Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa
File: 14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa (raw, json)
Hash identifier: otevdG4cUeUjUU7YTEUDzmT3AYVR8WjCarDAfUzvb+A=
Subject key identifier: F4:ED:FF:67:C7:3B:63:E6:9B:DD:76:1F:36:EF:92:F4:A4:01:B0:53
Certificate issuer: /CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386
Certificate serial: 010D0C9F4328584957F41335ECB6334813988E80
Authority key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 401328
IP address blocks: 23.131.20.0/24 maxlen: 32
2602:f769::/36 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:13:35:ec:b6:33:48:13:98:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=d4ff4203-5a8a-4e03-8300-656ba42d89ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:cd:48:3c:97:81:75:2d:99:71:2c:18:c1:
8c:31:de:e0:05:cf:fa:87:ff:08:66:23:06:40:1c:
59:5e:19:dc:03:2d:c6:4f:f4:a9:39:5d:70:05:d1:
53:73:f8:3f:fc:89:07:24:f1:4a:98:7f:92:c9:96:
28:dc:2a:21:8b:d0:da:ea:a7:d7:0c:29:67:94:72:
78:d8:97:41:03:06:78:0c:cf:10:78:bb:31:02:d4:
fd:8f:bc:50:52:20:ee:45:b3:5a:1d:6c:6f:a6:3f:
f3:a7:34:97:c7:5e:98:c6:37:6b:a3:4f:fe:ad:74:
cd:2a:9b:fe:cc:a4:d4:17:e9:14:c1:9e:89:46:e8:
93:21:79:93:c3:9d:bc:fc:20:3e:c4:07:37:e0:b2:
b4:66:c7:9a:bd:3a:d1:2f:8e:4e:80:ea:1d:39:9a:
e6:59:29:8c:b3:54:a9:0f:84:ca:33:c5:a8:3d:77:
25:e9:a2:c6:74:f0:c2:88:e8:ba:81:91:e0:14:20:
ac:ab:e2:3c:d7:e8:73:c8:d1:ca:9a:93:4d:e6:3f:
2b:01:86:66:81:2d:c4:51:72:c8:6c:19:08:1b:89:
4a:4e:7f:71:1e:00:44:bf:6d:7e:c6:92:b1:80:a4:
ec:39:4e:6b:72:64:36:6f:7d:23:84:92:42:11:8e:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:ED:FF:67:C7:3B:63:E6:9B:DD:76:1F:36:EF:92:F4:A4:01:B0:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl
X509v3 Authority Key Identifier:
keyid:B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.20.0/24
IPv6:
2602:f769::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:75:a3:af:cc:5f:44:a5:d3:c0:28:3e:7c:85:4f:2c:b3:2c:
5d:42:61:f7:26:b7:82:81:7a:06:bb:fb:8b:3b:10:a0:02:45:
bc:3c:31:73:e6:89:6d:85:c6:3f:73:1b:5a:ff:e9:37:95:24:
be:0a:3f:09:ad:bc:46:09:91:41:0d:f1:b5:e3:0d:48:0a:ff:
e8:30:d5:39:1f:8b:4a:0a:4e:3f:ed:3d:3f:ce:b1:ea:25:7e:
30:e8:6b:7f:91:93:58:3b:30:1a:f6:af:0f:3c:26:a4:d8:30:
5b:31:82:78:67:2f:85:d9:ae:1e:39:e5:88:3f:a4:1f:3c:61:
f6:8e:55:9c:5d:13:34:3f:48:47:32:ce:6c:e2:f1:78:fc:d1:
ea:e0:39:93:65:04:bb:fa:fc:95:e8:df:31:5e:7c:83:cf:4a:
50:be:6e:d0:94:cb:73:53:7d:31:a4:4a:b0:21:b5:c1:6a:4e:
b3:aa:ec:9f:35:f6:ac:a6:37:da:99:e3:e8:5d:62:db:50:09:
56:eb:c0:fe:2d:e9:72:4c:03:42:1d:ee:e7:0f:82:b4:5a:b4:
f9:16:6a:29:5f:ad:ce:b6:e5:d6:16:b3:54:2a:ea:ce:f4:41:
17:5d:8f:c6:4d:af:60:d3:b2:7f:81:20:cf:87:b6:f4:b3:14:
2a:fc:5e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:53:45 2025 by rpki-client