Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/941a69b6-928b-3428-90c7-2003c80230cb.roa
File: 941a69b6-928b-3428-90c7-2003c80230cb.roa (raw, json)
Hash identifier: Fopsct/370R/D7V+MPOsXkV+HVr/aGZGCaEf0NGAbzg=
Subject key identifier: 89:BF:E5:59:8B:A0:02:31:14:2D:F5:46:C0:79:73:E1:85:9E:13:A7
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584861005108DA17EED6E9412038
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/941a69b6-928b-3428-90c7-2003c80230cb.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 399734
IP address blocks: 8.46.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:51:08:da:17:ee:d6:e9:41:20:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=91219fa8-c306-4bd3-a003-74a2dc9b415f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:27:15:84:8f:a9:ef:ad:18:93:bb:03:0d:96:
ed:1b:cb:c5:dc:36:51:0d:5d:1e:ff:d1:9f:b8:ee:
75:7c:33:9c:93:8e:a5:7c:9b:f6:25:46:d8:9d:27:
4d:94:7f:7c:45:4e:02:cf:f5:0d:0f:f4:2e:59:93:
16:42:58:d2:a2:b5:e1:48:c0:5a:65:3b:51:c5:15:
d6:55:23:db:fe:bf:06:fe:19:cf:1c:41:f2:41:b4:
c6:4b:6c:3a:23:b2:9d:44:ce:e0:54:d1:fb:b2:23:
c6:54:df:11:37:e1:70:db:97:07:4c:c5:1d:d8:7b:
7d:59:bc:0c:72:7a:65:80:d7:f5:a2:a6:51:78:0f:
54:52:94:a2:9b:38:9b:0a:5e:59:61:0c:cc:4a:c9:
c5:57:a1:c2:13:c4:17:a7:d8:64:49:32:33:61:b0:
0e:b9:c6:cb:57:37:21:5b:b0:91:9c:a1:79:c3:23:
22:f9:60:a7:af:e7:45:58:11:e6:aa:57:eb:72:28:
e7:2c:24:a3:f2:73:3d:d1:ed:61:3d:ff:5f:a1:e8:
c4:5d:cf:d6:79:6f:c1:98:3b:44:94:15:28:4f:77:
9f:16:dc:79:5a:69:ca:c4:36:4d:04:76:5b:1f:d5:
0f:d9:77:4f:fd:17:44:ff:3f:3f:0a:ed:82:7c:b8:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BF:E5:59:8B:A0:02:31:14:2D:F5:46:C0:79:73:E1:85:9E:13:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/941a69b6-928b-3428-90c7-2003c80230cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.46.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:4a:70:25:1f:43:ba:47:54:b6:5b:86:48:71:86:a2:80:1d:
05:bf:f0:2a:b1:d1:45:d6:e2:ff:b3:77:b5:9a:35:08:38:85:
26:b2:33:68:2c:e9:0d:42:c2:7a:7b:17:03:01:fd:85:2d:da:
15:39:b1:bf:00:f5:7f:4b:1a:2f:1f:1a:b2:5c:fd:4f:86:52:
1c:1d:8b:87:e7:bb:7f:77:54:dc:f7:7e:89:76:ee:65:b1:1b:
81:4b:07:e3:50:2b:db:bd:3e:50:2c:46:52:24:8e:8f:2d:4f:
1c:3e:b3:ef:09:5b:9d:f7:d6:fd:c7:cf:09:53:b9:8d:db:ef:
09:5f:49:37:49:00:a7:cd:33:da:2c:7f:fe:02:15:99:29:c5:
0c:e7:a2:8d:24:88:be:05:d9:d8:db:d9:6d:26:ac:f9:7c:76:
52:9b:ad:10:83:d9:aa:07:e2:d7:85:7c:08:9e:cd:d6:68:12:
df:20:60:69:4d:5e:19:fd:60:b2:55:9e:f4:e0:b9:6d:36:3c:
86:40:91:8a:4f:99:c8:75:5a:63:0b:35:e1:1c:98:ec:a7:58:
28:87:7a:94:f4:45:5f:49:1c:06:29:ed:9f:fe:fa:35:09:2c:
5b:d3:9a:da:34:8c:66:0f:29:29:9f:5d:a9:f9:ed:67:5a:0e:
66:d2:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:20:08 2025 by rpki-client