Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/67d8aba5-4235-3a29-9c34-d3fa83a59c23.roa
File: 67d8aba5-4235-3a29-9c34-d3fa83a59c23.roa (raw, json)
Hash identifier: nwSlXiIcMhVW730nthp/ye+pRXnOCzAyiUcFeEJOI7A=
Subject key identifier: B6:D3:59:8C:EA:C6:45:6E:80:92:3E:FE:14:F4:9B:FE:98:CB:B4:FE
Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Certificate serial: 010D0C9F432858480D3FC3001D27892957881040
Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/67d8aba5-4235-3a29-9c34-d3fa83a59c23.roa
Signing time: Sat 30 Nov 2024 14:00:50 +0000
ROA not before: Sat 30 Nov 2024 14:00:50 +0000
ROA not after: Fri 28 Feb 2025 14:00:50 +0000
asID: 19814
IP address blocks: 23.189.120.0/24 maxlen: 24
2602:f805::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0d:3f:c3:00:1d:27:89:29:57:88:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Validity
Not Before: Nov 30 14:00:50 2024 GMT
Not After : Feb 28 14:00:50 2025 GMT
Subject: CN=69a1fe9f-8a5b-4cfc-9a91-a999fe12dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:76:7e:8f:7b:a9:aa:93:b6:b6:71:72:9b:
9c:e5:86:ec:85:94:91:4f:c5:8e:c3:b5:be:5e:e2:
d2:5e:3e:0b:f3:63:c0:8f:3a:36:3a:18:5a:a4:c8:
1f:f7:cd:32:9c:27:a2:89:71:48:95:c9:ba:ec:a1:
3d:79:19:88:d2:50:53:96:56:97:db:38:bf:22:d3:
ce:5f:b5:e1:ec:2f:66:d6:e6:54:cd:72:0a:a3:2c:
ce:06:12:54:40:51:90:e9:f7:07:c1:cd:4e:4e:b4:
de:49:e5:11:76:9b:da:c6:3b:76:65:63:6c:4d:a9:
da:25:99:97:c7:30:94:51:e3:d3:55:ba:b7:85:49:
02:d9:00:b4:2b:38:ad:8f:e8:fa:01:d0:85:58:12:
f1:06:7b:4d:93:b8:fb:3c:3a:09:1d:cc:5c:3b:18:
d7:81:6c:15:0c:68:d4:3a:b4:43:69:24:75:63:32:
78:69:f5:79:e4:ec:69:6c:df:88:17:49:d1:75:17:
65:2a:16:12:57:7c:06:42:45:9b:33:07:b2:9d:e6:
43:de:c0:a7:02:91:b8:5c:6c:4d:39:2a:39:ad:00:
2e:80:72:e3:e5:72:58:1f:06:29:07:3f:0a:49:be:
1c:a1:ae:6b:f7:38:70:b0:84:bf:2f:61:e1:e3:d8:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D3:59:8C:EA:C6:45:6E:80:92:3E:FE:14:F4:9B:FE:98:CB:B4:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/67d8aba5-4235-3a29-9c34-d3fa83a59c23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl
X509v3 Authority Key Identifier:
keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.120.0/24
IPv6:
2602:f805::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:3f:d8:01:fb:73:fa:38:43:5d:72:be:af:b0:97:4b:14:be:
5c:98:32:4b:31:01:5a:f0:ea:15:51:0a:91:b6:3f:30:5e:a6:
c0:fa:e5:29:ce:f8:58:e1:13:7f:4b:a0:fb:5c:0f:1e:83:1f:
2e:a6:00:09:2c:62:f6:1c:94:a2:02:55:b2:d4:ea:d5:d5:5a:
fa:95:cc:6e:58:45:d5:c1:0b:b9:68:7d:10:25:f7:d2:b3:01:
3a:6c:ca:2f:10:75:e4:e7:39:99:7c:8e:7f:4b:fe:06:f7:c4:
d6:66:f3:70:d1:fb:91:f7:53:0c:83:36:64:fb:8e:79:04:8a:
d9:1a:db:ac:c2:cc:24:d5:dd:ce:e4:a5:42:6d:61:6a:ad:d8:
e8:31:f1:c6:c3:b6:e0:db:87:57:52:2c:01:3c:b0:09:01:5b:
66:19:e5:22:7c:42:e8:0b:f8:76:8d:31:ef:26:3d:08:f4:30:
30:95:e9:cf:d2:77:e0:05:dd:18:13:f3:75:2d:1b:cc:3b:1d:
b5:91:8a:96:5d:5f:dd:25:92:40:77:78:c5:d8:40:df:f5:f1:
1d:f7:5e:10:72:2e:53:33:63:2c:19:e9:af:6d:fa:a4:f6:8c:
89:ad:bf:f7:17:97:73:c1:ad:32:09:85:ed:95:af:d4:c5:96:
54:c6:c4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:51 2025 by rpki-client