Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/afb8aa3a-0adf-3797-8eb8-4a004287ddbb.roa
File: afb8aa3a-0adf-3797-8eb8-4a004287ddbb.roa (raw, json)
Hash identifier: 57suikClzSuK13hDlKsG3KgNnP8IwybOk0zF9hQYMfw=
Subject key identifier: 5B:DC:04:EE:9C:A5:A4:D3:59:2A:82:EB:D7:E7:36:A7:C2:53:A4:6F
Certificate issuer: /CN=a54e265f-d361-4245-843e-1e7cf61c9644
Certificate serial: 010D0C9F432858488ABD019861B1EB5C238E1C00
Authority key identifier: CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/afb8aa3a-0adf-3797-8eb8-4a004287ddbb.roa
Signing time: Tue 14 Jan 2025 12:49:16 +0000
ROA not before: Tue 14 Jan 2025 12:49:16 +0000
ROA not after: Mon 14 Apr 2025 11:49:16 +0000
asID: 401474
IP address blocks: 23.132.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:bd:01:98:61:b1:eb:5c:23:8e:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54e265f-d361-4245-843e-1e7cf61c9644
Validity
Not Before: Jan 14 12:49:16 2025 GMT
Not After : Apr 14 11:49:16 2025 GMT
Subject: CN=3acf3a9a-1550-430a-a431-956df79747c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:ad:eb:d0:95:56:75:f3:ce:9a:bc:a9:8f:
05:52:bd:6d:74:8a:c0:a7:04:7f:17:1c:51:71:63:
59:b8:af:b5:ef:d2:49:d5:bb:a6:23:36:29:81:8e:
cc:5b:e9:ae:16:d0:79:18:41:d8:94:4a:43:2d:2b:
ad:19:27:a4:f8:67:52:2e:4e:61:e7:fb:8c:9d:ee:
68:f0:f1:ef:9e:2d:56:27:b2:fe:1a:e0:91:a3:0f:
d8:4a:96:f2:59:37:ba:b8:04:e4:e5:c3:b9:55:67:
43:12:6f:be:98:fc:3c:67:c9:c0:2a:0d:37:11:f3:
50:c6:0a:af:cd:c2:a2:28:cb:de:e5:2f:65:95:0a:
f2:18:c5:97:18:4b:89:91:fa:8d:27:14:80:2b:89:
f9:c8:93:1f:08:2c:28:59:4b:ba:63:34:85:a5:de:
f8:bd:0a:b4:d4:6e:9a:0d:40:57:f9:54:6f:af:25:
ca:5e:fe:02:03:44:bf:90:16:a8:c6:d1:f4:95:5d:
11:df:9a:d3:28:f9:b7:72:5f:c9:80:2a:70:b7:fe:
54:e2:74:75:05:7c:c8:8b:7c:36:3d:61:01:59:38:
b3:81:02:60:48:4c:9f:4e:01:38:d2:76:18:34:9a:
f7:f8:a7:a1:08:5e:c7:29:ac:13:02:c0:13:b2:ee:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DC:04:EE:9C:A5:A4:D3:59:2A:82:EB:D7:E7:36:A7:C2:53:A4:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/afb8aa3a-0adf-3797-8eb8-4a004287ddbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.crl
X509v3 Authority Key Identifier:
keyid:CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d1:9e:d7:51:65:a8:2a:eb:76:94:0b:31:46:41:f0:1b:b0:
91:00:de:1e:33:ad:0c:c8:1b:90:78:cc:4d:28:60:a8:8a:d9:
67:94:cf:83:7f:15:04:b0:14:ba:69:2b:25:cc:b8:d6:03:e9:
39:b4:da:ae:24:00:41:b5:f8:0e:85:a4:67:1b:3d:e2:9e:a5:
18:c2:29:9d:dd:30:08:fb:6d:83:b9:5f:58:68:aa:e2:7c:42:
0c:7e:67:17:da:42:bb:3c:32:83:2a:ab:65:b2:9a:8a:b6:17:
49:36:97:d1:eb:e8:e2:66:25:5a:ef:05:5a:e7:49:28:3a:9b:
9a:b0:f3:89:10:2a:19:c9:0a:30:65:06:82:af:84:24:cf:10:
a1:95:45:d5:e3:f7:42:c6:f7:96:06:15:7e:b6:78:05:c7:4f:
6e:bc:e0:51:a7:9d:95:a3:56:e6:99:d0:fe:20:5b:5d:3e:e5:
45:c3:1c:15:12:b3:23:ba:ea:34:5f:fa:8c:07:16:46:6e:20:
b6:7d:fe:f3:e0:51:20:c7:44:7f:d1:16:9b:b6:94:a7:71:27:
0d:91:b2:8a:96:d1:d7:48:19:90:a4:c6:26:58:6d:2f:fb:d2:
64:d5:96:7d:c0:d6:cb:75:e4:54:75:38:66:a7:1a:d2:ef:d0:
32:3d:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:55 2025 by rpki-client