Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa
File: 0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa (raw, json)
Hash identifier: ORRGhW+BLLNVFZ/KgNEd5J1xt8EqAAUpOLa/3piQpUw=
Subject key identifier: FD:6C:57:87:7A:BF:D8:95:3A:CE:71:90:F5:90:75:F0:19:41:5E:1A
Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial: 010D0C9F43285848E2D119F1F28F4316A5293E80
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 8075
IP address blocks: 23.141.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:19:f1:f2:8f:43:16:a5:29:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=296e762d-8b6c-49d6-ba5b-f236c33d58e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ef:b9:0e:51:cd:11:b2:9b:14:17:35:87:56:
34:a0:08:78:84:3e:03:81:3f:a0:93:32:dc:d4:59:
47:16:96:0a:38:9e:4e:85:fa:0c:19:62:ea:22:60:
33:b8:a4:62:2d:44:7f:3d:46:97:25:b5:95:c2:bd:
88:3e:c6:9d:11:12:64:ef:31:86:40:db:f6:0c:6c:
68:91:c1:91:69:cd:b9:c7:b7:7c:fa:18:3b:48:cf:
5d:ef:ab:26:92:ea:d5:dd:52:29:a1:3b:53:d3:09:
69:87:76:af:b0:87:85:f4:5e:5d:65:3f:c1:ba:a6:
ca:22:fc:d7:99:9e:3f:4a:f0:0d:d8:b9:81:04:00:
f5:81:cc:8d:37:69:a2:fc:0c:d0:fc:67:9d:0c:7f:
32:44:d7:12:30:6d:81:2f:48:39:a2:2b:8d:68:a2:
16:11:99:9b:27:4d:5f:4b:53:eb:31:d9:2d:75:c6:
79:d5:b2:8e:eb:f7:13:a3:45:21:72:47:b9:f8:6e:
0a:9b:0f:6c:dc:da:9b:63:a8:07:0b:09:55:82:28:
6a:30:f9:ba:29:3a:16:73:5a:39:70:90:2c:e5:f6:
46:e3:f6:9c:73:c6:71:50:b2:18:a9:cf:49:31:0a:
ac:2c:59:c8:0a:d2:91:aa:83:7d:d4:89:c8:8a:32:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6C:57:87:7A:BF:D8:95:3A:CE:71:90:F5:90:75:F0:19:41:5E:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
X509v3 Authority Key Identifier:
keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:63:ad:de:23:e1:61:53:61:57:27:e2:dd:fe:42:cd:6b:ce:
a6:d6:b4:a3:e4:8c:f0:c2:61:19:db:58:c9:ea:33:34:b0:dc:
12:9a:9d:ca:61:f2:9c:f0:37:fb:c1:a8:47:f3:cc:c3:5b:b9:
b1:72:da:e2:5e:54:4c:e0:ce:a5:53:50:04:e3:79:fd:7f:2a:
8d:83:b3:53:b0:b9:9b:77:ab:f3:8b:e0:0f:a4:47:79:df:9f:
8c:c8:86:85:a5:24:87:ba:1b:ad:56:ac:c7:c8:fd:90:e9:c0:
e1:a7:40:f0:f9:0f:da:ab:04:0f:f1:b0:65:f9:26:56:f3:4a:
9a:18:f0:b0:1f:8a:4d:f8:1b:cf:4e:c5:bd:65:09:c0:62:f8:
f6:18:48:68:16:6d:8d:1c:d8:e0:c4:de:38:bb:87:e6:3c:45:
cb:50:d2:a8:95:a6:c4:97:71:25:5a:ca:84:4e:79:ea:1e:07:
76:52:62:b5:1c:6c:01:b7:90:07:43:f4:8b:e9:a7:d9:73:84:
5d:bb:95:31:d0:4d:0b:89:f1:e1:b0:57:7b:84:00:0d:3a:9e:
8c:b4:c1:ba:d5:60:c5:28:34:12:56:fe:6c:b9:6a:8c:e1:8e:
bf:ba:20:fb:c7:20:a0:a5:69:cd:d9:73:82:c8:ab:9e:dc:fb:
0b:2d:e1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:41 2025 by rpki-client