Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa
File: f47c4505-8c43-385b-943b-712b48bd1cc9.roa (raw, json)
Hash identifier: q+WH2/ZczUGjbXdvtLUKkVvZ6PvcczILBten40suhJ4=
Subject key identifier: 98:13:79:F9:5E:0C:07:B8:F3:7F:35:F1:A9:47:15:A5:BD:4D:74:AD
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584917DC257C1ED38E55661E57A0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 6643
IP address blocks: 23.239.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:25:7c:1e:d3:8e:55:66:1e:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=cc203c30-bd26-4add-8f0f-46f56a68d21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:46:59:24:95:a0:85:9f:af:3e:33:44:0d:
e7:71:df:75:c7:12:8b:64:4f:a8:e9:90:9d:4e:99:
13:39:8e:b4:37:8e:e7:eb:71:c1:3b:ab:5b:21:8b:
71:d2:3c:30:21:65:75:ba:54:c6:3a:79:0e:08:91:
d5:52:4c:33:ce:13:b9:f0:9c:1e:7b:0c:e0:16:8e:
ce:f3:ab:20:96:4a:72:13:af:1d:5b:1d:af:da:58:
c2:38:c9:8d:6f:3a:6b:59:10:7a:24:66:bb:f7:85:
a0:9d:7f:e2:6a:47:b6:f2:bb:4f:36:ba:b2:b7:bc:
9d:62:e7:8f:2d:0f:fe:a8:1c:04:6b:29:7a:6f:c2:
1b:db:e4:2e:f5:23:40:47:0f:ed:8b:f4:34:de:1b:
f3:b7:5a:f2:f2:af:08:98:a9:9f:81:85:06:9d:a4:
98:d7:5c:81:d3:de:33:77:cb:c5:a1:71:b5:bc:43:
61:c7:ee:be:40:af:c6:67:59:b5:d8:48:d1:3a:0f:
39:75:ad:99:2c:2f:c7:2a:71:5d:65:5f:95:48:65:
91:7f:a7:fa:29:25:b0:ab:e7:2a:12:95:cb:77:a1:
a7:60:a7:3f:23:61:5e:66:27:f3:5d:16:ce:aa:4c:
68:76:3e:30:de:07:9a:fa:92:31:c6:a7:b5:e1:34:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:13:79:F9:5E:0C:07:B8:F3:7F:35:F1:A9:47:15:A5:BD:4D:74:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f47c4505-8c43-385b-943b-712b48bd1cc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.239.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:b3:07:c8:57:82:73:d4:e8:14:35:71:3e:6d:fa:dd:2f:42:
55:32:1c:80:86:f7:2e:96:66:e6:05:60:22:ef:4a:38:7a:3b:
ea:32:7a:4a:4a:88:1d:5c:63:71:a6:55:8a:9c:a0:d7:02:10:
fa:57:c3:b4:90:54:d8:50:37:31:46:02:95:ae:2c:e4:c7:85:
13:ec:17:b1:bd:ee:df:73:33:48:0b:71:50:48:4d:f9:0a:e8:
d2:15:d3:4d:d5:30:74:8b:61:32:54:63:11:36:89:ac:29:bf:
6e:06:ef:e7:2d:27:f2:db:4a:36:e4:36:df:bf:9e:70:15:c3:
a1:96:6d:dd:a1:ed:cf:b8:28:6d:74:c3:95:e2:18:6f:af:c2:
d6:3e:31:67:1b:30:cd:d4:07:9c:2c:60:1e:e7:38:21:8f:18:
c9:8e:36:80:83:14:45:32:0a:b6:f6:14:91:2c:ff:88:dd:bf:
10:0a:0a:be:e7:05:8c:08:21:25:e9:4c:68:e8:cd:c9:ca:7f:
d6:ad:dd:d6:c8:b6:c6:4a:46:4a:93:d1:50:68:04:5d:f3:e7:
6d:dc:a3:92:33:2e:74:c6:5c:eb:94:82:16:21:b8:ad:6c:21:
ca:46:77:86:33:e8:8f:3b:12:c4:97:0c:d7:15:c4:c4:4f:58:
dd:4e:19:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:09 2025 by rpki-client