Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa
File: 1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa (raw, json)
Hash identifier: EJ6RmNLPLrngAEKcfWhmvwZnwYcLoi3UNkI0FivaBPA=
Subject key identifier: 64:4E:E9:68:61:E5:EB:15:9E:96:60:E8:61:08:01:5D:31:97:DE:7C
Certificate issuer: /CN=b59002d2-8fd4-446f-987c-e63485cf1a5a
Certificate serial: 010D0C9F43285848B54B088ED3C0B95AC0A077C0
Authority key identifier: FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa
Signing time: Wed 29 Jan 2025 18:39:23 +0000
ROA not before: Wed 29 Jan 2025 18:39:23 +0000
ROA not after: Tue 29 Apr 2025 17:39:23 +0000
asID: 401630
IP address blocks: 23.133.100.0/24 maxlen: 24
2602:f724::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b5:4b:08:8e:d3:c0:b9:5a:c0:a0:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59002d2-8fd4-446f-987c-e63485cf1a5a
Validity
Not Before: Jan 29 18:39:23 2025 GMT
Not After : Apr 29 17:39:23 2025 GMT
Subject: CN=324eb40c-c27e-47ad-868c-3eba44b121b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ec:d6:fd:a6:96:6e:95:52:e1:b6:4f:f4:4b:
ac:f2:97:38:8e:52:b8:fa:1f:5d:ba:9f:0a:12:d2:
6c:11:b3:5e:aa:9d:a7:57:49:fd:1c:34:51:63:55:
a2:00:7a:58:b4:f7:d9:bd:aa:6e:b6:56:1e:19:e8:
ed:c7:ff:92:ae:ea:9d:45:b2:e9:81:b0:68:9c:89:
ce:ff:c8:39:ef:27:21:65:01:9d:ee:b8:5c:ca:3c:
e5:9c:08:19:9b:1e:b5:e4:0c:35:f1:cc:f1:d8:c7:
ac:b2:14:f6:de:42:b3:88:02:75:65:64:4d:f6:10:
3c:9a:1f:b7:87:c6:72:e9:28:f4:64:5d:16:de:8f:
37:49:20:ed:66:29:36:22:ae:49:37:d0:39:75:99:
e3:3b:77:ef:44:1e:c4:d6:dd:40:1a:70:d2:36:57:
46:40:96:89:25:d8:03:5a:8a:df:40:84:c0:5e:84:
f9:23:31:08:7b:c0:22:d9:c1:e9:cf:95:9f:95:62:
14:1f:c1:a3:98:ff:a9:67:7f:06:c2:c9:fd:9b:13:
e8:fd:85:cf:05:c8:de:66:93:6f:b9:57:ef:3c:a5:
8c:b3:09:e0:90:3a:ba:87:34:76:6d:c2:7d:f5:e2:
2a:15:65:ce:48:f8:d9:fe:be:ac:c5:7e:79:5e:6b:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:E9:68:61:E5:EB:15:9E:96:60:E8:61:08:01:5D:31:97:DE:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/1c3009d6-b3d8-3ec6-a5f5-b9acd7b32dcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a/b59002d2-8fd4-446f-987c-e63485cf1a5a.crl
X509v3 Authority Key Identifier:
keyid:FF:E2:C6:56:96:3E:3C:7B:DA:13:F2:F1:01:66:AC:54:1B:F2:0A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b59002d2-8fd4-446f-987c-e63485cf1a5a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.100.0/24
IPv6:
2602:f724::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:c8:9c:64:d7:b3:8d:25:ab:f7:56:4d:c2:1c:16:fe:29:17:
8b:d9:c2:0e:74:44:44:f0:88:1f:4c:4d:37:1d:cc:2a:94:7a:
93:a5:4c:b0:47:ed:dc:61:1b:53:db:d8:40:14:9d:ed:3c:64:
3b:8c:71:c7:1d:3c:75:53:58:65:e2:bd:2b:96:02:17:01:3b:
ee:19:56:67:ce:5c:ae:cf:a5:07:4a:d9:eb:a1:c5:f1:10:01:
5e:f2:2b:7f:95:62:0c:0a:78:2e:5c:d0:56:4c:fc:5d:3a:d6:
01:eb:1c:1a:c0:24:38:7f:6e:b4:bc:0d:c2:26:fc:8a:5b:56:
22:3b:18:c9:83:bb:7a:07:66:59:02:ae:76:4c:22:39:2d:a3:
9d:a1:74:ea:e6:a9:45:b7:cf:fd:87:0f:65:4c:56:32:02:a0:
34:45:24:5a:40:83:69:3b:59:6c:d7:0c:69:d7:05:c1:4d:87:
84:af:a2:bd:b2:b0:77:66:87:49:fd:9b:e7:98:22:56:af:60:
99:c3:e7:f5:71:e8:62:67:11:fc:3d:06:ea:30:3e:46:78:59:
82:7b:4c:22:24:59:fc:e7:8e:47:90:d1:ec:2d:a5:28:0f:bf:
de:80:ba:e9:b8:22:4e:10:41:bc:39:19:f0:db:50:6f:08:bf:
80:b7:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:09 2025 by rpki-client