Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/78c69d26-5ab1-316e-9a91-295c01a41edb.roa
File: 78c69d26-5ab1-316e-9a91-295c01a41edb.roa (raw, json)
Hash identifier: sSNvxIEdlV5llZZ0ZUF4oXEHK1q60swinvpJKgAWkUE=
Subject key identifier: 5B:68:E1:ED:15:12:0E:B3:F9:7B:82:2E:75:DB:7E:35:55:15:10:6C
Certificate issuer: /CN=86b44355-f605-46d2-8fa6-d9cab0efb4c2
Certificate serial: 010D0C9F43285848B5BC0C84AE664D03AAE48400
Authority key identifier: 7B:E8:AB:DC:B6:51:BF:52:A2:04:9E:75:C1:48:B4:44:13:0D:9A:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/78c69d26-5ab1-316e-9a91-295c01a41edb.roa
Signing time: Wed 29 Jan 2025 22:27:06 +0000
ROA not before: Wed 29 Jan 2025 22:27:06 +0000
ROA not after: Tue 29 Apr 2025 21:27:06 +0000
asID: 394838
IP address blocks: 23.142.240.0/24 maxlen: 24
149.106.96.0/19 maxlen: 20
162.142.32.0/19 maxlen: 20
216.110.160.0/19 maxlen: 20
2605:6dc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b5:bc:0c:84:ae:66:4d:03:aa:e4:84:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b44355-f605-46d2-8fa6-d9cab0efb4c2
Validity
Not Before: Jan 29 22:27:06 2025 GMT
Not After : Apr 29 21:27:06 2025 GMT
Subject: CN=0c268b0c-dc1b-453c-8737-81c1b2177b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:ac:f0:ad:62:05:da:7a:ed:12:04:0e:27:
13:e5:3a:cc:5b:9d:5e:29:54:b8:fa:eb:72:71:f2:
f3:dd:81:0d:2e:21:c2:7f:48:b1:c6:97:0e:2f:da:
03:84:71:14:7c:15:1c:b8:62:cc:fd:40:1a:ac:6c:
3a:7e:f0:c7:15:96:da:72:53:c1:4e:57:b4:aa:5a:
2b:ae:12:32:30:f7:f2:00:f8:21:49:c1:f5:fb:29:
c6:34:1d:43:fe:f7:ce:2b:bb:b3:ad:c4:ca:1c:f7:
46:aa:a4:35:3a:cf:4b:42:28:bf:93:99:f6:f3:ba:
e2:80:38:65:74:3e:4b:c8:8d:42:4b:e2:6d:3f:e4:
a1:9d:e5:8e:1d:fd:3d:f6:8a:aa:d6:8a:e0:4a:c6:
24:78:70:d2:dc:a3:d3:15:d5:3f:ef:89:94:98:d4:
4c:45:29:a0:11:b8:43:8d:02:da:54:e8:67:41:f1:
10:62:6a:03:b2:1b:0f:58:45:69:b4:d5:ce:ba:e5:
54:7a:40:aa:b7:57:3a:2b:ae:c0:c0:e6:cb:cb:4c:
9e:c1:36:9b:3f:6e:67:c7:f4:04:0f:28:40:e8:97:
ee:46:96:ad:de:b9:98:18:50:27:ba:1f:4e:bd:57:
71:ae:27:b1:82:88:5f:fe:cf:de:53:b5:05:c0:70:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:68:E1:ED:15:12:0E:B3:F9:7B:82:2E:75:DB:7E:35:55:15:10:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/78c69d26-5ab1-316e-9a91-295c01a41edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.crl
X509v3 Authority Key Identifier:
keyid:7B:E8:AB:DC:B6:51:BF:52:A2:04:9E:75:C1:48:B4:44:13:0D:9A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.240.0/24
149.106.96.0/19
162.142.32.0/19
216.110.160.0/19
IPv6:
2605:6dc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:8d:d5:8b:eb:05:22:3f:86:08:ce:e1:02:50:32:97:41:74:
04:f1:10:55:fa:82:4b:ba:75:29:90:fb:de:87:98:e1:0f:2b:
74:42:f9:b6:d4:77:db:c5:3c:02:bf:4f:db:d6:aa:5f:2e:f2:
14:9e:73:2f:41:a0:f0:a2:f1:cd:75:14:d5:d6:f8:60:74:14:
81:b9:1d:9b:4e:4c:8b:ec:24:54:0a:5f:cf:f6:ff:db:83:21:
1d:42:12:9d:92:0b:17:cf:10:94:e6:24:0d:68:88:a5:49:6e:
46:91:4a:2d:fe:d1:3e:ff:98:7d:bb:a6:de:8a:18:44:b3:5a:
e0:95:9d:22:55:2a:fc:9b:d1:c6:49:c6:e5:a6:d0:f8:f4:9b:
db:68:ce:34:a4:52:4d:cd:91:48:60:6f:68:20:b6:65:00:ae:
7d:85:56:08:51:67:5b:10:9e:f7:20:0e:0d:69:59:87:fb:6b:
05:91:02:24:f3:a2:68:ba:ad:c9:d8:61:93:60:4e:be:c4:97:
b3:87:bb:31:24:bf:a2:7f:f9:e2:76:b2:0b:16:8d:0d:79:2b:
85:39:dd:56:c9:84:80:1f:92:10:48:7c:86:7a:60:1f:96:14:
96:d1:77:62:ec:36:c7:9b:23:0b:ac:1e:26:03:5f:88:ec:59:
23:df:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:03:24 2025 by rpki-client