Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3252f01d-313a-3219-93bf-843ea033951b.roa
File: 3252f01d-313a-3219-93bf-843ea033951b.roa (raw, json)
Hash identifier: Hgr2k8PkIV1qmB7DbA5FUWWz/UZWUzE84Ve245RjcI8=
Subject key identifier: EE:66:75:96:B6:DE:D9:87:C4:B8:64:AC:54:11:D5:05:34:B7:D9:4F
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F43285848D7A6481D40B877E635D9E400
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3252f01d-313a-3219-93bf-843ea033951b.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 31898
IP address blocks: 23.239.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:48:1d:40:b8:77:e6:35:d9:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=ba1531cb-9e18-42c0-ac31-175917e44858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:65:ca:45:e3:bb:dd:20:77:46:52:9a:e7:
06:7d:4c:6b:47:76:ab:5c:3f:78:14:f3:95:2a:76:
7e:91:c6:d0:85:8c:86:4d:f4:12:49:59:76:66:01:
cc:00:b7:df:62:09:58:ab:f0:2a:c4:b8:a7:59:c2:
01:ec:96:89:bc:d9:5a:23:e3:bb:18:63:d4:ea:57:
33:90:88:65:eb:d0:9f:28:d9:44:51:30:12:36:c8:
07:c9:69:1f:49:db:a8:45:61:96:99:68:58:31:13:
5a:40:e7:25:8a:49:b8:d4:1f:42:7e:90:1b:78:c9:
c4:4c:a2:15:f8:61:44:eb:96:3b:da:64:e6:4e:fb:
5a:00:1d:c3:af:bb:02:06:9b:e3:7d:27:63:db:c0:
44:9c:7f:bf:5d:f4:fe:ec:00:f6:38:03:1d:2e:6f:
d1:de:a8:7e:81:b2:51:7f:4a:71:89:f4:e9:e0:23:
57:17:ea:56:1e:e9:40:f2:f9:f9:b4:dd:6f:18:97:
5c:a5:36:cb:7e:e7:fc:fa:36:05:35:c6:93:76:0f:
60:5f:91:63:03:be:5e:31:80:5d:92:e5:3c:aa:56:
b9:ae:79:ae:bc:b2:ef:4f:f1:c9:c9:da:30:f4:32:
28:5b:51:b1:02:78:c2:a5:45:92:82:78:90:42:99:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:75:96:B6:DE:D9:87:C4:B8:64:AC:54:11:D5:05:34:B7:D9:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3252f01d-313a-3219-93bf-843ea033951b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.239.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:8a:04:e8:c5:be:f0:96:36:0d:ba:55:ae:6a:df:7b:22:1c:
90:07:60:ae:c5:d7:b1:65:6b:65:9c:b4:7a:bf:c5:76:52:84:
0b:29:34:14:5a:4c:06:58:8a:75:8d:c2:a9:46:72:a4:ad:bc:
f0:d4:e8:72:a4:07:8d:3f:33:e4:2d:fc:1c:1e:5d:94:4f:92:
f4:d3:9c:bb:50:79:53:0e:2d:74:37:69:94:bf:ee:d6:19:f7:
77:e4:9c:9d:ff:ca:7f:04:41:ad:30:fc:58:e9:e9:84:61:13:
b7:be:ff:90:0f:1e:9c:9f:e9:a6:af:7d:3f:cc:68:37:47:0a:
5d:a4:8c:6a:4a:f9:4c:a7:50:8d:41:1f:02:43:03:11:b3:cf:
bc:38:9b:a1:85:b2:9b:08:93:2a:13:2d:7c:fb:d2:c2:e9:bd:
67:ff:55:d7:34:92:af:15:ff:7a:b5:85:19:74:8d:9c:c3:c8:
6c:c0:11:e8:8c:03:52:c8:f5:ce:f3:0e:f7:99:60:e4:a0:07:
53:6d:67:62:6a:8d:04:c6:fb:4d:25:da:6b:ae:29:0b:8a:f4:
76:63:a1:f2:c4:16:26:fb:9e:f1:e9:ff:6d:41:86:3d:66:0f:
cb:46:fb:57:4e:f5:c3:a8:f7:7d:67:0a:d6:ed:95:f7:95:72:
1f:02:85:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:24:23 2025 by rpki-client