Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa
File: 5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa (raw, json)
Hash identifier: K9YjG/1tgHaGHw6r7lmyEURkLp2lI/T3rAlUr7KocNg=
Subject key identifier: 1A:D2:58:ED:DA:4F:09:A0:8D:21:D5:5E:34:7B:F0:46:C8:56:61:71
Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee
Certificate serial: 010D0C9F43285848E59BC148A5022B69964E57C0
Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 14618
IP address blocks: 23.133.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c1:48:a5:02:2b:69:96:4e:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=bf6a5f36-df6a-491c-8da7-863ea54ceaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:ff:77:04:52:87:d7:e2:eb:6c:14:8b:09:
18:b6:2d:a4:ce:62:96:2a:d4:91:7b:4d:03:28:f5:
b8:a0:c4:b5:20:05:b9:2b:33:79:90:f1:da:0d:1c:
e9:6c:5b:2c:b2:3f:5f:d1:ee:10:88:7c:23:c2:5c:
99:31:0a:12:ba:03:3b:78:d7:70:24:09:ed:3b:f0:
30:ec:cb:55:06:9e:ab:6f:c2:c9:6e:a2:32:05:09:
ef:c9:5e:21:72:06:89:05:44:9c:13:79:0c:ea:76:
52:36:46:d7:78:a9:e5:f9:c4:c3:2c:11:72:92:b6:
c3:6a:7c:a4:0a:5a:b2:65:92:bd:0b:47:9e:1f:39:
a5:30:ec:13:76:46:d2:0f:5b:b2:46:67:98:f1:d8:
0c:d3:ed:1b:0d:f5:fe:ae:a4:3b:1e:73:0d:a7:0a:
70:5e:2d:5f:0f:be:6b:3d:35:b2:b0:ee:dc:be:46:
b8:4c:3f:14:8f:4c:a7:72:1b:30:2f:ba:0a:f4:51:
b4:eb:d9:d9:ea:76:12:1f:fe:db:37:ab:54:60:14:
8c:f2:ef:a8:68:56:ba:33:12:61:96:36:11:2c:e5:
f0:1c:d3:7d:cf:a8:f8:06:33:bc:b5:6a:90:11:25:
22:c8:73:c5:47:b2:88:1e:2b:b8:74:8f:d2:62:8c:
80:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D2:58:ED:DA:4F:09:A0:8D:21:D5:5E:34:7B:F0:46:C8:56:61:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/5f5c977d-c8f7-35dd-8f68-3ba6e3aa2115.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl
X509v3 Authority Key Identifier:
keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:4c:66:dd:19:c3:81:4a:04:cc:6c:0e:f6:96:bf:af:cd:a0:
c7:5d:4c:98:9a:9d:e3:be:cf:49:ac:db:06:e4:7d:d4:a6:71:
e9:da:bc:85:f7:3a:2c:06:8e:f9:82:5b:4a:ae:fa:e2:7b:cc:
a5:38:0e:89:9d:97:77:a2:63:dd:90:92:fe:74:e6:47:02:cf:
f7:ea:31:51:8c:cb:4c:ab:5c:be:08:f6:a9:06:4a:b3:57:c6:
3d:f1:7f:90:26:84:18:28:e5:4e:9a:3b:bc:51:22:42:2e:dc:
36:f9:68:4d:a9:f6:e4:03:e1:d4:83:89:44:c6:a2:e1:70:56:
f5:3c:ff:95:37:42:50:a3:78:f0:6e:2b:b1:cc:fc:11:b7:21:
44:45:64:d9:c8:eb:f7:fc:44:35:ae:a0:a7:99:ac:b2:75:42:
84:26:2c:29:27:7d:23:8e:1d:4f:90:28:ff:8a:da:b1:f8:3a:
48:d5:f9:ff:80:58:1e:5a:14:0b:64:8a:0b:32:b3:2b:77:6b:
2f:0b:9f:e2:b0:a4:ba:cc:ee:53:19:3f:4b:fc:d6:91:83:9e:
af:ad:63:9a:57:4d:e6:7a:bc:3a:52:6b:03:2d:93:69:bd:e6:
16:cf:43:6b:83:52:02:6c:38:d6:9f:d3:5a:b5:71:0c:88:44:
42:d6:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:09 2025 by rpki-client