Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/a8d8523f-9122-37fe-9c88-76ef8274c2b3.roa
File: a8d8523f-9122-37fe-9c88-76ef8274c2b3.roa (raw, json)
Hash identifier: k9IRvEzXekYLdlo0T9qV22//e6JEuR6YpLX87sdPmKM=
Subject key identifier: AB:48:AC:D8:9B:C2:34:6F:FB:61:5F:F8:CC:F2:03:79:C9:F1:00:87
Certificate issuer: /CN=566ffb02-1248-4101-8962-6e8672a404b9
Certificate serial: 010D0C9F43285849350EA4A3632CE13C86BA8880
Authority key identifier: 62:D9:F3:A3:55:BC:69:72:DF:8A:C4:89:BB:06:EC:49:3E:F2:8C:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/a8d8523f-9122-37fe-9c88-76ef8274c2b3.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 400834
IP address blocks: 23.131.44.0/24 maxlen: 24
2602:f760::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a4:a3:63:2c:e1:3c:86:ba:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=566ffb02-1248-4101-8962-6e8672a404b9
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=7711d891-70a7-41b8-b908-1547dbbdc596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c7:88:4c:17:1c:19:95:d1:7c:02:ae:2c:fb:
48:65:9c:06:26:29:54:52:da:aa:a7:83:0e:5d:b1:
6d:d4:13:07:c0:32:bb:26:16:63:1c:04:14:6b:e7:
57:73:fa:eb:3f:8c:8c:20:a5:2b:79:e5:9a:22:f9:
6f:7b:72:67:ca:d1:70:84:f0:72:8f:5e:e5:9c:b9:
76:63:69:12:81:3f:bd:48:47:20:d6:61:d0:d6:a0:
22:22:32:20:e4:ec:5b:11:f4:f5:88:ea:31:94:88:
2c:f9:27:32:fb:ce:a6:e1:b6:7b:b0:0a:0a:07:05:
13:52:bb:73:c3:ca:e8:dc:ca:32:36:d7:8c:77:34:
2a:15:20:39:30:27:00:7c:4e:9a:a2:3e:ff:99:48:
ca:96:da:5e:b9:b5:d4:df:eb:9d:e1:8e:35:3a:fa:
23:22:87:28:6e:46:76:75:26:d2:04:e6:33:7b:af:
23:c1:6f:38:df:bb:63:e1:95:57:73:81:cb:54:cc:
0a:43:3a:08:49:41:f5:2f:a2:62:62:64:79:3f:f7:
9e:2f:11:05:55:bc:98:51:eb:77:89:fa:53:38:e8:
5f:f5:40:6e:44:bb:ae:d1:88:22:7a:28:8a:50:5d:
a5:bb:d5:99:48:a1:ea:9b:1d:e1:50:53:61:12:75:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:48:AC:D8:9B:C2:34:6F:FB:61:5F:F8:CC:F2:03:79:C9:F1:00:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/a8d8523f-9122-37fe-9c88-76ef8274c2b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9/566ffb02-1248-4101-8962-6e8672a404b9.crl
X509v3 Authority Key Identifier:
keyid:62:D9:F3:A3:55:BC:69:72:DF:8A:C4:89:BB:06:EC:49:3E:F2:8C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/566ffb02-1248-4101-8962-6e8672a404b9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.44.0/24
IPv6:
2602:f760::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:7c:e2:df:44:c2:67:f1:1b:1b:c4:ac:b4:d5:40:96:a5:44:
b3:d6:a0:42:6f:2b:1e:d0:c8:a7:3d:9b:da:93:e0:a8:d8:5b:
52:52:f3:42:fc:a1:6f:41:2c:78:3c:47:84:5d:85:e4:63:c2:
29:0a:6a:6c:56:fa:85:e1:62:6e:b2:75:17:3c:2e:71:0e:f3:
70:16:f2:09:ee:ac:f6:60:58:3e:d3:9d:85:82:67:2b:76:4b:
a6:38:39:59:2b:47:15:05:cd:c3:ed:bb:db:b2:61:b3:18:9b:
40:0f:88:01:8a:54:af:07:b4:b1:ac:aa:6e:38:54:bb:74:74:
b5:e0:f8:27:37:94:4d:d9:79:41:be:02:b3:8d:d8:77:b8:32:
a0:b3:8a:69:b8:7e:47:5f:09:54:f7:e5:09:b3:2e:3b:97:34:
09:bc:af:e4:9a:04:a8:19:49:b1:16:e7:50:d9:4f:37:72:4d:
88:1c:41:9a:da:7d:36:c3:26:2c:e9:a9:5a:3e:3d:92:96:e9:
83:93:d9:c1:ea:d5:e1:0b:bd:ca:77:be:2d:50:ae:dc:a4:cb:
5c:92:0f:af:66:2e:25:b3:cf:72:ba:3b:0e:04:db:ce:00:77:
69:3e:07:91:e6:2a:d9:cd:31:97:85:10:98:35:f4:80:93:8a:
85:cc:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:22 2025 by rpki-client