Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa
File: f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa (raw, json)
Hash identifier: h8sZ/bHzXLciSK6wAxAfkDIUV5+8s2BXFDq15xhjFb8=
Subject key identifier: AA:3A:DD:51:BB:78:78:A8:E1:67:E7:1B:2A:C9:3B:8C:2B:9D:B7:3C
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C43210C54FF2379B2F95E0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 23.235.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:32:10:c5:4f:f2:37:9b:2f:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=41b634cd-a791-46b5-8111-6ac213c8dc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:a0:c3:a2:7b:3c:2e:2a:49:b1:4c:c2:b7:
37:b1:24:fc:0f:e1:ac:b6:0a:20:29:ed:db:ba:5e:
c2:d7:60:de:67:92:54:2b:4d:c6:6b:6d:48:a6:51:
86:74:ee:d0:71:67:f6:f4:f6:6a:07:d7:39:c1:3c:
35:ad:24:89:62:da:1f:aa:9c:97:f9:67:5d:59:08:
84:84:1b:aa:51:00:f1:96:70:d9:ff:9e:80:95:ea:
60:3f:88:11:d0:8f:73:44:5a:1a:d4:7f:94:46:8f:
0b:02:dc:ae:1b:cb:13:41:ca:a2:48:fc:b3:3d:5f:
18:0a:bb:3b:57:6e:8b:16:63:5d:2b:ae:7d:be:a8:
92:9b:44:76:d1:93:31:b4:c7:6e:62:1a:bb:13:d1:
42:a0:39:3b:41:d7:a3:53:88:df:90:36:01:91:62:
aa:22:cb:c8:42:f2:bc:36:72:0c:2e:f0:39:a2:99:
24:f6:49:de:85:6a:61:c5:73:22:c6:f1:e5:1e:a9:
4b:f1:7b:1e:31:b1:02:bc:b5:0c:62:6c:8b:fc:ca:
b2:88:0e:c2:a3:0a:e9:19:86:6a:7e:a1:f8:bc:63:
37:48:bf:7d:60:8b:1d:7e:33:32:2e:03:fc:0e:b6:
5e:b8:5a:00:88:49:55:9d:51:09:af:62:dc:05:84:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:DD:51:BB:78:78:A8:E1:67:E7:1B:2A:C9:3B:8C:2B:9D:B7:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f95c153a-ffa8-3b75-b0a0-97514874b1b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:56:b9:1f:18:47:3e:ed:e8:bf:51:cc:be:e2:b5:8c:92:3d:
99:e0:31:63:ee:5d:f2:97:18:2c:c5:a9:11:fa:cc:c4:36:5f:
5e:6c:06:74:45:62:22:93:6c:c1:28:a3:1b:2a:33:58:5b:15:
5a:07:7c:53:3e:9e:fd:6c:a9:8a:36:b4:57:af:4d:b8:91:95:
50:69:0d:cf:b2:7f:9e:a4:d2:a8:08:46:e7:28:15:0b:ae:8e:
bf:6b:f0:cd:1d:e4:18:a8:e4:c7:15:7d:7b:3c:db:d3:7b:9d:
18:e4:6b:0b:cc:77:4a:ad:fa:b2:d7:7d:24:1e:6b:ed:f0:d1:
3c:be:1c:f1:d3:56:c6:22:ac:66:b1:98:98:7d:93:4f:35:98:
42:d6:56:db:44:b8:04:41:22:c2:84:cd:a4:f7:84:9b:2b:fe:
43:29:9a:83:ee:46:a9:90:d0:20:f0:66:55:ac:f0:44:82:f1:
c6:3e:8d:5b:01:ca:ec:cd:21:59:cd:9d:4a:49:f7:85:f8:f5:
e6:70:13:3b:96:45:53:d8:8a:60:48:0a:10:1e:2d:8d:2a:59:
c4:c7:b3:aa:35:bf:2c:f9:97:a5:7e:1e:46:21:fc:1f:66:78:
5c:8b:36:11:20:3b:92:d8:1f:7e:58:cd:2d:39:a3:e0:f0:98:
06:e5:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:51:13 2025 by rpki-client