Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/26746238-b6c3-36e1-aa57-16ed62ad27c8.roa
File: 26746238-b6c3-36e1-aa57-16ed62ad27c8.roa (raw, json)
Hash identifier: 1qEIP+QUMAKlqbDshBDmJQdQae3+seCGUWzft6/8o+k=
Subject key identifier: F2:DE:87:2B:CE:45:E5:9C:4F:B8:26:F5:1B:8D:EE:C3:5F:E0:2F:10
Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial: 010D0C9F432858489A3B475782F4E1D6CCB4E380
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/26746238-b6c3-36e1-aa57-16ed62ad27c8.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 36007
IP address blocks: 43.231.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:47:57:82:f4:e1:d6:cc:b4:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=8398c67f-2057-48e5-8fa0-e322a881a635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:90:1e:45:ce:2c:4b:77:2d:7b:43:ba:6c:
99:7e:8b:7b:d9:69:e0:c1:f5:a7:e7:9a:52:ff:2b:
8c:16:7b:5f:46:96:be:53:fb:96:f4:70:90:59:0c:
52:e6:1d:d2:3f:d9:df:ba:56:bc:a1:06:2e:e9:25:
fd:5a:5f:cc:18:d2:75:e4:99:d2:e2:b3:4b:8f:4e:
d1:b6:1d:2a:89:49:8c:6b:af:40:32:a0:23:15:00:
03:19:e6:b8:04:dc:68:a4:f0:5b:e0:b1:3d:06:22:
cc:db:89:6b:16:af:f6:8b:fa:37:c8:70:c6:28:0f:
c3:5c:f4:61:a7:14:9c:e0:ca:76:d1:8a:62:4f:4c:
4c:d6:d8:0c:ca:08:10:16:af:24:2e:2d:cd:7d:07:
94:54:a9:eb:73:38:f3:0d:ab:38:73:8d:4c:a4:be:
71:7d:da:01:69:26:97:e0:be:6e:7e:c2:6b:c4:00:
1b:e0:29:55:e7:c5:0d:46:90:1a:23:22:00:1a:01:
7a:88:90:63:5e:da:ca:e3:97:ca:4d:73:7d:3c:14:
f2:c6:41:15:08:28:c4:a3:20:40:c7:37:78:93:9f:
1a:8d:12:44:8a:92:e7:c1:85:d5:07:d2:3c:b2:9d:
00:7e:de:ad:e9:c6:ce:3f:65:09:e8:68:d4:69:74:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DE:87:2B:CE:45:E5:9C:4F:B8:26:F5:1B:8D:EE:C3:5F:E0:2F:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/26746238-b6c3-36e1-aa57-16ed62ad27c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
X509v3 Authority Key Identifier:
keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
sbgp-ipAddrBlock: critical
IPv4:
43.231.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:43:9a:05:4f:74:90:b9:f7:81:43:04:c9:ca:69:b5:bb:dc:
09:54:33:08:57:6a:8a:9d:7d:7f:f4:dd:0a:2b:8f:e3:98:8b:
1a:fc:31:b1:59:aa:be:ac:41:e4:84:41:2c:70:51:24:da:c8:
aa:03:65:50:37:d6:c4:18:5f:31:c0:d0:1f:27:d6:44:2c:95:
b0:6d:17:01:8c:1a:47:d7:0c:3e:32:ad:0e:96:7e:bc:33:6a:
57:04:8e:94:40:7a:4a:34:f8:ab:fe:b6:9b:c1:a1:83:38:3f:
84:68:42:5b:ad:50:e8:b6:98:f0:23:5c:c3:20:94:ea:60:56:
49:f1:c6:8e:a2:9c:3e:0d:e0:01:76:e7:83:79:52:a7:af:83:
9c:be:a0:38:c8:e9:3a:31:ce:70:54:d5:ca:2e:9c:fe:d0:5e:
31:73:be:9a:c2:2f:8e:eb:8f:08:bb:0b:9a:8c:d5:80:93:e8:
39:3c:d3:f6:24:5b:f1:a1:41:5b:3e:a4:ce:fe:46:08:09:1c:
5f:e4:19:4c:8d:6a:02:4b:0c:b4:1f:ee:18:55:90:f4:85:e2:
3d:f9:0b:5c:9d:e5:b6:30:92:8d:64:75:dc:d8:88:d8:f8:e3:
bd:85:e3:90:0b:fc:6e:5d:c7:9d:46:c8:b4:ea:83:4e:10:f3:
57:42:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:26:51 2025 by rpki-client