Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81a94ea6-5eae-391c-9882-34c1ae45eb2c.roa
File: 81a94ea6-5eae-391c-9882-34c1ae45eb2c.roa (raw, json)
Hash identifier: NvYlqN59SAwfs/eVmDcXY8Ajbq22kPt7NKzvtt8kKXY=
Subject key identifier: E8:7A:42:12:34:7F:54:C0:3D:60:EB:5B:F7:31:B4:A1:38:6A:56:90
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F43285849244E78E4E0884792B475DDA0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81a94ea6-5eae-391c-9882-34c1ae45eb2c.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 23.239.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:78:e4:e0:88:47:92:b4:75:dd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=abb4cbf0-6840-465b-b1ee-a8aea1d5fcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:13:3e:d5:36:c6:7f:c2:82:8f:3e:37:32:
14:38:44:5f:62:14:3e:13:ed:29:4b:73:db:f7:fc:
d0:35:21:d4:f0:46:4e:84:2a:3a:49:b5:62:78:3b:
94:81:2a:c1:73:07:e1:80:58:ca:ef:c8:93:82:f3:
95:43:fc:65:da:bc:a4:69:f6:0e:b7:8a:a1:b5:e7:
9e:54:7a:ff:59:3a:44:2a:2d:6e:89:b4:6d:cf:97:
0e:21:28:0b:a2:bb:1d:b1:e7:1a:e7:cf:09:28:9c:
f1:75:01:92:19:60:27:90:34:0c:5d:6b:8a:6c:88:
91:6a:f1:69:ae:b0:70:95:5b:99:5b:64:39:c3:75:
83:28:80:ee:c3:9d:36:ba:bc:e5:f6:93:27:bc:57:
93:76:92:2e:c3:e9:29:4d:c7:e0:47:3d:ce:5e:b5:
dc:59:cb:a8:f0:05:60:43:5a:33:1b:26:6d:06:d7:
50:52:3b:92:38:08:7d:b2:fa:15:05:53:41:42:11:
92:10:e2:a5:68:b6:3c:a1:08:52:1b:06:71:c0:3a:
3b:60:40:f5:87:a0:b1:7e:1b:cb:48:0a:a3:a4:7f:
60:d6:c6:d8:21:2d:d0:f1:17:32:b3:08:ec:3b:0c:
74:a5:c3:ae:1b:e4:c8:ed:31:46:1a:ef:cc:9b:84:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7A:42:12:34:7F:54:C0:3D:60:EB:5B:F7:31:B4:A1:38:6A:56:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81a94ea6-5eae-391c-9882-34c1ae45eb2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.239.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:78:9e:ec:c3:6f:8a:15:25:58:8e:be:b0:9b:05:db:a5:3c:
21:83:e1:53:d2:03:a2:e0:16:9e:97:22:37:06:bd:c3:e4:d1:
ed:7f:09:c4:c7:61:af:82:3d:70:6c:ac:ea:bf:b0:9b:26:97:
d8:94:6b:ef:50:4d:b1:4d:d5:84:cf:06:fc:39:7b:0d:68:ec:
d7:59:b5:0a:f9:9c:94:7b:0d:35:08:01:9e:2d:d9:6d:1a:bb:
d0:03:38:f6:a3:f1:9d:ee:bf:7d:88:e7:e3:55:29:17:f5:01:
d5:fe:0c:5e:0d:f7:fd:d2:fd:21:59:d9:ec:30:95:cd:2b:aa:
3b:59:f9:04:2e:1d:ff:56:3f:bf:d4:d5:78:3c:af:49:1b:8c:
4b:7b:56:2f:d2:5b:28:90:f8:90:8c:76:46:25:21:ce:39:ca:
f8:67:22:aa:f7:f0:5e:13:2b:6a:be:4a:83:9d:6c:ee:3f:3a:
df:ff:96:b7:80:20:1e:96:0e:01:e2:d4:cb:ca:b6:01:9e:a2:
df:64:78:45:42:c2:7c:ec:dc:19:28:52:bb:6c:1c:3c:70:11:
71:8d:bf:b4:f4:ae:2f:34:05:af:40:bf:d4:d6:fa:42:4c:ce:
82:e6:1b:47:49:c2:24:37:c9:5e:6f:22:04:02:40:5c:49:9f:
8d:b2:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:06 2025 by rpki-client