Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa
File: 41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa (raw, json)
Hash identifier: GpIPYEQHCfvuwjviJ57PlCO6PjwNo3/09Qs5YOxFd00=
Subject key identifier: 2D:D7:32:61:22:3E:B1:43:EA:2C:CE:AD:3C:2D:A7:C8:32:C9:87:49
Certificate issuer: /CN=7d992196-6f15-4590-b76f-b34e1ea329f8
Certificate serial: 010D0C9F4328584847E0276DCAF18FC4B72CD380
Authority key identifier: C4:21:A3:9A:07:C5:49:DD:BC:BD:22:1B:F1:3F:41:EE:20:F3:04:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa
Signing time: Sat 21 Dec 2024 14:00:52 +0000
ROA not before: Sat 21 Dec 2024 14:00:52 +0000
ROA not after: Fri 21 Mar 2025 13:00:52 +0000
asID: 63023
IP address blocks: 23.168.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:47:e0:27:6d:ca:f1:8f:c4:b7:2c:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d992196-6f15-4590-b76f-b34e1ea329f8
Validity
Not Before: Dec 21 14:00:52 2024 GMT
Not After : Mar 21 13:00:52 2025 GMT
Subject: CN=c29278fa-c7fc-49a7-83e0-5bcdb9cba00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:73:48:88:dc:dd:91:f8:e9:5f:e7:50:15:d1:
6c:1d:b2:5e:eb:01:76:46:4c:94:10:76:a0:93:08:
2b:da:ff:62:3a:c3:d3:fe:3d:7b:e2:ac:4c:c2:5d:
76:f7:b6:77:66:80:88:86:03:40:c9:f3:96:5e:cb:
3e:42:c4:e5:83:12:86:f0:0b:78:d1:7a:30:90:0f:
be:6f:12:a4:25:11:34:4b:66:9e:9d:36:01:7c:d9:
55:fa:9a:d6:29:21:a8:9e:ce:e6:2e:a0:cf:8c:02:
17:8e:19:51:d0:0a:da:e1:23:59:15:0e:9b:e6:17:
a8:92:7c:fc:90:25:60:59:0c:6a:c7:29:ef:fb:d1:
60:8b:43:8a:7c:0f:7e:44:80:41:70:15:1d:39:55:
46:84:e4:04:7d:6e:54:00:24:4e:a6:6b:7a:a6:7c:
c6:98:4f:00:6c:df:21:22:0c:ca:70:44:2e:4e:fc:
10:92:42:ad:a8:34:04:ee:53:89:24:6a:9a:b8:81:
14:6d:6b:71:76:5b:9c:c3:c6:08:fe:61:31:6a:3f:
fe:28:79:2b:64:91:65:8b:d9:c8:ed:ca:4e:d7:7b:
cd:50:54:86:a5:32:6e:19:ad:66:36:21:98:d9:77:
92:1a:69:af:0d:e5:ac:25:a4:f6:dc:da:7e:2c:bf:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:32:61:22:3E:B1:43:EA:2C:CE:AD:3C:2D:A7:C8:32:C9:87:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/41b8665d-3bf2-36c3-9963-0f26f3f7b135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8/7d992196-6f15-4590-b76f-b34e1ea329f8.crl
X509v3 Authority Key Identifier:
keyid:C4:21:A3:9A:07:C5:49:DD:BC:BD:22:1B:F1:3F:41:EE:20:F3:04:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7d992196-6f15-4590-b76f-b34e1ea329f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d3:6d:aa:8b:25:38:3c:e0:38:a0:6b:6c:c4:83:7b:fe:7c:
d0:2e:8f:65:bb:af:ab:d2:91:89:59:af:fd:08:fe:3b:b5:76:
dd:3e:45:a0:da:c9:b7:66:1e:27:cb:2b:70:83:57:cc:b1:2e:
48:c9:54:78:27:26:f4:12:fe:b5:6f:a2:5d:a5:44:c0:53:67:
c3:e8:5d:c6:8c:d8:84:34:b9:8b:41:a3:4b:6c:6a:95:70:02:
7f:81:a3:89:b5:ab:50:5d:d6:a8:2e:6f:f7:66:2a:ec:49:98:
a4:9e:a9:7a:57:38:2e:44:ff:c9:0f:ce:73:f3:81:91:56:a2:
a5:97:45:69:d0:30:f2:24:0a:df:81:a7:1c:84:39:07:99:a8:
c3:20:b3:93:c3:1b:ab:1d:0f:48:2f:d2:b1:9f:ec:f6:e5:6e:
e3:d3:30:59:20:d2:ff:8d:32:f3:e7:15:fb:df:12:75:89:ec:
6f:3c:2f:74:dd:f9:14:e9:64:32:6b:c4:08:27:1c:0e:16:1c:
78:bc:0b:5b:9c:3d:e1:63:8c:81:ad:18:93:4c:d1:09:1c:0a:
60:83:ea:79:ca:8a:e1:54:de:57:a9:89:2b:0e:84:74:ff:07:
83:aa:e5:83:03:56:72:e3:69:d3:0c:3b:a4:8a:8b:01:dc:0c:
6f:f8:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:30 2025 by rpki-client