Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/b25eb103-6ffe-3a96-bcb7-1366f35111f6.roa
File: b25eb103-6ffe-3a96-bcb7-1366f35111f6.roa (raw, json)
Hash identifier: BevU6wFFWUiJC71u7Me7d27YsZanaELTtW6L1ER/5S8=
Subject key identifier: 4F:5C:89:82:00:5B:1E:4D:59:A3:A2:CD:3F:A5:7F:D5:B8:24:55:6B
Certificate issuer: /CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
Certificate serial: 010D0C9F432858488F9EE529E09D90730B4CDC00
Authority key identifier: C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/b25eb103-6ffe-3a96-bcb7-1366f35111f6.roa
Signing time: Thu 16 Jan 2025 06:47:38 +0000
ROA not before: Thu 16 Jan 2025 06:47:38 +0000
ROA not after: Wed 16 Apr 2025 05:47:38 +0000
asID: 138997
IP address blocks: 23.128.228.0/24 maxlen: 24
2602:f7ac::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:9e:e5:29:e0:9d:90:73:0b:4c:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb
Validity
Not Before: Jan 16 06:47:38 2025 GMT
Not After : Apr 16 05:47:38 2025 GMT
Subject: CN=e85fafa7-75cd-4e7c-a2fa-ec2e6cfec634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:eb:14:46:6a:09:a6:42:a2:0e:36:68:46:
b6:d1:43:03:3d:ea:ac:fc:46:ba:89:8b:1e:22:13:
ed:57:86:32:4f:20:88:25:28:28:80:4a:2a:4c:01:
91:11:5a:1a:b1:bf:88:17:17:e6:c0:63:a3:2b:f8:
53:5c:4f:be:84:6d:01:1d:6f:77:c3:7d:5a:52:10:
b6:f5:ef:63:40:3f:b1:d7:c8:81:57:bc:61:f4:da:
bd:d8:08:ee:22:e6:c6:18:83:db:d1:ce:f0:a0:3f:
ca:44:46:f1:a1:01:4c:f3:fb:95:df:ef:d5:7d:37:
71:6a:57:6d:dd:ba:35:a2:7d:10:9c:8a:2f:3f:fb:
b6:3d:89:32:25:1a:5a:55:5c:2f:d9:2d:e1:16:04:
e6:60:53:9a:da:c2:12:36:d2:cc:e2:bc:32:11:d8:
3d:cc:c6:51:e0:39:32:ba:cc:4e:03:20:84:e1:27:
11:63:cf:64:83:93:9e:1b:84:4b:4d:89:ea:c4:aa:
92:b7:16:b7:dc:c4:a9:17:b7:5c:d1:bc:be:be:e9:
2a:62:f2:c3:8d:20:48:76:61:36:16:26:fd:51:a7:
ba:8e:14:c9:3d:5b:43:de:1d:93:2c:54:9d:70:c5:
8f:af:40:97:dd:1b:b6:a4:0f:b7:96:b8:4b:3a:14:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5C:89:82:00:5B:1E:4D:59:A3:A2:CD:3F:A5:7F:D5:B8:24:55:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/b25eb103-6ffe-3a96-bcb7-1366f35111f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl
X509v3 Authority Key Identifier:
keyid:C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.228.0/24
IPv6:
2602:f7ac::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:3c:3e:1b:95:fa:90:71:5b:7d:45:0d:17:c1:4b:c0:ef:f4:
48:e0:b1:72:c9:8c:c2:59:6e:d0:cd:ea:3b:d8:54:d4:e5:2c:
d6:ec:34:b6:00:08:e3:8d:96:a0:3c:ee:ef:18:dc:28:78:c8:
d2:35:b4:47:4c:ab:65:9d:9b:00:9c:33:c4:22:da:38:cf:e0:
b9:19:c8:ef:03:83:ba:0b:2c:c7:05:64:4e:0d:ee:92:5b:74:
61:4d:ef:34:04:bd:da:9d:17:6e:1f:c3:19:59:58:2c:f2:68:
75:2a:42:fc:0e:da:85:8a:2d:78:c4:d2:1c:ea:c1:b3:91:55:
bb:75:08:d2:8f:4f:72:a9:73:a4:ac:76:54:04:40:c0:84:4b:
93:3e:44:51:f0:e8:88:f3:ac:79:83:0b:38:07:ec:b1:6f:d5:
53:ff:31:65:fe:dc:4c:69:b0:a0:78:41:9f:55:2d:bb:ee:cd:
87:af:17:1f:80:8e:db:3d:cd:d0:e3:ca:58:7d:39:3d:a4:29:
55:3d:6a:5e:36:84:3b:ff:c5:b7:7d:4a:1a:c5:63:6b:25:3b:
be:66:cf:01:a9:2a:05:c0:b1:33:7e:66:74:93:42:f1:67:59:
c9:c7:70:af:20:57:56:86:c0:cd:68:0b:25:48:37:b5:44:5e:
c5:86:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:20 2025 by rpki-client