Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa
File: fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa (raw, json)
Hash identifier: xB+okgD3Z0MMYbqs8bm/p2wp8zAe3C1pVZG9Z5FhR9A=
Subject key identifier: 2E:A8:B5:09:E5:05:CC:74:38:C4:A9:06:37:EA:9D:4C:74:1D:2F:C4
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F432858491ED6D742F39EEE63FF0EB540
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 396982
IP address blocks: 23.89.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:d7:42:f3:9e:ee:63:ff:0e:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=29086cf3-d7eb-4cd6-8228-92ffa126dd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:a8:02:8d:45:45:ee:43:3e:14:4e:38:79:
4e:3c:92:27:09:3c:ca:85:e3:29:27:f0:db:b3:7f:
25:6d:4f:2a:5f:47:5f:ee:af:fd:f7:19:74:c0:12:
57:7a:b0:cc:aa:ef:8e:cc:b2:62:ce:38:ef:5c:4e:
eb:7f:54:ac:06:75:c0:fe:35:79:64:c7:1a:26:83:
3d:70:34:24:92:bd:f7:be:4e:e9:f7:8b:c0:38:7a:
8b:7a:27:ec:10:81:48:e0:f4:af:37:62:b9:c2:72:
87:98:a9:f3:42:cd:00:78:e5:65:16:11:f0:d3:27:
b0:e2:ca:15:7e:9e:e7:04:81:5b:b1:c9:05:9a:96:
4c:8b:56:cf:7d:11:ff:44:19:08:39:ee:12:be:17:
4d:c9:e0:b7:cc:35:24:95:d0:45:b7:a5:fd:7f:37:
52:1a:c1:81:f2:c3:5c:f9:86:37:96:db:48:86:ed:
da:fc:a1:d2:53:a5:1b:3b:b2:12:4f:d5:78:43:86:
a3:ad:41:ff:33:33:f5:1b:0f:49:f0:da:58:33:cb:
db:a9:74:53:31:aa:fe:e5:f3:fc:3e:c3:c2:ba:7d:
c1:65:7b:76:0f:e6:ff:37:3e:62:4e:c2:cc:bb:6a:
29:69:18:eb:ca:4b:65:2d:df:09:6f:7e:b2:dd:93:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A8:B5:09:E5:05:CC:74:38:C4:A9:06:37:EA:9D:4C:74:1D:2F:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.89.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:11:37:f8:0f:47:28:f1:33:82:99:87:05:e4:55:93:51:90:
f9:cf:a9:e6:23:59:ac:54:73:b8:4e:54:19:ef:bc:9d:0c:37:
1e:76:3c:0d:aa:6f:f5:39:63:7c:b8:9d:2b:d2:3b:a1:90:c9:
05:5d:c2:c3:21:f6:1d:bb:c9:29:f4:65:b8:6b:32:1f:97:2b:
e6:e5:85:ca:b5:9d:03:97:71:e3:b1:f3:b4:5e:de:89:da:f6:
bf:48:26:d4:df:bc:04:4b:b4:67:fd:5c:bc:ed:71:68:dc:17:
65:b4:37:f6:73:b0:ba:7a:6b:9a:a9:6a:8b:08:80:55:66:1b:
4f:d5:72:10:f5:82:61:64:b1:da:a2:9d:53:01:f0:d8:d8:85:
69:24:5b:7d:07:54:92:32:66:54:4e:0b:fb:48:5d:6c:72:6d:
17:ab:d7:06:86:45:86:87:8e:47:d6:71:d2:6f:93:b1:5f:8b:
16:7b:25:6c:58:f6:90:1c:ad:82:ac:b8:e4:e5:4f:e1:50:db:
6c:d6:94:a9:2e:6b:ea:44:fb:63:ce:44:7a:cc:66:be:e5:e9:
dc:b0:42:2e:7b:4f:15:23:f5:0f:92:86:e3:b4:a4:2d:fc:ed:
ae:20:71:34:6a:57:1b:a2:5c:d6:f8:08:f2:34:97:fe:6a:af:
e5:23:83:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:57:34 2025 by rpki-client