Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/3d1baa6a-ce6b-3ce3-93db-48db2913995a.roa
File: 3d1baa6a-ce6b-3ce3-93db-48db2913995a.roa (raw, json)
Hash identifier: qyEGrxV/Nl8SVGmG0/4+pmWnWpg9zy+l6RYxfB6SkaQ=
Subject key identifier: DE:AC:DE:BE:42:70:B9:E8:F9:D8:67:2C:48:DD:98:18:CD:4D:DA:0D
Certificate issuer: /CN=ac21a503-f3b0-48ad-b925-50edbd303108
Certificate serial: 010D0C9F43285849522404DB004536D746168A80
Authority key identifier: DF:3F:C9:5D:28:C8:1E:12:25:AA:6C:A1:B6:E3:F8:3A:22:3B:B0:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/3d1baa6a-ce6b-3ce3-93db-48db2913995a.roa
Signing time: Wed 26 Mar 2025 23:02:41 +0000
ROA not before: Wed 26 Mar 2025 23:02:41 +0000
ROA not after: Tue 24 Jun 2025 23:02:41 +0000
asID: 32561
IP address blocks: 23.153.104.0/24 maxlen: 24
2602:faa0::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:52:24:04:db:00:45:36:d7:46:16:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a503-f3b0-48ad-b925-50edbd303108
Validity
Not Before: Mar 26 23:02:41 2025 GMT
Not After : Jun 24 23:02:41 2025 GMT
Subject: CN=6f148c08-f421-42e1-a79c-fe769dac3e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:50:c6:a5:74:cb:17:27:15:d8:1c:1a:15:
35:a7:55:40:5e:f3:68:da:3e:7b:aa:8f:a4:84:76:
f5:70:a9:70:95:65:bb:08:12:f6:c6:c7:f0:6b:b6:
e7:74:53:06:8e:52:3c:87:5e:45:3a:e1:15:03:c2:
3a:cc:85:06:6d:dd:e5:da:c1:22:2b:61:47:13:d0:
be:57:e7:93:79:48:59:f7:09:28:31:f2:4e:9d:ed:
52:db:15:bb:e9:23:3d:a6:19:3e:38:26:04:98:d7:
93:3d:96:51:bd:e2:ae:99:75:39:d1:8d:06:87:fa:
af:3c:e6:8a:09:45:ee:e7:6b:eb:9b:82:16:74:f7:
0a:16:9f:e8:df:da:23:3d:80:35:57:12:c6:1f:cd:
4f:bf:ab:44:4a:8a:4b:64:17:cb:1c:35:62:4b:2c:
df:1c:e1:5b:a2:98:c3:c5:1f:0e:e7:f0:71:19:e2:
9a:43:36:1f:33:2f:f5:2a:48:b0:d7:3e:a4:e7:4c:
83:2c:73:74:95:b4:52:e6:a4:56:e5:24:0c:a1:11:
5a:55:74:e4:f1:07:68:ed:3e:3c:44:4d:81:1e:72:
ab:7e:98:f6:1b:a7:72:1a:f2:0f:d0:6d:58:8c:c4:
39:b8:03:97:2b:7b:1b:3a:b1:cc:df:25:c0:41:49:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:DE:BE:42:70:B9:E8:F9:D8:67:2C:48:DD:98:18:CD:4D:DA:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/3d1baa6a-ce6b-3ce3-93db-48db2913995a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.crl
X509v3 Authority Key Identifier:
keyid:DF:3F:C9:5D:28:C8:1E:12:25:AA:6C:A1:B6:E3:F8:3A:22:3B:B0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.104.0/24
IPv6:
2602:faa0::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:7a:f5:bd:6b:1d:87:3c:37:a6:61:1d:a8:7d:44:6e:8b:4e:
94:ef:14:f4:76:15:ff:a6:a8:0a:d7:77:f2:6c:33:b5:7a:93:
2b:a9:d9:7e:73:ef:41:33:a3:7f:e7:4a:3f:bd:e5:be:02:27:
98:4c:92:c3:bb:13:0d:d8:63:28:00:76:0a:19:d6:49:b6:9c:
b9:21:78:91:db:44:3f:bf:fd:78:bd:02:de:12:6b:99:47:b0:
fb:fe:13:cf:44:5d:eb:19:4e:4d:14:2d:62:6b:f9:0c:57:4e:
ef:67:de:53:55:10:a8:19:f2:a8:03:3f:0b:62:bd:fa:99:88:
7b:a7:15:52:e8:7a:dd:fb:d4:51:92:8b:d9:fb:e9:44:f5:b9:
e8:0a:31:b6:3d:b5:80:59:06:99:02:51:6b:22:32:25:8e:4f:
d2:a2:86:ef:4a:38:18:a8:a3:50:a7:24:29:b4:fe:49:4c:db:
a0:29:e9:1d:38:83:ae:03:6c:39:2e:a8:c3:2d:fa:a3:f8:e0:
cc:94:e4:a7:46:0a:ee:56:70:68:c5:ff:16:a3:c4:e5:15:30:
a9:6f:32:d5:41:ec:3f:c4:7f:28:42:5a:46:5f:51:1a:35:6b:
96:6b:38:ec:d9:78:79:d6:9f:d1:26:31:51:a4:d0:c6:90:c7:
08:a7:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:53 2025 by rpki-client