Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa
File: aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa (raw, json)
Hash identifier: g9+jb+1FE/zgoPvWGGepmxfTOhV8JqT0ixU5AEcvKXM=
Subject key identifier: D6:A0:AE:74:3D:EE:44:A5:77:9C:F1:02:51:78:DA:7A:D3:72:B7:A3
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F432858483E1ABB1798B8B5C7ECA9D4C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 40934
IP address blocks: 140.174.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:bb:17:98:b8:b5:c7:ec:a9:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=07fc0851-0461-4e87-9ab7-e08e614078f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:01:c6:ca:12:6b:8c:dd:89:76:c0:84:23:ea:
8e:57:7e:88:08:f1:d9:03:a6:8d:38:6e:ab:f0:24:
06:39:48:55:b1:86:b1:87:98:d2:a2:14:a0:b1:62:
12:01:15:b5:d6:7d:d7:c3:69:b6:bf:c8:55:5c:12:
ec:e8:45:13:c2:a9:ae:07:83:14:34:bf:cd:0a:35:
91:b9:42:3f:b8:0b:ed:30:2f:1b:61:7c:fc:ba:90:
6e:24:52:fe:e7:5c:25:c8:c3:09:07:7f:c1:71:f5:
e6:23:03:11:99:51:5c:94:5a:bb:dc:14:69:db:b2:
f8:78:ab:f8:a6:4a:64:31:0b:5d:26:97:93:47:c5:
3e:e3:96:a6:db:d3:93:3e:f2:5b:9f:9b:66:6e:f9:
e4:d0:67:4f:07:d9:12:7e:8a:bd:3f:5c:68:3f:1b:
6c:d3:14:a7:9e:69:06:21:20:d1:f5:ca:26:26:11:
94:5a:8f:04:46:0e:29:0e:5a:68:e2:ab:82:20:73:
c3:8e:3a:0d:ea:c0:99:45:8a:c3:00:e0:b3:c8:a1:
af:2b:f4:a4:0c:b5:81:02:6a:3c:ea:13:22:1e:af:
c2:34:21:51:9a:92:b8:f3:50:92:fd:7d:ea:20:77:
65:cf:03:03:c4:42:91:60:58:73:1f:c7:ef:66:5b:
96:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:AE:74:3D:EE:44:A5:77:9C:F1:02:51:78:DA:7A:D3:72:B7:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aa23f28c-5ddd-3ae7-870b-1bd38021c84e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.174.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:cf:0a:c6:c6:51:9c:1b:c9:5e:20:2b:81:3d:2f:0e:1b:c9:
6d:b8:2d:f4:47:57:44:b6:83:c2:c2:0c:ff:f8:a4:16:04:13:
58:97:fd:ab:d5:82:b4:f7:fd:ee:4c:b9:0e:bb:fc:cf:99:ef:
33:f6:8f:a0:fa:20:c1:5b:63:c1:9e:f9:96:c8:b6:a4:02:f3:
fd:f1:9b:0d:2d:d9:a5:3c:19:da:df:c8:0a:4b:c2:0f:fd:73:
1b:88:e2:66:06:eb:13:a1:a3:12:62:a7:a7:fc:19:b5:7a:d9:
57:41:07:b8:ca:ab:5e:8a:40:fd:37:4b:79:83:e2:c4:4c:98:
a3:71:85:4d:d2:bb:08:9b:48:ad:ae:eb:49:8a:8c:3a:1a:60:
01:8f:2f:81:6a:cf:95:24:6f:c0:dd:bb:dd:91:0f:a0:b8:cc:
76:46:87:93:61:47:d2:e8:1a:8c:ef:a5:de:91:bf:32:b8:f3:
3c:fe:f1:d6:2f:c5:da:0c:90:c8:13:e9:1b:88:dc:6f:3b:41:
f7:6d:18:45:88:10:5d:02:92:3d:1a:0d:50:fc:86:b3:c0:2e:
b5:4e:7a:c9:67:e7:02:9b:bb:ea:28:bf:4b:1f:cf:0b:6b:bf:
28:8b:b4:50:0c:51:fd:33:1c:c7:e3:bd:1d:34:11:73:03:14:
de:bf:a8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:27:27 2025 by rpki-client