Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa
File: 9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa (raw, json)
Hash identifier: MnRFCDdo1AVrP4E0ANzQl0+d3GDWtO2On4E3KcAceLY=
Subject key identifier: 1A:A2:4C:65:A1:6F:49:06:62:99:54:53:36:E0:B3:CD:7C:21:24:43
Certificate issuer: /CN=55263d01-2075-432b-94d1-01f0c1c34295
Certificate serial: 010D0C9F43285848AFE9B3197C5084D77799BF00
Authority key identifier: 2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa
Signing time: Mon 27 Jan 2025 20:24:13 +0000
ROA not before: Mon 27 Jan 2025 20:24:13 +0000
ROA not after: Sun 27 Apr 2025 19:24:13 +0000
asID: 401556
IP address blocks: 23.133.68.0/24 maxlen: 24
2602:f71f::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:e9:b3:19:7c:50:84:d7:77:99:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55263d01-2075-432b-94d1-01f0c1c34295
Validity
Not Before: Jan 27 20:24:13 2025 GMT
Not After : Apr 27 19:24:13 2025 GMT
Subject: CN=f0cdd64b-a9e9-4db4-bc18-d50b37f69e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:4b:df:43:93:e1:15:64:22:84:6c:67:76:
f2:4e:8b:87:46:d4:9f:e2:72:86:87:ae:97:82:49:
7e:49:c4:a3:25:5e:f3:f0:7b:81:85:84:51:c7:72:
c8:eb:47:64:67:ef:1b:b1:ce:b3:ce:b5:d7:7e:72:
73:d3:60:36:1a:f1:99:36:99:11:ae:25:8b:45:c9:
61:af:51:5e:01:a6:8f:24:f6:c5:76:5e:38:09:0f:
48:dd:07:5c:1b:cc:d1:79:13:39:58:83:f4:d5:96:
e1:6a:dd:6f:8b:d2:e8:ec:da:1c:ff:81:08:bb:7b:
8c:61:13:6e:f4:b2:7f:27:af:d7:40:bc:cb:00:c5:
b4:5e:3e:92:a9:d6:91:81:4b:3d:52:24:c8:a1:3f:
5a:b7:88:55:0e:b7:8f:6c:2e:83:eb:51:0a:31:94:
f6:a4:06:8b:e3:cf:aa:05:dc:7a:24:d1:6b:0f:46:
6c:83:17:73:ce:ef:70:9d:ba:0f:af:ee:ba:ea:f3:
09:19:b6:6d:e8:03:22:05:d7:89:97:bb:45:48:2e:
c6:b1:fa:e8:fc:6a:73:d9:9f:19:00:1c:27:1a:1a:
09:c1:dc:ae:58:75:4a:c8:32:eb:89:f2:97:8c:f1:
09:80:f8:6d:2a:d6:80:85:a3:7f:aa:39:84:21:e7:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A2:4C:65:A1:6F:49:06:62:99:54:53:36:E0:B3:CD:7C:21:24:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/9a2f1e83-336f-3ec5-b4da-5c7cede73e6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295/55263d01-2075-432b-94d1-01f0c1c34295.crl
X509v3 Authority Key Identifier:
keyid:2D:C0:2E:27:B7:C8:3B:4C:7C:4E:35:59:64:A6:CE:86:27:1B:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/55263d01-2075-432b-94d1-01f0c1c34295.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.68.0/24
IPv6:
2602:f71f::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:fb:b6:ef:50:d1:05:55:3d:ba:7a:19:54:e7:fa:2b:43:60:
de:66:d7:ed:ab:9c:7d:2b:74:9e:98:e0:e3:bb:f4:d2:8c:32:
1a:dc:f4:33:69:ed:89:14:a8:4e:e9:0f:a9:aa:4c:63:7c:4c:
79:ba:6d:2a:77:46:9f:58:3d:1d:1c:94:07:5b:5f:07:80:4b:
79:85:9a:55:e6:5f:a2:f6:e7:d1:3c:92:6f:d6:a1:6c:79:03:
ce:70:9c:c6:cb:bf:32:ec:d5:bc:93:15:1f:c7:3e:bf:75:a1:
59:63:25:96:d9:18:a9:ed:6e:3a:c6:53:13:70:98:23:07:e4:
82:87:ad:05:9f:cb:da:5c:28:ac:a3:3b:5f:42:60:81:6d:14:
c5:5f:1b:5f:e2:35:10:75:5b:bf:d0:4f:b4:cf:3e:40:f6:b5:
d2:1d:21:32:e9:fc:2b:d0:9c:87:b3:26:60:d8:fc:1b:43:16:
67:51:75:88:17:c6:44:e5:8c:ba:73:4b:97:79:5d:81:8e:de:
c5:9d:73:d1:f8:f8:57:a1:9b:0e:09:b3:18:9e:a6:67:77:5c:
00:f2:51:aa:89:2b:87:32:26:1b:7a:a7:7f:e4:99:69:32:5b:
b6:f1:21:cb:39:25:65:95:5c:85:da:a6:50:c4:70:0d:cd:27:
80:dc:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:28:02 2025 by rpki-client