Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa
File: 856f6f8b-6115-3749-b368-928efb2b3cdb.roa (raw, json)
Hash identifier: j6I0vkbdr0LwCfQMG7MjXE/+bQWZL1mCLyqukls9PP0=
Subject key identifier: F0:53:41:D3:2C:9F:37:2F:96:D0:1C:25:72:CC:4B:C1:07:0D:FE:36
Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial: 010D0C9F432858490B4C2774A40B6E5FFA0B6280
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 21738
IP address blocks: 23.150.41.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:27:74:a4:0b:6e:5f:fa:0b:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=ac3b091b-76d1-4875-84d0-3f8aa66ca4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:66:d9:04:a7:9e:d5:fb:3b:5f:68:10:bf:
6f:0d:3c:27:dd:23:2b:fb:82:a6:4e:5c:d0:62:cc:
a9:ff:76:c1:1a:71:62:ef:3c:ae:08:9f:9d:d6:04:
d4:59:f7:b2:e1:f6:f8:2e:2b:f9:8c:de:f1:44:9c:
ea:9c:3a:c8:03:46:b3:65:40:4c:e6:29:97:fb:8d:
65:34:2a:42:6d:f0:56:d6:ff:6d:b7:fc:a1:0a:19:
8f:4d:26:b1:c2:cd:62:81:a1:52:4a:fb:99:f8:72:
48:48:06:e2:16:61:5e:a7:b3:32:9e:33:8b:91:0e:
c6:20:a2:5a:4e:b4:89:c4:4d:25:18:c9:f2:02:16:
55:f0:9e:d7:a1:88:0c:6c:a4:95:77:d6:e9:74:39:
ef:aa:4a:8f:9d:e6:d3:97:59:3f:4b:36:30:84:b5:
85:bf:6e:f1:44:78:cf:8d:bf:fd:9d:c5:e0:16:87:
f3:77:9e:d0:52:24:4a:60:aa:13:51:e1:7d:7f:f8:
28:21:6e:2b:14:03:90:53:19:17:94:d4:88:de:48:
ee:65:16:50:00:f0:9d:bc:43:3d:e4:10:11:67:84:
ba:06:8e:dc:f2:9d:29:25:e8:b8:ec:0a:78:52:61:
d3:f2:7f:5d:7d:89:0e:d5:b9:e6:93:4b:41:54:46:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:53:41:D3:2C:9F:37:2F:96:D0:1C:25:72:CC:4B:C1:07:0D:FE:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
X509v3 Authority Key Identifier:
keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:f2:2b:59:76:f1:6c:3d:1e:6f:c0:76:bd:e8:a8:75:6c:3e:
4f:8e:a2:16:70:99:62:91:78:aa:4a:ac:cb:66:d8:6d:32:28:
7b:5a:c0:40:38:ee:80:94:7c:09:a5:5e:97:ed:0f:e7:cf:a2:
3e:41:b4:ca:7f:8b:9a:d1:18:04:c0:5a:8d:91:46:c7:d7:84:
bf:1b:97:56:95:34:84:eb:75:72:6d:a5:95:96:8f:ba:6a:f6:
3c:5b:7d:48:83:d3:cb:cc:92:12:af:e6:20:fc:ac:2d:70:fb:
40:31:5a:91:82:6b:4a:03:16:0a:e6:6c:ee:e9:22:c5:27:46:
59:6d:95:cb:fa:af:18:7c:4b:8a:be:e5:b5:22:e8:27:3d:68:
ed:52:a2:55:aa:0f:c5:cd:28:e0:57:3a:27:c0:6e:0e:5c:6b:
7a:db:ff:b8:1b:92:57:fd:4d:a5:d4:45:7d:98:b1:8c:4e:5d:
bd:29:8a:e8:53:65:f4:a6:33:63:bc:56:ac:96:3e:1e:ab:4e:
93:61:16:a6:41:06:9a:f0:27:6a:c2:a6:fe:9d:59:d5:f6:3b:
22:12:f3:51:05:6e:0a:e6:9b:f1:88:ca:a0:b8:f7:e4:a0:86:
29:f3:99:dd:10:ac:80:ef:8a:c4:3c:60:3b:fa:70:22:41:98:
d1:50:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:33 2025 by rpki-client