Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/7c0bbde6-9801-3628-ac38-c03d4f1c2cfd.roa
File: 7c0bbde6-9801-3628-ac38-c03d4f1c2cfd.roa (raw, json)
Hash identifier: xe4LkDu8UpqaetZYRW8chilTPmjeJ/i9Nb2WQKDj2Bw=
Subject key identifier: 6B:6E:20:16:F5:9C:1F:69:E0:1E:8A:F8:3D:5C:0D:DA:25:B6:54:DE
Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial: 010D0C9F43285848EF61332C2FC182E39936870C
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/7c0bbde6-9801-3628-ac38-c03d4f1c2cfd.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 397131
IP address blocks: 23.159.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:33:2c:2f:c1:82:e3:99:36:87:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=4aa2b871-aad1-4248-baa4-8cdd5f5643cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fa:9f:67:51:53:bb:56:a0:22:ee:af:c1:92:
df:af:77:f2:98:d8:2a:6c:97:9f:98:40:90:26:38:
8c:6b:bd:75:56:1f:72:4a:43:c4:0a:74:de:b2:dd:
8c:75:34:29:b5:11:d3:d6:04:bf:4b:80:4e:ac:5e:
ec:7b:84:19:d6:74:fd:a1:2d:9d:aa:1c:5a:ef:d9:
73:c1:18:f0:08:7b:5b:b5:74:79:73:ee:f2:5c:ea:
ce:e4:77:89:6f:dc:5e:52:c6:af:82:41:99:0f:6f:
f8:e6:61:03:24:4c:24:dd:5d:d8:04:1d:34:04:8e:
ec:7e:d7:1a:1f:1c:8c:2d:be:7f:28:61:22:f1:c4:
a6:a8:f8:c2:f6:10:f8:4a:a7:20:ed:a7:d0:77:6c:
76:eb:94:9b:7e:22:c9:d0:ee:4b:b7:97:cd:fe:96:
ce:d5:ee:e7:2f:f6:36:98:87:c1:82:7b:39:6d:1c:
ff:c7:be:54:a5:c2:41:18:19:d8:ec:06:1e:d6:53:
8c:06:65:a4:c6:2a:8a:9b:9d:82:ed:a0:e3:f7:1c:
27:fe:fa:5d:33:e3:10:a3:57:e2:ce:80:c5:cc:17:
4e:bd:12:57:e6:d2:a6:ba:b4:f1:d2:46:1e:b1:d1:
a7:90:2d:09:66:3e:84:a5:13:24:b6:02:e4:ee:2f:
7f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6E:20:16:F5:9C:1F:69:E0:1E:8A:F8:3D:5C:0D:DA:25:B6:54:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/7c0bbde6-9801-3628-ac38-c03d4f1c2cfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
X509v3 Authority Key Identifier:
keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:9b:4e:c9:9c:e4:fd:ca:82:c9:c1:62:a1:89:a8:08:ee:88:
fe:84:58:a3:bb:ac:3c:cb:4f:0f:6e:3c:fc:e0:92:4f:23:21:
88:b6:42:46:6b:91:70:69:27:05:f6:ed:7e:cf:76:cf:56:16:
43:36:f6:59:8e:ef:ea:b6:84:0c:9c:27:a2:ec:24:82:d0:68:
14:b9:a9:c1:f3:65:67:74:86:53:8a:f2:69:75:d9:f6:be:35:
93:6a:89:2c:f9:98:fa:7a:fa:dc:26:12:4a:75:05:3b:21:a3:
7b:22:fb:d1:3d:d4:42:0a:1c:48:c4:5d:5d:2e:a8:6e:8c:05:
66:e5:cd:db:42:1e:64:74:68:e7:8e:80:a7:c8:97:83:52:09:
b5:26:08:21:8b:13:2c:70:96:2a:66:d0:7d:38:ba:9d:bc:33:
82:86:96:c0:fb:43:a9:c4:63:e7:55:39:10:c7:2f:09:e7:8b:
b4:2f:2f:b0:9b:d9:b7:d0:74:4d:bd:71:a5:51:6e:bc:37:cc:
3c:97:f1:f2:5b:78:59:e6:48:0e:83:59:5e:d5:54:28:28:d9:
32:2d:55:bf:b0:bc:b0:10:90:6a:87:c7:be:f6:cb:4c:22:d9:
e8:e5:a1:8e:b0:7a:da:88:42:e2:cb:52:6e:2f:d2:24:ac:09:
fc:cd:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:14:34 2025 by rpki-client