Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/f1aabad7-2640-3f85-b0fb-3e9ba3626afb.roa
File: f1aabad7-2640-3f85-b0fb-3e9ba3626afb.roa (raw, json)
Hash identifier: OYGqgqgVSIcx7SP8ixkboiqe2rEIin+TA9Zq+lQeQPg=
Subject key identifier: 67:83:68:00:EF:D9:1C:06:39:31:57:76:81:03:C8:E2:47:F4:57:A0
Certificate issuer: /CN=238027b7-f885-48c0-bd75-bd1fe124e1e0
Certificate serial: 010D0C9F43285848B35B6957EE229E3ADB605680
Authority key identifier: A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/f1aabad7-2640-3f85-b0fb-3e9ba3626afb.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 398485
IP address blocks: 23.142.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:69:57:ee:22:9e:3a:db:60:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238027b7-f885-48c0-bd75-bd1fe124e1e0
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=c32a09d6-19ca-45bb-b9a5-1b707ec5ea0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:6c:48:6e:55:a8:b8:c4:bb:1f:83:00:9a:
e1:d7:1a:c3:de:1e:64:56:32:0c:bf:e6:92:f6:c2:
a0:25:db:65:dd:7a:dc:10:a0:11:02:cd:8e:24:4d:
2f:6c:b0:b7:0b:91:13:8d:af:25:6c:aa:23:b7:5e:
e9:75:d6:41:6d:08:e4:ec:13:c9:64:a9:67:a9:5c:
e2:ee:e5:34:9e:7e:ef:c7:a1:46:95:ba:8c:d8:f5:
79:76:90:ad:4a:b7:b7:0c:92:fd:47:8a:e5:bf:75:
42:c4:b3:d6:8c:23:56:56:23:13:4c:f4:38:f5:f4:
af:b2:9d:64:26:25:3d:c2:cc:55:82:be:ce:de:a0:
df:f0:02:5f:c9:d6:dd:ec:d6:60:84:fb:f3:52:10:
30:04:d6:bf:c7:04:3b:6d:cf:99:d0:59:04:37:60:
19:ae:6a:44:1c:26:94:35:e8:34:82:c2:2f:87:2e:
52:b7:e3:99:cc:59:d4:eb:25:6c:b3:ca:54:c9:4e:
f8:d4:03:6b:6d:11:4b:39:88:32:60:86:ea:57:59:
42:37:33:5d:13:9d:17:59:02:94:dc:c6:64:48:e6:
91:3e:f5:a5:c0:a3:ff:24:4d:18:ef:44:e2:32:c7:
75:24:bb:49:a5:28:88:f1:d7:e7:7a:15:2a:b5:54:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:83:68:00:EF:D9:1C:06:39:31:57:76:81:03:C8:E2:47:F4:57:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/f1aabad7-2640-3f85-b0fb-3e9ba3626afb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0/238027b7-f885-48c0-bd75-bd1fe124e1e0.crl
X509v3 Authority Key Identifier:
keyid:A1:A4:ED:D3:2D:32:25:51:ED:8A:2F:75:66:9A:34:E6:D0:D2:71:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/238027b7-f885-48c0-bd75-bd1fe124e1e0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.184.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:f9:f6:fd:7d:a8:f5:ac:60:f4:09:15:66:d1:46:56:bc:29:
51:3c:c9:70:f9:b5:70:2c:d9:40:01:90:09:af:8c:79:43:20:
07:79:4a:b2:6a:f2:13:34:38:84:79:01:57:f9:1b:4d:d4:1b:
d1:d8:28:4c:11:44:3d:5e:12:6c:c7:ab:2a:31:c6:37:d6:c6:
d8:09:b1:08:f4:71:cb:16:09:b7:90:26:6c:08:e8:5a:25:e5:
d6:f1:58:bd:a1:e0:d2:64:26:07:81:66:f3:64:5b:f4:7d:f6:
2c:c7:93:c1:99:0c:75:75:1c:02:0c:a5:c3:b1:50:b3:d0:5a:
fa:09:bc:ad:11:e6:55:85:75:7d:dc:93:d2:89:aa:0e:e7:fb:
ba:b6:e9:6f:42:2a:53:9e:81:17:c3:48:38:68:94:2e:50:c2:
da:90:82:01:40:6d:bc:a2:d6:c0:06:d3:45:84:63:5c:e0:7b:
ed:67:7c:48:98:5a:c8:f2:fb:c3:d5:64:8d:cc:c2:dc:bc:63:
77:0e:3a:e0:91:c7:63:bb:38:ac:00:b2:9a:9b:01:94:3d:dc:
ce:3d:8e:2a:1f:5c:5b:70:a0:2a:10:21:8b:27:18:af:eb:97:
57:99:7c:5d:10:e6:81:cd:5a:e7:80:e1:e1:48:ca:fb:71:f0:
a7:de:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:51 2025 by rpki-client