Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa
File: 854709f1-c55c-3f5f-9469-3bea6718e5b4.roa (raw, json)
Hash identifier: JCZclR11A3Bzst7LxO3KE8pRJB6GhDAto8n4qKNBeuU=
Subject key identifier: 0A:26:73:0A:DF:07:7C:76:B3:1F:BC:AA:EC:5E:66:2F:45:BE:57:18
Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial: 010D0C9F4328584820CA932791D66D8C0AB44830
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa
Signing time: Sat 07 Dec 2024 14:00:51 +0000
ROA not before: Sat 07 Dec 2024 14:00:51 +0000
ROA not after: Fri 07 Mar 2025 14:00:51 +0000
asID: 26930
IP address blocks: 23.133.6.0/24 maxlen: 24
202.5.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:20:ca:93:27:91:d6:6d:8c:0a:b4:48:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
Validity
Not Before: Dec 7 14:00:51 2024 GMT
Not After : Mar 7 14:00:51 2025 GMT
Subject: CN=32b9eca1-0ca1-48ea-80f7-3d61eb294705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:1b:1a:b2:de:e7:46:c6:47:89:99:6b:a4:
69:21:ae:ba:8f:78:f3:1c:69:d7:67:cb:a2:76:ea:
37:6d:8a:ee:32:81:07:d8:15:c2:ba:0d:bb:c2:18:
97:e8:fb:a8:71:82:17:c3:18:b1:81:ff:f0:69:91:
11:6c:e1:6a:ce:04:c3:49:af:0d:b1:dd:c8:0e:8a:
e6:6e:32:f3:50:e0:ed:1e:da:6c:38:25:37:3f:5d:
a2:08:1a:67:c1:73:61:6e:f0:aa:7b:20:c7:21:35:
23:0e:be:cd:c3:57:39:5c:07:5e:6f:1e:d5:f5:8c:
15:37:b8:fd:73:6c:75:75:a0:35:a4:61:3a:47:c6:
90:f3:27:12:75:ed:fd:a5:46:9d:5f:6c:52:04:c4:
73:13:f3:84:7a:e9:18:7c:8c:e6:59:3c:3c:00:b4:
41:ec:79:5b:00:b0:ec:ef:d9:72:ac:e6:2d:aa:5a:
e3:54:15:71:62:80:75:da:55:63:d0:41:c5:ab:bd:
cf:1b:fc:b3:51:e4:0f:b6:85:12:52:49:62:f6:e6:
09:fb:6e:1a:7b:41:aa:85:59:a6:3a:fe:1b:10:9b:
77:9d:0c:6f:1e:9b:7e:97:3b:66:78:6c:59:7c:ed:
ce:3e:d4:0b:c1:dd:40:8d:d7:f5:24:bc:b2:a4:08:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:26:73:0A:DF:07:7C:76:B3:1F:BC:AA:EC:5E:66:2F:45:BE:57:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl
X509v3 Authority Key Identifier:
keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.6.0/24
202.5.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:6b:36:0c:d1:7f:95:12:93:ec:c0:0b:77:6d:e4:c4:ea:34:
99:2e:7b:07:88:e3:95:5f:01:c1:c5:73:da:1a:eb:9d:8c:67:
30:4c:b7:48:e6:4c:58:5c:d2:3f:6c:06:9f:39:7c:a2:c5:97:
9f:31:7b:81:9e:f5:fb:3b:e4:f4:75:07:08:5d:c5:1b:60:9d:
50:84:23:67:e1:4f:68:70:ee:c9:ec:18:d0:cc:7a:eb:c5:6e:
52:20:10:a3:30:51:da:8c:46:4f:19:3c:67:a0:2e:ff:c1:f8:
3b:ee:9e:72:d2:a3:75:46:6b:22:90:89:e4:a7:98:d7:db:88:
83:d3:7b:be:b6:cb:cf:6f:d3:89:01:70:fa:88:49:8a:ff:30:
3b:3f:7a:19:76:57:a5:ad:42:4c:6e:3c:ec:46:da:5f:a8:de:
21:cd:e8:ea:9a:bb:5e:c8:f5:e4:88:82:56:00:a7:2f:6b:b7:
30:14:63:e1:22:1e:99:66:e2:7b:11:21:b9:db:ec:ab:9c:06:
27:65:8d:ac:79:d9:da:f3:aa:82:0f:35:62:1f:9c:66:91:9c:
f7:06:49:a9:cc:eb:61:c0:8a:04:2a:3b:75:95:df:b6:99:5c:
9f:6b:38:59:c1:f2:9f:38:82:fe:5d:b7:2d:d8:ef:f2:af:0f:
37:26:e6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:47:15 2025 by rpki-client