Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa
File: 1c619daa-16a4-38fb-850d-9cd5873b1468.roa (raw, json)
Hash identifier: /J20E0vlFNwNTYVEYoTvfo6ZgdgmcEl9Fl8rvx0Ef/o=
Subject key identifier: CA:3B:37:81:C8:37:7F:EB:77:8B:AD:DD:22:27:58:E6:14:53:AD:68
Certificate issuer: /CN=25d202df-6bec-4085-8c1b-d1f141557cfe
Certificate serial: 010D0C9F4328584930DE71B168654FC4B0991890
Authority key identifier: 62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 61317
IP address blocks: 23.144.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:71:b1:68:65:4f:c4:b0:99:18:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d202df-6bec-4085-8c1b-d1f141557cfe
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=bf734348-79fb-40fe-8233-a26395bbd645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:96:d3:60:b3:39:1d:33:6f:f3:ee:fe:fa:
6c:e6:6f:9a:70:4d:39:85:ad:80:26:c2:4b:ed:d4:
be:18:e8:7a:da:bb:a1:a4:ae:9c:01:b3:95:83:fd:
25:92:ce:46:ab:8c:11:9b:84:c2:7c:4b:f8:cb:03:
ed:0c:64:16:f0:a6:18:a2:da:61:cf:6e:0f:8b:c4:
54:14:1a:d6:51:a7:80:e6:cc:a8:35:cd:0d:1d:34:
9f:f4:8f:f2:f0:f3:58:37:06:cf:ca:64:2d:4b:dc:
db:dc:94:a1:fb:5e:81:e5:23:2d:2f:05:f6:38:40:
f7:6d:c2:06:62:0a:73:4a:8b:d0:64:a8:b4:d6:c0:
37:5d:0f:c1:de:43:16:92:40:c4:d4:f2:c3:28:41:
0a:29:a5:8f:1c:fc:76:93:ae:5b:28:8d:44:8b:a1:
88:8f:59:cf:30:3e:5b:a5:8c:b3:a9:c7:71:9f:de:
48:40:67:c3:f9:6e:53:2f:97:99:26:8c:3b:80:e7:
5e:4f:7e:e0:7d:96:86:21:ec:ee:ec:af:c3:bb:8e:
9b:ed:c0:e2:a6:f4:c8:79:68:95:0f:7f:f1:1f:3f:
7d:08:9c:a9:6d:28:fc:6a:2a:2c:ba:81:a4:40:d0:
ab:cd:60:05:f5:cc:83:8c:cc:86:7b:41:25:47:0f:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:37:81:C8:37:7F:EB:77:8B:AD:DD:22:27:58:E6:14:53:AD:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/1c619daa-16a4-38fb-850d-9cd5873b1468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe/25d202df-6bec-4085-8c1b-d1f141557cfe.crl
X509v3 Authority Key Identifier:
keyid:62:29:36:6F:6F:B8:51:FB:6E:F9:A7:A1:71:11:EB:58:47:04:11:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/25d202df-6bec-4085-8c1b-d1f141557cfe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:28:25:db:6d:7b:72:df:04:af:5e:e7:e6:a3:c3:b7:4c:9d:
1c:d7:44:2c:30:cd:70:c2:0f:85:e2:23:20:65:29:63:eb:70:
0c:ca:2b:a7:c4:c2:0f:fc:3c:8d:f3:90:93:93:12:8e:e2:a3:
62:9b:e4:bb:c6:a5:32:9f:50:70:87:6c:f1:4e:3d:9b:3c:83:
53:cd:7c:49:0d:6c:13:af:6a:07:a1:0a:e4:e5:e2:77:21:4d:
72:8b:52:12:dd:8a:e8:b1:47:64:fc:bf:e1:3c:a0:95:1a:6f:
6f:86:a7:e9:b8:7d:f2:f6:ef:98:d0:34:7e:59:b3:b5:1e:e1:
7f:52:9c:7f:2f:de:30:bd:15:cf:57:c9:7f:e4:d5:f6:6d:81:
36:ef:11:f0:e4:bb:05:a0:92:7c:0a:a3:9b:15:ca:e5:04:a9:
29:ce:1c:07:88:ad:57:47:5a:54:32:ec:0e:59:96:dc:67:2d:
4e:58:de:0c:6d:e2:a8:bf:a7:81:b5:58:66:0a:81:03:40:04:
5a:eb:cf:2d:74:c8:29:f2:fb:d8:a8:bd:ac:aa:25:90:33:7c:
27:7f:67:52:ca:66:fd:f7:30:46:29:6a:4d:4b:92:6f:fd:83:
47:a0:10:b7:9f:5b:81:b1:16:b1:31:66:f4:ae:6a:5d:e9:49:
36:ed:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:44 2025 by rpki-client