Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/ae9867d9-2099-3f7c-b5ee-9ee7e32c07b1.roa
File: ae9867d9-2099-3f7c-b5ee-9ee7e32c07b1.roa (raw, json)
Hash identifier: I734GaP3LS+TMKMlmZymbiynAvSWd7SbCFpxWxb9Nuc=
Subject key identifier: 51:C6:66:5E:59:4B:74:D7:27:3F:96:FC:F7:C0:FD:C7:45:9D:5C:BA
Certificate issuer: /CN=9945234d-5624-4733-92d1-ade3a2f33d87
Certificate serial: 010D0C9F43285848A9961CDEC711430BCC10CC00
Authority key identifier: D3:66:36:50:71:06:87:48:42:24:DB:59:40:16:6B:51:19:9E:DF:4F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/ae9867d9-2099-3f7c-b5ee-9ee7e32c07b1.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 397614
IP address blocks: 23.137.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:1c:de:c7:11:43:0b:cc:10:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9945234d-5624-4733-92d1-ade3a2f33d87
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=ff0306e3-8456-4e27-84c5-e1e4ca1b0b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:db:73:5e:a2:ea:10:ee:d3:e9:85:30:df:
b5:2b:57:14:e6:32:a4:42:6b:5b:26:5b:08:7f:e1:
9a:e6:0e:62:57:1d:ce:38:1c:56:2b:fb:b6:cb:af:
92:aa:38:6a:67:78:64:80:97:08:e5:f3:cb:f6:3b:
9d:35:4a:3f:f2:be:48:e5:9a:18:98:d1:38:fc:99:
1c:5a:48:cd:c5:ad:fb:74:99:e7:9f:1d:7c:60:16:
91:1e:40:df:77:a5:73:51:34:7b:d9:2a:52:f9:92:
b2:60:ae:80:ef:63:c6:8e:8d:f3:0b:68:30:e7:65:
1e:3f:87:37:b9:be:76:ad:37:aa:e8:b1:11:6b:19:
45:6f:dc:15:52:d6:94:84:ca:74:ea:ec:8e:73:16:
f0:c0:00:8d:ab:86:d0:ba:fd:ea:47:b7:5e:e8:81:
e6:87:d8:67:91:1e:32:17:2e:e8:79:23:92:8b:21:
b9:1f:09:04:12:dc:41:7b:1e:14:2b:b8:96:66:9b:
47:d6:3c:b3:5a:3e:83:72:c6:9e:54:9e:6c:19:0e:
1b:5d:3f:31:fd:c6:f1:7f:84:d2:3f:e1:33:e9:4f:
c8:76:89:56:91:65:5b:8d:58:ff:51:4e:a3:18:d3:
cb:bb:d1:90:b8:17:4d:76:df:a1:08:12:c9:7a:59:
0e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C6:66:5E:59:4B:74:D7:27:3F:96:FC:F7:C0:FD:C7:45:9D:5C:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/ae9867d9-2099-3f7c-b5ee-9ee7e32c07b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87/9945234d-5624-4733-92d1-ade3a2f33d87.crl
X509v3 Authority Key Identifier:
keyid:D3:66:36:50:71:06:87:48:42:24:DB:59:40:16:6B:51:19:9E:DF:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9945234d-5624-4733-92d1-ade3a2f33d87.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:f1:87:a4:7b:ae:1e:d6:91:22:24:1e:9e:42:1d:ec:44:fb:
97:a4:ab:51:d1:7b:44:17:53:19:04:01:35:32:e3:ac:aa:c7:
28:08:1d:f9:40:e7:e3:58:26:d2:3c:61:78:23:0a:e9:aa:63:
38:65:e3:c8:f4:5a:74:78:b4:28:52:f1:2f:d1:09:b1:5d:dd:
e6:64:65:da:86:d1:b3:48:3a:5b:c6:43:ec:cb:20:65:88:52:
d6:76:90:5b:c8:78:02:c4:54:12:4f:d1:93:d0:15:5b:d9:78:
82:95:7f:00:c7:43:6a:49:69:cc:2b:28:50:64:f2:56:be:78:
40:f4:4d:00:ad:ef:c9:bb:c7:9a:34:5b:3e:c1:6f:52:80:02:
67:f8:cc:6b:ab:ab:7a:96:16:ac:92:1b:39:88:5e:36:1c:ee:
3a:ed:93:d8:3d:a5:fc:ba:6c:1a:d9:5f:e5:d1:23:82:7a:05:
71:4f:ed:f4:65:e2:78:c8:ff:0b:a5:3f:c1:1f:ba:f3:aa:ea:
fa:54:9f:c3:9c:af:c2:b2:9e:06:0b:29:18:c9:32:a9:75:8f:
57:45:b1:32:03:9c:55:28:8f:b9:3f:36:8f:dc:32:fe:6d:4f:
d5:2e:78:09:dc:d5:3f:89:44:81:8a:5e:57:06:c0:08:3c:88:
14:ec:77:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:49 2025 by rpki-client