaa-9da3-01d3658ac226.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 53301
IP address blocks: 23.167.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:e3:6f:21:ae:54:3e:40:33:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5040c-5662-40a2-8f67-208db4fb8fd0
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=dff9094b-0d7c-4cb7-9435-d082b6c74f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:15:69:14:2d:c9:03:7a:fa:c1:74:20:06:
26:1b:d6:94:64:37:8a:6e:94:91:90:62:a8:66:b2:
68:03:33:14:cf:8c:19:a7:b4:55:2e:a5:be:b4:e5:
95:b3:ed:be:90:fa:5a:30:88:8c:e7:69:48:ed:4e:
0c:77:69:84:28:ed:9a:d4:41:43:20:37:d3:63:e3:
15:dc:7f:49:e0:7a:3a:11:05:cf:2c:c3:17:55:6f:
86:69:e5:ae:6b:14:a6:cf:33:a6:07:b2:77:67:a6:
ec:c5:c7:5f:21:2d:69:48:59:29:c5:68:75:a7:de:
d8:d4:1b:a1:18:c2:80:d3:c5:bc:19:08:cb:f6:82:
42:d1:c5:46:89:a6:75:ad:e0:4f:ff:c0:60:32:a0:
ff:0b:e9:e5:55:a3:8d:cb:ed:ee:68:ea:3b:bf:5d:
e4:02:2b:9f:f0:dd:3f:30:c2:f8:a4:a4:ef:1f:21:
b6:a3:a6:7a:e4:3f:58:ee:bf:a0:1a:00:ab:fd:d4:
18:dd:f6:17:c9:9f:23:fe:49:0b:c4:8e:f3:24:bd:
af:5c:29:32:18:84:28:22:b9:00:47:2e:4b:05:69:
92:ed:c7:d9:9d:09:45:78:99:31:3e:d6:e2:a9:69:
1f:f6:c4:a2:39:f4:c8:19:8c:2e:9d:cd:fc:2b:d5:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7F:31:66:06:70:FB:E5:3A:C4:8E:C9:58:5E:C4:D9:B4:87:86:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/b662fd99-1a23-3aaa-9da3-01d3658ac226.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0/e0d5040c-5662-40a2-8f67-208db4fb8fd0.crl
X509v3 Authority Key Identifier:
keyid:CF:71:CB:79:56:FF:01:E1:12:CD:7A:F1:B0:1C:97:9F:93:A6:25:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0d5040c-5662-40a2-8f67-208db4fb8fd0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:0d:57:03:17:bd:69:1d:99:61:ba:c0:c6:11:54:07:0a:bd:
15:87:3c:fb:47:c1:a3:c7:f9:62:85:5a:d1:58:8d:3a:31:8b:
ef:8b:bc:1e:f3:82:64:fe:fe:79:0d:4c:f8:87:c8:3f:03:4e:
c1:26:1c:9d:a5:ee:d5:1b:4c:dd:1a:7e:c5:ab:9d:8a:d6:30:
ca:fe:d3:29:75:7b:d5:b1:06:c2:e5:f0:b0:97:fa:b8:5a:4c:
fd:73:0c:07:2e:fc:d4:11:78:61:08:ea:7b:a5:45:a3:e7:b4:
fa:4f:79:d7:e6:28:24:13:e5:6d:3e:55:77:a4:ba:e7:8a:18:
42:0a:7d:a9:9c:d5:bc:79:6c:bb:9e:a4:f5:0f:c5:e3:45:d5:
b1:58:93:91:77:d2:e0:a8:21:c9:25:93:28:08:00:4f:c0:a3:
76:07:44:6b:98:af:33:c4:7c:c0:a5:22:8a:e5:23:e7:b6:37:
6a:6d:b8:3b:56:8a:b8:0a:68:a2:14:ef:3a:e4:35:91:f1:cb:
fc:81:06:6a:f2:79:79:12:06:20:6e:8f:5b:36:ab:18:45:35:
03:ef:fb:c4:0d:a7:51:43:1e:e3:cc:ef:6f:67:7f:33:4d:cd:
5b:1e:76:19:8b:14:c2:4b:1f:9b:07:42:2e:33:37:49:57:e2:
67:17:f9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:54:55 2025 by rpki-client