Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/71339838-6877-49f6-adb5-482e1ebebac5/a885ecfd-904a-385f-91e2-ddb3e8852fb6.roa
File: a885ecfd-904a-385f-91e2-ddb3e8852fb6.roa (raw, json)
Hash identifier: TqmRI1E4wsO+uuY1BzHV2zm3OSCulad2oI7qOTfA6+k=
Subject key identifier: 60:D0:7D:CC:3C:94:B3:7A:0A:59:C5:27:5D:B0:41:89:29:3E:35:18
Certificate issuer: /CN=71339838-6877-49f6-adb5-482e1ebebac5
Certificate serial: 010D0C9F432858488815E9820A049403B3EFA040
Authority key identifier: 4C:35:F7:23:E3:F1:14:A7:18:8D:56:5D:E6:94:D5:24:7F:6F:D5:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/71339838-6877-49f6-adb5-482e1ebebac5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/71339838-6877-49f6-adb5-482e1ebebac5/a885ecfd-904a-385f-91e2-ddb3e8852fb6.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 399428
IP address blocks: 23.172.48.0/24 maxlen: 24
45.42.224.0/24 maxlen: 24
2602:fcca::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e9:82:0a:04:94:03:b3:ef:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71339838-6877-49f6-adb5-482e1ebebac5
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=93c14631-8fbc-4fc6-840e-3f351d4de48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:91:72:2c:a5:e6:b9:2b:72:82:44:f6:fe:
98:bf:25:af:6e:ec:46:2e:bd:05:a8:48:88:3a:4c:
e4:94:75:6c:51:0d:20:c1:32:c8:37:af:45:ec:f1:
3f:9f:cf:c7:d0:fc:fb:b5:cf:5b:e4:07:ae:8d:4c:
1f:b8:7d:15:f6:60:d4:30:68:7e:68:f0:98:11:37:
8b:9f:b4:04:0a:dd:4e:32:c5:ba:2a:e9:a2:b7:86:
56:70:00:d6:a3:b9:01:7a:18:ab:dc:f0:d4:c2:af:
9b:de:c0:cd:1a:e5:50:2e:0f:e8:b7:8b:9c:4d:48:
ef:34:d6:80:e4:1f:5c:1c:a4:f6:a4:18:91:4f:a8:
a5:83:57:5a:cb:10:22:4b:57:35:c1:96:80:b2:2a:
25:5b:eb:f0:2e:1f:9a:f3:b6:43:bf:72:7f:3d:39:
99:de:b4:6d:2e:06:6b:d2:65:fb:01:2a:8f:f2:57:
21:ea:04:34:bc:7a:91:48:da:95:3e:cd:ee:cb:e7:
8f:ce:a3:b0:5c:e9:3b:93:1b:57:d8:c2:21:14:0a:
f5:2e:e0:00:88:7d:69:5c:70:a1:eb:db:aa:da:f6:
40:31:6e:df:c7:ff:af:9d:5f:22:fe:63:77:30:77:
6c:8e:53:9b:15:af:3d:02:7e:05:dc:31:68:1f:61:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D0:7D:CC:3C:94:B3:7A:0A:59:C5:27:5D:B0:41:89:29:3E:35:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/71339838-6877-49f6-adb5-482e1ebebac5/a885ecfd-904a-385f-91e2-ddb3e8852fb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/71339838-6877-49f6-adb5-482e1ebebac5/71339838-6877-49f6-adb5-482e1ebebac5.crl
X509v3 Authority Key Identifier:
keyid:4C:35:F7:23:E3:F1:14:A7:18:8D:56:5D:E6:94:D5:24:7F:6F:D5:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/71339838-6877-49f6-adb5-482e1ebebac5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.48.0/24
45.42.224.0/24
IPv6:
2602:fcca::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:41:2d:dc:fa:dc:44:93:23:de:29:e0:40:fc:7d:0a:bf:ba:
31:a3:04:8d:10:00:53:08:13:0e:ad:fd:1a:19:be:c4:85:7d:
ae:0e:b3:39:a9:9a:69:63:74:e2:a4:3a:03:57:20:66:c0:a5:
79:e8:1c:aa:6e:84:e6:6f:35:46:27:3d:3f:53:9a:c0:fe:01:
f0:8b:94:3f:c5:af:9b:2b:ca:0b:71:e8:16:56:c2:91:64:8a:
8b:93:37:0d:05:cf:3f:f2:57:ea:60:cb:a5:66:c7:67:d4:0c:
1a:0d:83:44:33:e4:30:08:15:10:e2:4f:a4:d5:9a:d5:0c:31:
75:c7:86:d8:1d:d7:c4:28:d9:c3:f5:ef:c9:3b:fa:90:7c:2f:
d7:94:27:8d:eb:fb:80:8d:aa:a1:06:e1:b2:62:ee:e0:48:ee:
aa:45:b3:d8:03:74:86:e1:1b:08:72:2f:6d:25:57:2c:6b:0b:
53:20:78:89:36:70:6a:68:0f:94:8f:a4:48:2e:35:f1:f7:8d:
de:c5:aa:1b:0c:79:53:52:a6:31:a7:3d:48:42:16:ee:94:ef:
70:fa:0d:18:28:0a:38:8d:fa:2b:cf:0e:cf:98:fd:e9:3e:67:
d0:5f:47:cc:d5:ac:f0:07:47:e9:ef:b7:02:79:13:9c:9d:16:
a6:50:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:49 2025 by rpki-client