Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa
File: 5094b170-7783-383b-add6-8db0ea7f91ad.roa (raw, json)
Hash identifier: QUhiE2c30unUueH7VhvL071APcS4MSg+NeH/nlhZuTo=
Subject key identifier: E2:72:01:8E:A7:75:D4:58:29:E1:7F:3C:D2:5F:7D:61:BA:A5:B9:C7
Certificate issuer: /CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8
Certificate serial: 010D0C9F4328584902E26AB3DE30BD4214555640
Authority key identifier: C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa
Signing time: Wed 26 Feb 2025 13:41:39 +0000
ROA not before: Wed 26 Feb 2025 13:41:39 +0000
ROA not after: Tue 27 May 2025 12:41:39 +0000
asID: 2914
IP address blocks: 23.134.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:e2:6a:b3:de:30:bd:42:14:55:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5b86-cca0-4f2a-87a4-874f5e96eed8
Validity
Not Before: Feb 26 13:41:39 2025 GMT
Not After : May 27 12:41:39 2025 GMT
Subject: CN=64d6350f-af11-4276-93a6-7333b2cd17a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:06:3e:f4:71:51:01:86:22:e0:ad:00:06:
d9:76:cf:a1:e0:5b:b6:10:8c:aa:a9:ae:e4:01:7f:
82:b7:9e:6d:40:d5:f4:fe:be:d9:a7:44:ca:a4:c5:
fc:61:7d:24:02:3b:ae:2b:71:5a:76:59:4c:2d:98:
b5:b3:73:d5:3a:e1:ab:de:8d:1e:a5:f0:a3:1f:58:
42:36:52:b0:73:b8:75:65:43:b6:f1:fc:d9:1d:b2:
37:f6:6d:a0:24:a5:b2:ac:4a:d6:e4:37:c5:d2:78:
17:a3:01:90:14:44:ea:17:2f:c2:dd:a0:40:9e:02:
47:19:97:84:eb:1d:64:a5:bc:e7:ae:5e:55:b8:4b:
29:4f:7f:ef:79:c0:ef:8e:49:c5:d2:76:cf:1f:fb:
f1:c0:07:ad:5b:10:a3:ee:bc:75:d3:00:08:f4:24:
21:cd:9a:a9:b5:21:a2:f5:98:78:3d:87:bc:51:14:
91:96:8c:af:95:a1:be:0c:5a:3a:2c:40:26:a1:ff:
6b:db:69:b5:e2:e3:02:fe:ff:ba:a8:df:6c:49:9e:
ba:54:1a:eb:e7:90:cf:39:35:34:f5:1f:e6:5b:89:
16:3e:65:94:12:89:6f:d6:8a:62:cf:82:29:3b:bc:
1d:83:c8:60:67:b4:53:51:73:91:ad:6f:79:cf:14:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:72:01:8E:A7:75:D4:58:29:E1:7F:3C:D2:5F:7D:61:BA:A5:B9:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/5094b170-7783-383b-add6-8db0ea7f91ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.crl
X509v3 Authority Key Identifier:
keyid:C7:79:C1:DD:35:BC:68:51:32:59:6B:CF:57:81:3B:7D:C4:E3:24:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba2d5b86-cca0-4f2a-87a4-874f5e96eed8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:13:36:3b:29:af:aa:02:d7:83:5c:d9:4c:26:53:94:9e:b8:
cd:47:fd:95:31:b6:8c:f1:6a:ed:4e:ba:cf:1a:79:a3:b0:b5:
3f:6b:6b:e3:b3:e5:7f:78:10:f1:e2:79:82:b6:22:e0:b7:20:
f2:64:41:de:30:8c:b3:24:63:f7:5d:b4:0f:55:f3:3d:5c:3e:
e7:30:d5:2e:36:ab:ff:7d:eb:16:98:b2:2b:46:0b:21:d3:0e:
f4:07:83:14:71:6e:00:7b:12:a1:cb:63:5e:cb:37:cf:12:6c:
93:21:64:51:07:8b:bb:0d:13:98:0b:01:87:ab:52:21:e0:28:
c6:53:88:80:5e:99:c8:06:c1:28:8e:f8:d6:cf:0c:5c:b6:91:
13:60:e5:5b:45:dc:09:49:66:9d:ec:c8:85:b6:ec:49:50:69:
b1:84:db:51:2f:8d:9a:11:7c:36:f5:40:d9:27:b9:e2:f9:83:
3f:d6:16:d8:ed:d8:c3:c7:cd:f4:27:a1:36:99:eb:13:8f:46:
7f:33:ab:a7:b8:8a:78:ec:21:0c:be:29:d1:85:3c:56:9d:19:
2a:9e:17:97:51:6c:a1:b4:e7:a1:13:61:4f:0d:54:3f:56:80:
4e:e8:ee:56:5b:b1:37:62:52:4c:fe:ff:6d:60:07:ec:45:e1:
ef:cb:0c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:28 2025 by rpki-client