Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/f534d584-18c0-34ec-a642-3fbc7cd61fdc.roa
File: f534d584-18c0-34ec-a642-3fbc7cd61fdc.roa (raw, json)
Hash identifier: xSMm+c7ThIPjSfYzD6PUyKkjYctBoRV56sR1wffDwUQ=
Subject key identifier: 62:3E:CB:58:9E:EA:4D:D7:3D:08:96:F1:44:50:EF:BD:E9:3F:0C:DE
Certificate issuer: /CN=cf438e4b-3515-40c3-b514-36b1b15593d8
Certificate serial: 010D0C9F43285849387ABA3E836E2AC6E3BC9C92
Authority key identifier: BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/f534d584-18c0-34ec-a642-3fbc7cd61fdc.roa
Signing time: Mon 17 Mar 2025 18:26:22 +0000
ROA not before: Mon 17 Mar 2025 18:26:22 +0000
ROA not after: Sun 15 Jun 2025 18:26:22 +0000
asID: 397423
IP address blocks: 23.142.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:38:7a:ba:3e:83:6e:2a:c6:e3:bc:9c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf438e4b-3515-40c3-b514-36b1b15593d8
Validity
Not Before: Mar 17 18:26:22 2025 GMT
Not After : Jun 15 18:26:22 2025 GMT
Subject: CN=835ddd37-067e-43b2-8099-d608df9e5e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:2d:f3:08:0f:8b:ba:58:f4:be:4b:7a:f9:
a6:cc:1f:d8:05:54:c8:bd:79:49:3d:0b:44:20:f9:
be:90:c0:29:2b:76:e2:bf:3e:8a:bc:de:66:d5:5f:
5a:16:89:56:47:b7:e4:85:03:e0:0b:ba:a3:92:50:
ab:cb:69:43:4a:e2:76:1b:6d:df:29:80:e7:ab:3d:
96:a2:2b:78:91:91:f6:70:35:62:67:66:33:ac:55:
f4:98:dd:38:0e:9b:1e:f9:59:57:f3:1c:74:12:aa:
c0:e5:df:42:83:70:05:39:bf:d0:e6:b1:8a:e1:3a:
e4:a4:e8:7f:f7:8f:e1:4c:db:72:2f:f5:b4:80:fd:
79:07:dc:e6:f1:dc:2e:4d:c6:ce:96:db:c2:6b:7e:
2b:23:d0:aa:f2:b5:29:bc:8c:d9:90:86:7b:dc:66:
78:ef:f1:02:09:9b:10:74:d4:3b:08:e8:8b:b9:fa:
9c:96:f4:4f:22:dd:e1:68:8a:d9:0e:ea:b2:08:62:
0f:ee:14:94:63:55:20:ca:e6:94:74:32:c9:1a:aa:
93:0b:6a:5d:16:e4:2b:b5:d5:9b:8d:89:59:3e:8f:
35:37:7f:4d:dc:49:48:c1:62:5d:e5:19:22:90:9e:
db:ed:1c:a1:ce:f2:8d:72:d3:ae:b8:a1:6d:de:3c:
92:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3E:CB:58:9E:EA:4D:D7:3D:08:96:F1:44:50:EF:BD:E9:3F:0C:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/f534d584-18c0-34ec-a642-3fbc7cd61fdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8/cf438e4b-3515-40c3-b514-36b1b15593d8.crl
X509v3 Authority Key Identifier:
keyid:BE:92:70:65:F5:E6:0D:B4:11:06:AC:D6:1A:AC:22:26:3D:8C:4D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cf438e4b-3515-40c3-b514-36b1b15593d8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:0a:8f:87:b0:33:86:5e:6c:67:f1:ab:93:ae:c4:a7:d5:20:
7a:28:33:5f:0f:ef:f4:79:c2:e3:75:1b:13:0b:5e:ac:58:03:
12:39:9c:63:4a:96:8a:27:61:a0:bb:12:f8:6b:a7:2d:2c:47:
bc:12:d1:81:6b:63:52:7a:2d:ee:ee:2c:b3:e1:08:57:11:fd:
ba:a5:ed:4c:e6:ad:3c:f0:29:aa:5c:5c:b0:05:3d:b8:33:fd:
cf:bb:bd:7e:d6:6b:00:6c:c7:ae:71:00:0a:3f:22:74:d5:cf:
4c:36:05:84:f7:37:25:83:0d:1a:a9:3e:a1:4e:14:d9:e7:9d:
1a:0c:d6:02:a5:40:ec:e0:68:ad:58:ed:a8:b9:13:5e:eb:fa:
52:f0:8b:64:d6:de:6c:d4:7d:78:ad:b2:d0:42:f8:ff:cb:7a:
f9:d7:7d:24:ad:bc:25:aa:b4:1d:5d:43:59:83:7d:45:6f:37:
b7:57:50:a8:c0:fb:0b:ad:dc:f7:fd:47:83:5a:84:d7:a6:44:
14:43:0c:db:b4:76:69:23:df:59:30:3d:2d:6c:93:df:91:b5:
e1:94:b5:58:b7:ed:66:9a:b6:61:e7:71:4c:ac:a7:d8:b2:28:
d8:7a:f3:24:2a:fa:25:54:e4:d5:8b:4e:b4:0a:3d:05:8e:84:
fe:46:cb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:14 2025 by rpki-client