Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/39601769-38b3-3069-a6a1-9d3b4c6be8c5.roa
File: 39601769-38b3-3069-a6a1-9d3b4c6be8c5.roa (raw, json)
Hash identifier: f6QJ9qX4bBH/8hBLSjjLCwnJjJe8RcZ/aaYBjxNJZOo=
Subject key identifier: BC:43:EC:D2:51:06:B4:89:DB:E3:BC:C3:6D:99:FA:D1:28:85:3C:18
Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial: 010D0C9F432858485F9AE526D77DEB4B06A073D0
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/39601769-38b3-3069-a6a1-9d3b4c6be8c5.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 7489
IP address blocks: 23.133.1.0/24 maxlen: 24
23.133.2.0/24 maxlen: 24
45.58.59.0/24 maxlen: 24
162.245.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e5:26:d7:7d:eb:4b:06:a0:73:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=5f805a5a-bcf9-475f-8f94-298fb12298b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:d1:32:74:bb:d7:46:f6:62:ff:e1:c2:2b:
09:61:94:9e:9b:8b:3c:6c:a6:ce:5e:e9:9c:8c:90:
00:82:64:74:88:87:c0:de:2e:a7:3d:0f:f5:5f:42:
98:26:3f:47:3e:2e:c2:b6:78:68:7d:67:0d:0c:a0:
ab:90:b0:fc:b2:31:84:41:d0:d2:3a:ee:be:2d:de:
64:05:39:88:0c:7b:75:3a:30:76:62:83:87:fe:b1:
c7:05:73:0e:7b:e9:dd:f2:ee:89:8e:21:21:fa:45:
89:70:27:0f:ed:28:a1:6b:02:ca:58:57:3e:a0:b9:
9f:ee:bb:c7:a7:ae:7e:8d:3f:91:45:db:20:bb:73:
3b:df:7f:8e:e3:fa:77:d7:2f:4e:e9:3f:9c:7b:60:
9a:fb:7c:88:49:60:8c:5a:0c:10:eb:a8:33:b3:f5:
7b:4a:1c:b0:51:9f:bd:ac:1b:49:b4:2c:d7:84:53:
dd:58:bc:78:b0:76:46:c7:6f:87:1d:9b:46:95:67:
1b:53:dd:99:e5:da:8c:6a:01:5c:7b:4d:f6:4c:45:
e6:a7:a7:3a:61:ed:d3:48:36:12:5b:94:3f:bf:6f:
24:be:e8:d4:74:81:75:59:39:10:f6:7e:62:a7:1b:
e7:1c:7c:e9:e8:ef:9c:d3:89:c4:d2:bb:70:5a:d3:
20:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:43:EC:D2:51:06:B4:89:DB:E3:BC:C3:6D:99:FA:D1:28:85:3C:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/39601769-38b3-3069-a6a1-9d3b4c6be8c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
X509v3 Authority Key Identifier:
keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.1.0-23.133.2.255
45.58.59.0/24
162.245.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:cc:d1:0d:6e:d7:1c:63:0a:5a:d2:80:ae:db:43:2e:59:47:
06:82:51:de:b9:b2:97:c5:bb:4a:f8:f1:ce:a9:8a:c9:9f:96:
3f:0f:9f:6a:68:95:f9:f8:25:55:92:aa:0a:d3:38:31:0e:72:
bc:de:93:8f:fb:87:65:ed:92:5c:f9:d8:d3:80:29:0d:70:65:
d6:4c:a0:8a:21:34:03:6b:2e:da:05:75:0b:f9:f9:00:17:25:
36:e3:77:be:d9:c2:6f:c8:2f:89:25:71:d9:d8:fd:c2:e4:a3:
6d:5b:4d:f1:2d:8c:1c:88:24:cb:f6:f1:e6:8b:7c:47:d2:cf:
bd:76:f1:17:99:f6:08:ae:ec:61:d4:5c:4a:4c:27:c5:3a:fc:
9f:c4:67:5a:92:de:61:80:fe:28:8f:46:95:85:c6:12:fd:54:
cf:f6:b1:ee:b7:13:bf:f1:b7:1f:15:94:56:e9:79:cc:a9:fb:
d4:1b:91:aa:bf:0d:92:fc:1e:ad:f2:66:fb:2c:7d:92:f6:e6:
20:fc:77:88:0f:b4:f8:14:c2:a6:5b:ed:4a:ed:9b:a7:c4:1c:
63:01:43:96:4f:10:21:ac:ae:69:83:76:be:30:56:49:55:20:
89:70:f3:0e:a9:20:61:1b:d5:5c:06:1f:cc:a5:cd:5d:ae:eb:
60:50:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:50 2025 by rpki-client