Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
File: 4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa (raw, json)
Hash identifier: JzgboKf+Kvb3TaxL3cks8oe3byxXvxDE8KzbvUln2MQ=
Subject key identifier: 88:29:7D:4B:BB:D7:F5:D7:03:84:67:A1:F0:8F:5D:16:4D:3B:F5:02
Certificate issuer: /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial: 010D0C9F43285848037B65AF53149C3837857A80
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 46489
IP address blocks: 23.160.0.0/24 maxlen: 24
99.181.64.0/18 maxlen: 24
192.16.64.0/21 maxlen: 24
192.108.239.0/24 maxlen: 24
199.9.248.0/21 maxlen: 24
2620:f8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:65:af:53:14:9c:38:37:85:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=873399fd-1cfe-45bf-b9a8-a0f7a32d913c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:b3:02:64:88:c7:08:ca:b7:64:c9:ba:60:
b0:a6:59:ee:01:14:02:a2:21:9f:61:da:bc:07:5b:
22:a2:c0:65:bf:f4:99:31:ff:ec:83:ee:58:34:07:
d6:4b:1e:94:0c:ff:ef:3d:c6:4d:24:71:a2:c9:8d:
2a:53:f4:00:fc:58:06:e9:21:11:f1:50:eb:37:20:
5a:e0:39:f5:75:ef:58:6b:c1:14:d1:11:7b:0c:4e:
6d:11:0a:37:67:8f:c1:13:f2:ae:09:6e:10:77:b1:
a3:6e:b4:b9:57:28:9c:2d:f9:0a:ef:f6:3b:66:16:
75:8b:de:a1:29:0f:5d:fb:49:fd:f4:a8:c2:57:60:
69:19:27:41:63:ea:d6:ab:78:6b:7c:7f:48:09:79:
a2:0b:9f:ac:16:83:54:66:dc:5e:23:3f:d6:47:37:
9e:02:bc:61:e0:2e:7d:e4:2e:05:59:16:56:b3:e7:
26:4a:56:aa:77:4b:3f:49:03:25:b3:c2:83:d0:57:
02:48:7c:6e:84:63:9a:4c:b3:f2:99:ae:2f:6b:cd:
d5:62:81:de:5f:e4:c4:b0:6c:e7:b0:09:66:98:38:
81:e2:e7:7c:5a:87:67:73:69:71:30:86:af:af:d1:
3b:e0:de:a1:3b:dd:da:e9:ba:9f:94:a3:98:69:06:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:29:7D:4B:BB:D7:F5:D7:03:84:67:A1:F0:8F:5D:16:4D:3B:F5:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
X509v3 Authority Key Identifier:
keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
sbgp-ipAddrBlock: critical
IPv4:
23.160.0.0/24
99.181.64.0/18
192.16.64.0/21
192.108.239.0/24
199.9.248.0/21
IPv6:
2620:f8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f2:19:68:dc:58:a5:e6:55:4f:81:57:47:b5:a7:64:36:f3:
2c:8a:e2:cd:0a:0f:fc:d8:6e:09:fd:78:b1:8e:d8:f0:4b:63:
91:4d:4a:bc:8e:e4:fc:51:37:9e:a0:5a:ae:75:d7:0e:19:f2:
ed:5b:d3:25:4f:cf:0f:63:0a:52:e1:3f:89:91:69:48:e1:17:
13:60:2c:b7:5b:bc:dc:f5:15:0f:10:ed:dd:e5:5c:c1:bf:e3:
55:e1:5e:50:77:92:2d:20:f6:c7:0c:e3:ce:49:0d:c4:ae:4b:
c3:08:5f:6d:d2:56:b4:a8:eb:81:f4:15:63:61:69:4a:4e:a1:
45:bc:59:a3:ff:3a:4e:fa:5b:75:9d:d0:20:43:74:b5:00:e1:
73:57:cc:c3:b8:4e:06:84:68:4f:4a:36:d2:c4:9d:92:1e:25:
56:43:37:a7:16:3c:f5:1f:c0:e4:d3:ce:20:07:26:2b:0f:7e:
a6:6d:2d:36:48:bf:a8:72:c8:1e:ba:0d:f0:aa:cf:6b:26:2a:
1d:e2:7b:ca:38:e0:21:d4:83:f2:6e:af:9a:4a:4b:a7:8c:c8:
3a:95:cc:f6:02:74:90:45:0a:3a:a6:f9:28:1c:c7:e8:d8:04:
e5:26:2c:b8:d7:b6:34:e5:66:e2:09:8d:34:1d:44:ca:96:ea:
cb:60:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:29 2025 by rpki-client