Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
File: 97a9023c-3b6e-3158-89d8-efe63001f64e.roa (raw, json)
Hash identifier: Bs5bw2cMNXJw2e3BWnR7if1V9vR3DQVKcflb/a8o+04=
Subject key identifier: FB:9A:43:03:F6:3A:D0:3A:62:D1:74:28:27:F9:9D:C3:BB:B4:E5:5B
Certificate issuer: /CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
Certificate serial: 010D0C9F4328584898D6062419C4B7B2041B7000
Authority key identifier: 1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 62516
IP address blocks: 23.140.104.0/24 maxlen: 32
2604:4940::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:06:24:19:c4:b7:b2:04:1b:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd5f35d-5b02-484a-8e0e-a730abd98fa2
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=4083eb96-4c2d-4baf-8fdd-68471809057f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:7d:45:6d:c8:1e:6e:ba:05:83:1a:df:1e:
7d:38:c0:d0:09:85:ca:f9:19:b1:e4:15:2b:d0:9f:
64:bb:28:25:a4:6b:3c:11:f6:59:b1:39:61:51:73:
3c:48:d9:1f:c9:38:91:04:32:af:5c:db:86:89:5c:
13:8f:6d:25:3c:c3:cf:1f:0a:fc:c9:bd:3d:93:94:
1c:13:f2:6b:d5:d2:c0:a9:dc:33:48:7b:ef:ea:54:
08:b0:21:82:f3:2d:78:3f:34:55:53:06:0f:30:89:
4e:46:dd:2e:f4:4b:34:2e:09:8e:fc:79:eb:e6:20:
51:ee:fc:d1:46:9a:71:de:96:22:bb:a0:ce:b9:89:
18:2e:90:73:a7:ee:bc:d2:ba:78:3a:cc:51:53:6a:
8d:2d:21:85:e5:c8:bd:70:2a:20:7f:ca:86:ab:82:
d7:07:19:bb:db:f1:fb:40:b0:b4:44:d6:e4:8c:95:
2d:cd:c7:4f:5c:9f:07:42:da:51:3b:dd:84:24:4f:
40:16:9a:e2:a5:ac:25:99:48:98:0c:f1:f4:ee:d3:
b9:53:03:4a:be:8d:c9:90:fe:d3:df:9f:79:ab:77:
68:f5:8c:bb:9d:58:98:61:e2:52:90:de:80:42:3e:
25:7b:e7:f2:28:46:5b:eb:cf:4e:ff:94:e1:56:23:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:43:03:F6:3A:D0:3A:62:D1:74:28:27:F9:9D:C3:BB:B4:E5:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/97a9023c-3b6e-3158-89d8-efe63001f64e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.crl
X509v3 Authority Key Identifier:
keyid:1A:A3:E3:68:50:AE:CB:27:31:59:DD:A7:8B:1F:10:C2:59:10:9B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dfd5f35d-5b02-484a-8e0e-a730abd98fa2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.104.0/24
IPv6:
2604:4940::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:eb:e1:fd:7d:77:c3:b0:a4:9d:7d:7d:c0:7a:78:a4:22:f1:
18:38:5b:c2:c3:7f:c3:b2:d0:b1:9e:c6:63:0f:6c:14:7b:ae:
68:bc:69:96:95:0e:b1:e4:9f:c6:ba:3c:d5:55:d2:4b:7a:4f:
5c:20:37:3a:9c:e1:73:39:10:47:2e:ef:92:8a:4d:34:c5:a7:
fc:3a:45:ca:df:0b:95:e4:7c:c4:c2:ee:2b:fb:8f:f0:6f:fd:
bc:45:17:16:f1:70:50:11:6a:66:13:ed:f2:d1:4d:b5:e3:82:
a8:59:7b:00:77:8b:9d:f3:5e:46:80:9a:fc:af:24:ad:44:b2:
5d:cf:23:ec:0b:bf:52:8d:a8:79:83:91:92:8d:12:83:fd:fa:
91:1e:8e:b3:27:67:f2:ed:e1:c5:7a:1c:c4:9c:4f:ba:f1:93:
6b:cb:db:95:3b:f7:ae:f0:81:4d:03:3f:3c:bc:d7:e6:3e:92:
14:8a:41:71:1f:2f:11:fd:19:41:ef:51:d2:79:7e:50:af:7a:
2e:29:e8:38:68:3f:43:10:a2:f3:f8:11:a2:95:96:f1:38:52:
8b:2d:65:c0:74:1c:d9:2c:5c:b0:30:1d:3c:b0:3e:0c:77:16:
ed:16:36:a0:94:1c:a7:e2:6b:42:5e:21:ff:c2:15:32:d2:31:
6e:bc:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:03 2025 by rpki-client