Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/90615334-0688-3173-bad7-8781bf8f11f9.roa
File: 90615334-0688-3173-bad7-8781bf8f11f9.roa (raw, json)
Hash identifier: tbJS/iM9HOrNnikph6SQvz8e2ebGOAGNdYL2cYq7vIA=
Subject key identifier: 06:1C:48:90:3C:F1:BB:10:F2:FD:41:65:47:00:2A:CE:86:13:4A:F4
Certificate issuer: /CN=9c74a627-7577-4f11-89e0-589500621344
Certificate serial: 010D0C9F43285848EA2F709638F7A53522B4B200
Authority key identifier: D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/90615334-0688-3173-bad7-8781bf8f11f9.roa
Signing time: Mon 17 Feb 2025 17:21:38 +0000
ROA not before: Mon 17 Feb 2025 17:21:38 +0000
ROA not after: Sun 18 May 2025 16:21:38 +0000
asID: 10753
IP address blocks: 23.133.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ea:2f:70:96:38:f7:a5:35:22:b4:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c74a627-7577-4f11-89e0-589500621344
Validity
Not Before: Feb 17 17:21:38 2025 GMT
Not After : May 18 16:21:38 2025 GMT
Subject: CN=8e761854-9050-414e-b395-b8ccaa8b107e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:43:48:65:13:c4:d1:ed:12:c9:ee:1a:7d:
02:4f:ba:54:e4:bc:96:d2:fe:17:41:78:7a:e3:b2:
21:48:a3:77:f7:ba:af:f5:74:12:6a:eb:37:cf:6b:
24:7c:a7:ee:b7:24:fc:ca:28:2c:d0:d9:9c:92:a0:
89:0d:09:96:5f:ab:f5:a5:08:1b:ec:51:5e:d8:7f:
ba:f3:1b:8a:78:be:ea:7c:5a:60:f7:f9:c9:73:24:
ba:3c:7c:b1:d4:2f:11:48:ac:ca:cf:9e:79:9d:2e:
e3:e1:f6:7d:d2:ca:f9:b0:55:ff:c0:a9:b2:2d:6a:
8c:fc:5a:ec:a1:ad:a1:49:2f:8e:02:18:d6:bb:ae:
95:59:10:a2:80:28:9b:10:fc:d1:b0:46:be:da:99:
48:70:fc:de:57:74:d6:98:49:eb:bb:a4:6f:ef:c4:
52:d9:32:10:58:4d:9b:39:18:8a:04:a3:9e:66:9f:
ab:db:ef:8e:82:b4:02:7e:4e:3f:2d:63:6a:3b:45:
dd:6e:7f:8e:32:97:f8:5e:39:5a:dc:4d:24:c0:46:
bc:b6:dd:97:1d:8c:9d:d7:1d:33:1e:00:33:af:f0:
1d:d9:48:a3:d0:95:d5:4f:eb:95:b5:ea:f8:6b:7a:
d7:fd:23:63:18:4a:49:34:7d:1f:25:38:f1:23:34:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1C:48:90:3C:F1:BB:10:F2:FD:41:65:47:00:2A:CE:86:13:4A:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/90615334-0688-3173-bad7-8781bf8f11f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.crl
X509v3 Authority Key Identifier:
keyid:D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:1c:d8:69:a4:1a:3f:51:67:b5:9a:65:be:94:52:2e:c1:12:
ce:ca:6a:bd:29:8f:1c:4f:7c:8e:ad:4d:97:44:3c:b0:0d:cc:
0d:9f:f9:63:04:4e:2b:16:dc:19:72:ee:5a:53:1c:84:7c:46:
eb:7b:19:bc:f2:4e:f6:c5:af:0e:8e:4c:62:bd:19:76:82:9d:
a4:cd:6f:5b:c4:d4:a7:5f:d0:4b:c4:e1:73:d2:fe:74:a0:ab:
da:ff:1f:83:8f:02:88:00:50:8d:17:16:b6:a6:d5:1f:bf:5b:
f3:ab:2f:af:54:2c:a3:e9:ea:d1:8b:99:17:f7:d2:78:ae:94:
35:b8:a8:61:d8:a2:e7:89:58:98:de:9b:94:f5:9f:b6:9c:37:
f6:74:24:d0:bc:e4:82:4f:6b:34:c9:40:51:d0:68:d6:75:f1:
72:a6:44:80:63:37:f3:15:ff:e3:6f:6e:60:57:6e:45:54:fe:
39:c7:c6:e7:1c:0c:cb:f1:59:12:fe:4e:80:67:cc:39:dc:cc:
26:f6:49:07:39:94:35:c0:29:8c:d6:e5:35:69:af:b5:d7:ee:
f7:28:55:bf:f4:d3:d6:7d:c9:f0:92:58:33:f2:a9:79:a9:63:
95:a2:28:49:b6:da:ba:b6:d1:93:58:cd:c6:19:9a:85:26:ee:
1e:63:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:11 2025 by rpki-client