Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/5d0c1d0d-2a7e-3b3c-ba63-04b92065a33f.roa
File: 5d0c1d0d-2a7e-3b3c-ba63-04b92065a33f.roa (raw, json)
Hash identifier: iw5VxQcA+AXjSJetcZqaHMYA4aAIG/+iU24HrW2MMjs=
Subject key identifier: 23:1E:B4:93:1D:7D:CB:E2:34:EF:4D:8C:EC:7E:B5:2A:C9:8A:C6:A2
Certificate issuer: /CN=3dce7e6f-4588-4d9b-bb90-80f074656851
Certificate serial: 010D0C9F43285848AF9586497B7E5D8F5DCD3700
Authority key identifier: 25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/5d0c1d0d-2a7e-3b3c-ba63-04b92065a33f.roa
Signing time: Mon 27 Jan 2025 17:34:37 +0000
ROA not before: Mon 27 Jan 2025 17:34:37 +0000
ROA not after: Sun 27 Apr 2025 16:34:37 +0000
asID: 26042
IP address blocks: 23.133.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:95:86:49:7b:7e:5d:8f:5d:cd:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dce7e6f-4588-4d9b-bb90-80f074656851
Validity
Not Before: Jan 27 17:34:37 2025 GMT
Not After : Apr 27 16:34:37 2025 GMT
Subject: CN=4047c305-ec8e-4be2-8344-e42bba84ba57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9e:97:6a:3d:60:90:55:a2:cc:9e:a5:e2:bf:
bd:3a:fc:ba:54:30:85:d8:b1:c8:34:3e:01:a6:22:
3c:ff:3d:02:90:4b:5e:7e:33:3c:6c:1f:43:da:e1:
b5:f6:ec:19:0a:5e:2f:1b:0e:1e:00:4b:ce:52:e9:
fd:6b:bd:55:cd:2f:cb:e8:1f:6e:76:d8:df:48:19:
ac:a6:b4:c9:44:be:ba:05:17:4d:0b:3c:87:b7:34:
67:f8:24:7d:36:9f:1c:2b:c6:30:cb:9e:97:62:ce:
db:76:5b:61:9d:2d:b4:d0:c1:f1:df:ad:8c:2a:11:
c8:bb:18:25:ea:67:4f:1b:3e:71:17:ba:cd:6a:1f:
25:2e:8a:38:fa:42:45:f6:31:93:44:60:6d:ba:22:
dd:9b:f9:16:26:5e:fc:07:5c:0f:ac:c1:ff:ce:b6:
5b:e7:16:97:b2:83:33:49:c3:9b:52:0d:d7:6f:11:
39:c0:c9:6c:92:e7:23:f5:6c:0c:c6:f9:d6:0c:7f:
7a:da:b4:6f:38:7b:4a:94:e9:08:e3:2b:16:86:5e:
b3:19:8d:c9:28:6b:01:fe:c8:fc:1f:85:6e:53:54:
61:ca:4b:ba:a9:29:57:f3:c0:4b:04:cc:d8:b5:cf:
bf:9d:87:3b:f2:ad:0e:76:e5:f5:34:f0:e5:80:e6:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1E:B4:93:1D:7D:CB:E2:34:EF:4D:8C:EC:7E:B5:2A:C9:8A:C6:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/5d0c1d0d-2a7e-3b3c-ba63-04b92065a33f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.crl
X509v3 Authority Key Identifier:
keyid:25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:c0:b2:af:dc:72:ae:4e:f6:8a:18:b2:4e:14:4e:14:08:fe:
80:20:09:18:9d:9c:bb:62:af:8a:04:03:e9:05:5c:bd:23:de:
41:d2:6c:d6:d1:68:b4:d2:42:82:e7:8c:93:6f:e6:32:35:de:
5d:23:65:01:a7:5c:05:f9:b6:d7:49:ef:98:dd:32:8a:c6:15:
88:b0:00:28:2c:02:e9:5a:68:eb:62:2a:cc:43:00:8a:d0:97:
f9:ba:87:f4:9b:85:95:21:7d:a4:51:59:3b:e7:4f:5c:13:ea:
64:4d:d3:d6:07:95:72:33:8b:2d:4e:ad:6e:ea:5a:29:65:7a:
e0:53:82:86:6a:73:ba:aa:58:af:2b:f4:1c:d2:43:b1:bb:c7:
50:8b:7f:1b:0b:bb:25:db:9f:8b:f5:67:43:7c:fe:b5:88:b6:
7e:e3:18:b9:24:03:2e:76:3a:99:47:2f:94:18:a5:03:43:87:
bd:98:f1:b8:0e:c2:57:0e:82:a7:f7:0d:fc:07:fe:91:9a:10:
4a:5c:12:f8:85:02:82:fc:90:8e:a0:9c:3b:95:f6:0e:94:b3:
3f:6e:b2:7c:32:75:8a:1c:a8:a1:12:8b:54:bf:e9:11:f7:27:
8a:fb:5a:6c:3e:5a:ed:7b:85:35:f7:27:0b:63:45:78:5f:1a:
7b:c5:96:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:43 2025 by rpki-client