Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa
File: 2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa (raw, json)
Hash identifier: duvyDqopT30xNUwGELeen2xLD3313ZcX+aLRNCfCZI8=
Subject key identifier: CB:90:7D:5B:50:3A:A4:E7:98:E9:47:6C:DD:E8:DB:73:FF:58:38:F7
Certificate issuer: /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
Certificate serial: 010D0C9F43285848A830A328CBF1FA00E3041E98
Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 401468
IP address blocks: 23.128.124.0/24 maxlen: 24
2602:f9a0::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:a3:28:cb:f1:fa:00:e3:04:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=843b0fcf-36e4-4c83-9f26-3830d0e91167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2a:73:dd:d0:8f:33:a6:4f:06:a2:e1:16:78:
d8:31:33:99:94:11:2b:c9:17:0d:ac:f6:e7:8c:0e:
ea:82:e0:66:ca:ea:13:0e:e2:68:35:16:67:1b:95:
b9:60:9f:2e:ef:97:53:21:28:0a:f3:00:86:57:d7:
21:ca:94:18:55:8e:5a:60:8e:69:b9:14:97:81:b5:
cb:8f:b0:3b:11:85:16:1a:21:58:c2:b1:e8:6f:ec:
2f:e0:6e:5e:67:7a:a1:e2:0d:f6:e4:f7:d1:d3:2c:
af:ff:05:0e:ab:f2:90:9c:19:36:cc:51:47:18:02:
63:3b:a7:ee:6d:d9:54:5f:bb:40:65:88:13:10:d3:
71:56:91:e5:ad:c8:c5:7b:37:eb:23:2f:75:21:4c:
c8:34:0b:ba:db:ad:59:d2:cc:71:bd:49:2b:07:66:
20:90:af:bc:fe:4c:bb:77:e1:eb:0f:c1:ac:53:cc:
1e:cc:ff:af:d0:ea:18:13:69:1f:c4:fd:eb:a2:b3:
2c:66:1f:06:d1:2d:f0:c3:60:d8:1e:ae:ff:75:ea:
3f:e5:4c:59:fd:7c:c4:b4:50:48:ec:9b:ae:08:7a:
76:fb:02:62:fd:65:d3:cf:31:e7:88:9e:c6:35:f5:
ed:a2:7c:38:74:3d:73:0e:cf:d2:a5:ca:30:62:1b:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:90:7D:5B:50:3A:A4:E7:98:E9:47:6C:DD:E8:DB:73:FF:58:38:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl
X509v3 Authority Key Identifier:
keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.124.0/24
IPv6:
2602:f9a0::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:63:2d:51:d9:e8:02:6d:6b:d0:31:b9:d0:2f:fa:20:6c:86:
2f:03:1c:ef:83:c5:7b:bc:c1:bf:24:c0:d2:47:c1:5b:a6:b8:
db:e7:3a:0d:86:f8:0c:e9:fe:ef:5d:24:8b:f3:b7:f0:fd:6b:
bb:66:58:b8:40:4b:39:a1:e5:85:a0:8c:11:78:c4:4f:c9:ac:
24:1e:89:86:41:eb:96:ff:1b:27:23:3f:52:cd:55:a5:e0:18:
6e:68:36:c9:70:d8:65:cf:e6:78:2c:ef:87:39:e2:92:13:1e:
63:a9:76:b5:9c:a0:22:fb:2f:3a:30:66:9c:3f:8e:6d:1f:1d:
1a:9f:42:3b:b8:34:22:38:ca:41:09:9a:8e:53:df:7a:a9:b8:
9d:d4:2c:59:0c:d6:6e:89:77:4a:5c:17:57:35:02:63:08:9e:
0f:9e:28:c3:c1:29:1f:eb:7a:b2:85:4f:47:bc:e9:46:1f:d8:
44:87:f8:79:06:b8:26:a4:f2:7a:3e:76:c7:01:31:3a:35:fd:
fc:85:9c:ad:32:89:62:ef:84:8e:ff:3d:c0:0d:1b:1f:0f:29:
71:c0:b5:2b:29:79:cf:f0:07:8e:cb:12:a8:c3:13:46:95:c7:
bb:b8:ad:0a:31:da:7f:c2:0e:aa:5d:80:3e:16:b2:c0:3e:13:
ee:26:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:18 2025 by rpki-client