Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/20e8b079-8dc4-3009-84e4-0ac3a6092578.roa
File: 20e8b079-8dc4-3009-84e4-0ac3a6092578.roa (raw, json)
Hash identifier: LUoai55pLVv1AUAJX5X+AiX7Zw9vvuD2rtL+JVU8Anw=
Subject key identifier: 87:58:CE:55:DC:AD:17:C4:84:3E:29:A8:2E:A4:33:DD:54:B8:87:B5
Certificate issuer: /CN=8e562ad4-986c-42b2-bce3-9cc48f5f64de
Certificate serial: 010D0C9F43285848F1C7AA7B1908209B32FC86C0
Authority key identifier: 98:7C:66:96:69:F8:0F:38:D6:A3:B4:70:DF:0F:0D:51:08:B1:87:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/20e8b079-8dc4-3009-84e4-0ac3a6092578.roa
Signing time: Thu 20 Feb 2025 10:39:00 +0000
ROA not before: Thu 20 Feb 2025 10:39:00 +0000
ROA not after: Wed 21 May 2025 09:39:00 +0000
asID: 3144
IP address blocks: 23.130.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f1:c7:aa:7b:19:08:20:9b:32:fc:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e562ad4-986c-42b2-bce3-9cc48f5f64de
Validity
Not Before: Feb 20 10:39:00 2025 GMT
Not After : May 21 09:39:00 2025 GMT
Subject: CN=a4f7a4bd-01ef-42f7-82d5-67435ea3db81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:4c:cd:28:75:47:ce:23:32:51:e1:b5:00:
b7:7e:e5:34:8d:c8:38:12:8b:d4:7b:4b:89:38:8d:
9e:9e:c0:f6:a5:d6:80:ed:82:92:8f:e1:44:ad:29:
14:b0:a2:f3:d9:4c:b6:3b:c0:f9:59:f6:3d:b2:09:
cb:19:d5:96:d7:79:ec:92:20:29:b2:1d:d5:30:8b:
b5:ef:31:51:f5:e2:30:ac:79:84:13:24:dc:0b:24:
1d:ce:82:92:b6:0f:26:27:93:87:41:2b:92:da:3f:
3b:ab:81:72:fe:ce:69:fb:cc:b5:72:ea:6e:56:97:
b0:67:b6:f3:cc:3f:c7:16:f2:f4:12:56:85:b1:88:
7a:44:91:0d:95:00:2c:9e:26:a5:09:5a:70:39:10:
73:5e:eb:eb:aa:be:6f:3e:e9:e8:14:bc:70:fb:76:
a1:db:92:6e:ad:25:7c:d0:7b:03:79:7a:08:ed:5b:
e7:80:e9:e5:ae:6b:59:0f:24:13:4f:c2:25:fa:d9:
ac:2e:97:3c:13:48:e8:43:df:56:a9:43:0c:45:6a:
3b:09:07:62:40:f4:a4:32:09:59:c2:23:e0:43:86:
71:54:1e:13:b1:f0:d1:1f:1a:fd:17:a7:f7:f2:dd:
3b:b8:ed:94:32:ee:d9:bb:eb:d4:44:e2:22:da:7a:
37:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:58:CE:55:DC:AD:17:C4:84:3E:29:A8:2E:A4:33:DD:54:B8:87:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/20e8b079-8dc4-3009-84e4-0ac3a6092578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/8e562ad4-986c-42b2-bce3-9cc48f5f64de.crl
X509v3 Authority Key Identifier:
keyid:98:7C:66:96:69:F8:0F:38:D6:A3:B4:70:DF:0F:0D:51:08:B1:87:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:50:5a:1e:60:75:c7:98:88:02:e2:4b:e5:e7:ce:13:98:fd:
41:b1:9e:ad:f6:68:01:82:1f:f3:93:09:a9:75:5a:27:3e:8d:
06:cf:31:ef:99:d3:7c:d9:e1:6b:c6:49:11:66:ae:0b:fc:7d:
1a:eb:7a:9a:4f:92:4d:d3:71:e6:c2:a1:11:46:67:47:b3:54:
48:d3:16:1e:c3:a3:b5:a6:37:94:2c:b9:db:fc:7c:66:d9:e9:
71:69:dd:81:fe:17:bf:e7:26:b3:e3:85:45:e5:c6:a3:60:06:
82:57:65:98:c2:c3:95:88:ff:06:c2:79:53:96:42:4a:f5:9c:
c6:85:27:fc:f8:2a:2b:8c:c8:0d:35:90:08:ba:94:2e:49:fd:
4d:54:4f:5c:d2:8f:50:8c:b2:9d:90:02:37:34:4d:67:0b:d4:
14:04:5f:da:c2:26:b9:c2:a8:99:5b:d4:86:86:7f:1d:31:87:
fd:39:4a:33:4c:5c:c5:e5:4b:08:3c:2d:2a:c0:71:a9:46:fd:
e6:94:37:86:f7:5d:0a:46:b8:4e:04:70:48:86:72:b5:7b:ee:
5f:9a:62:7e:93:de:55:ab:68:c3:85:b9:3c:2d:62:65:9e:2f:
2a:c4:65:3d:a5:a5:c7:92:ef:a1:e3:99:4b:d8:0c:48:db:41:
1d:b7:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:29:35 2025 by rpki-client