Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa
File: 65c13d7b-acee-30f4-a5da-46152c1b5e65.roa (raw, json)
Hash identifier: BTd9JXGL2tP6OUcNkE6zAxx9IH6lwsHyIOmhSNCxw6s=
Subject key identifier: BF:01:19:AA:DE:67:E2:CC:43:31:90:B4:09:8E:A6:25:B1:EF:DE:3D
Certificate issuer: /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
Certificate serial: 010D0C9F432858489340A4A6A4F22E30F7A82300
Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 21527
IP address blocks: 23.157.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a4:a6:a4:f2:2e:30:f7:a8:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=69dcdd02-8209-4fcb-ae4e-8a53abf7902f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:14:60:4e:e3:21:8c:83:ea:d8:e6:02:8a:
94:f8:a9:ab:20:fa:ac:70:de:06:c1:e5:68:64:57:
a7:af:a4:d7:9a:fc:43:41:a1:5c:8b:82:cc:62:96:
1a:e6:18:0e:f8:f2:c5:d2:f9:41:5e:98:be:50:a6:
95:62:5d:c8:4e:70:c4:26:05:d8:f7:b0:3c:4e:55:
14:b6:86:cf:9d:97:75:6f:24:26:4d:46:f2:3e:ce:
48:fc:e3:e5:96:42:30:0d:36:3e:cf:a2:7f:59:2d:
bc:61:79:71:a4:17:b1:f9:e6:0d:2c:e5:f9:4c:9f:
09:b2:93:18:c1:31:e0:d9:ed:53:20:53:d1:05:f3:
d4:4a:60:91:da:84:6f:ac:5e:d3:09:4f:e2:63:04:
80:2a:93:f9:f8:56:07:39:45:61:c5:2c:1a:f6:46:
c6:a6:a9:aa:f3:db:1e:b9:91:3e:3b:2a:ee:cd:f5:
96:a1:55:14:64:99:9d:b2:f5:ee:14:41:bc:bb:16:
c6:53:b0:4d:01:fe:7a:59:40:23:5b:be:75:8f:14:
4d:6d:a9:85:46:8a:a2:51:29:b7:3e:7a:67:1d:d9:
67:5e:97:c2:fd:91:16:b0:33:76:94:0b:13:39:1c:
fd:af:1c:0c:8c:24:9d:66:5f:31:81:62:d5:6f:0b:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:01:19:AA:DE:67:E2:CC:43:31:90:B4:09:8E:A6:25:B1:EF:DE:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/65c13d7b-acee-30f4-a5da-46152c1b5e65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl
X509v3 Authority Key Identifier:
keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:15:af:f1:06:87:c5:83:61:9b:a7:a1:81:3c:f3:bb:28:9f:
dd:33:89:6c:b6:9e:dd:b3:35:6d:5c:69:f7:65:13:c3:02:c6:
e3:46:70:c3:1e:dd:cf:05:a0:03:ef:a8:08:0e:7b:76:f3:81:
d6:52:46:b6:2d:d1:c9:f6:cb:a9:73:05:6d:e0:ff:46:95:7c:
ed:18:2e:36:69:b7:27:9c:dd:13:a3:16:8b:68:6e:ef:6c:73:
d2:e9:6a:03:53:3c:4b:4c:4e:19:50:29:ea:17:35:fd:07:8d:
0d:33:b2:24:01:4b:a2:8a:9a:e9:96:35:ed:33:63:e6:c4:82:
f8:9d:e7:43:23:1d:c0:0d:1b:a9:02:e4:7b:92:10:a7:c5:2b:
b0:22:1b:e0:03:9b:08:3f:76:93:d3:c9:aa:aa:73:58:1e:88:
c6:9d:5b:5f:ea:56:1f:f0:83:0f:c6:31:48:28:30:3c:90:9f:
36:ca:e6:03:b1:9d:e7:6c:ee:7d:a8:c8:e0:3d:bc:f1:c3:b4:
e3:be:23:e9:9e:b1:b2:21:ac:c6:14:5c:9e:30:75:99:05:fd:
82:c2:fb:fe:db:5c:b7:88:98:6f:13:60:0c:54:0a:19:c1:ea:
32:51:bd:98:ee:3a:dd:2a:16:55:b0:94:c2:3f:f8:2b:ff:dd:
7b:bc:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:39 2025 by rpki-client