Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa
File: 38415cef-c01c-329c-8c56-19ea085fd8f1.roa (raw, json)
Hash identifier: M0p4j0X6717J67hhTtsLwL1gJa0DUVSk7OjS42s244g=
Subject key identifier: 7D:A9:69:35:CE:53:A1:E9:B8:CA:64:82:DB:21:A8:B1:74:8E:13:44
Certificate issuer: /CN=858c4eda-1c14-4575-affe-9e4368bf208d
Certificate serial: 010D0C9F4328584863CB168BFB510180EB5BBA80
Authority key identifier: 3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 203618
IP address blocks: 23.226.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:16:8b:fb:51:01:80:eb:5b:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858c4eda-1c14-4575-affe-9e4368bf208d
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=a97fa8f5-678c-410b-8027-2ae896354467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:b4:b3:71:80:66:db:df:7e:35:43:bc:de:
11:a9:26:1b:c2:77:52:39:1d:4c:5e:c5:bc:5f:0b:
9d:1b:6c:ab:cb:ec:2f:dc:7a:33:c8:71:c3:b1:93:
c5:b7:c6:e5:a0:2f:13:3c:35:54:6b:ad:d3:80:0e:
ec:52:e7:bf:c0:c7:18:ce:46:62:1c:7d:bf:bb:2a:
3f:19:e4:82:9b:ec:22:34:c3:45:eb:55:1f:5f:20:
76:bf:bf:5e:90:73:df:36:38:d5:e2:57:1e:61:7f:
e1:96:e8:eb:05:45:70:1e:d0:00:0c:cf:c5:88:a1:
28:c3:e6:6e:bd:6a:52:e1:54:43:da:73:02:17:d6:
00:58:68:a4:1c:cf:ad:5b:9a:99:ca:e7:43:8f:59:
44:b4:b8:a2:11:16:13:89:1d:65:ae:78:e1:61:77:
a7:78:0a:dd:2f:f2:6a:bf:3f:7e:d1:4d:0c:14:5a:
ba:90:90:d3:42:07:d6:60:07:c6:f8:93:6b:94:5f:
6e:d3:a3:c9:4d:45:0e:6f:29:b7:cf:2a:41:1b:f7:
6b:03:91:9e:f4:f4:c7:07:44:fb:7e:e3:6e:75:36:
3f:dd:2f:ac:0b:4f:c5:ca:f5:ba:8f:1f:f3:81:55:
9d:06:46:b9:12:50:4e:a1:ff:4e:74:e7:b0:07:f7:
23:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:69:35:CE:53:A1:E9:B8:CA:64:82:DB:21:A8:B1:74:8E:13:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/38415cef-c01c-329c-8c56-19ea085fd8f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d/858c4eda-1c14-4575-affe-9e4368bf208d.crl
X509v3 Authority Key Identifier:
keyid:3F:78:6B:A8:C4:71:A2:5B:59:61:A0:42:6B:C4:88:EE:2D:BB:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858c4eda-1c14-4575-affe-9e4368bf208d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.226.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:9c:e0:35:3f:91:63:99:2a:40:df:38:8f:94:2e:fc:ed:a4:
99:bd:c6:d2:1a:86:9a:13:9d:20:0d:70:24:37:7c:ae:55:3a:
27:19:47:c6:2c:18:a0:e5:44:85:7e:11:da:be:3d:45:d8:5b:
79:f1:9e:e4:cb:87:40:fc:eb:f5:66:e1:93:62:71:8b:bf:86:
f3:22:29:6a:37:0f:09:0c:31:d6:e6:6a:1d:55:39:78:cc:c5:
99:cc:24:3e:88:68:64:da:94:8c:e5:12:23:58:01:fe:70:a4:
58:57:77:9c:d0:a5:12:8f:1b:be:84:2e:3f:eb:41:ae:27:b4:
92:25:8f:f7:c2:9b:b9:fe:f2:05:d4:e2:fe:13:dc:82:10:97:
3a:72:d0:71:e9:32:64:6a:64:98:55:8f:c7:a0:6e:8c:d5:97:
d7:7d:e7:5d:8e:9a:32:b9:ae:46:7c:a2:1c:b0:df:57:ae:e2:
61:c2:2e:5c:68:79:f3:6a:98:6c:be:7f:7f:cb:01:f2:de:84:
79:02:0b:79:56:af:12:b4:77:96:ad:b4:9c:4a:55:34:04:bb:
b4:a5:30:9d:5a:12:fc:7f:7a:91:dd:30:da:4c:ec:ab:3d:c9:
22:1b:a6:93:03:d3:08:2a:2b:c7:9c:99:0c:cd:eb:51:c4:95:
09:73:87:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:28 2025 by rpki-client