Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7ceaf7e3-1f50-32c0-863a-5500f83f85cd.roa
File: 7ceaf7e3-1f50-32c0-863a-5500f83f85cd.roa (raw, json)
Hash identifier: s86bb/y9NgoQhw4gV14Uls9k3Sf8G+TWYONqmFm03G4=
Subject key identifier: F3:AB:D8:F6:41:31:94:69:3A:A5:44:82:87:2A:D9:1A:37:55:E8:51
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584886B071DE44224C5597830160
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7ceaf7e3-1f50-32c0-863a-5500f83f85cd.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 401152
IP address blocks: 23.27.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:71:de:44:22:4c:55:97:83:01:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=38f701f9-4ba0-412e-871a-e430a1818ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:41:fd:86:f6:3d:6a:51:86:d8:5a:30:e0:
ce:07:d5:3c:3c:30:09:98:cf:12:90:33:a0:95:e3:
3b:fd:80:5e:6a:69:cf:d0:93:81:e6:71:07:e6:d7:
f6:9e:89:98:6c:ea:e0:17:18:17:c1:0e:d9:54:37:
e8:6b:ba:31:85:05:89:09:d2:7f:f1:f7:65:a8:56:
28:41:24:36:05:14:fb:1d:5f:f3:eb:18:72:1d:fc:
a4:a3:b8:e6:71:34:30:17:f0:b9:7b:db:26:35:aa:
f8:75:4f:b5:86:73:2b:63:a4:b1:71:ed:7c:95:c3:
e2:44:40:7b:aa:35:82:ff:41:cb:06:67:e6:78:88:
c9:a4:2c:46:97:a5:c9:20:f7:7a:95:ce:eb:c7:6b:
38:0b:37:35:3d:32:a6:04:ea:e0:ad:4d:35:fe:08:
0e:53:e9:a6:f0:ef:e3:2b:f3:02:06:f0:f7:bb:d2:
89:ff:54:9b:23:18:df:7c:48:cc:69:5a:83:f0:aa:
52:68:0e:5a:3b:94:ee:26:85:ff:72:bb:73:79:a0:
6c:01:2a:02:6c:8c:1e:b8:df:56:32:63:85:e6:62:
93:3d:8f:f0:10:91:18:c6:97:a1:46:06:f6:c3:4d:
aa:ed:44:68:2f:01:61:ed:93:2e:9c:fc:38:27:2b:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:D8:F6:41:31:94:69:3A:A5:44:82:87:2A:D9:1A:37:55:E8:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7ceaf7e3-1f50-32c0-863a-5500f83f85cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:96:89:2c:8f:5c:da:67:72:74:3f:ec:18:54:97:a8:83:2b:
00:2b:c1:63:70:18:c4:21:7d:58:66:b4:3c:fd:78:99:bb:7a:
b6:b0:bb:29:4b:11:e9:8a:53:2d:21:90:6f:2b:24:48:0d:73:
a8:de:e6:6d:62:49:fa:ab:b6:02:29:42:3b:34:56:3c:bd:7a:
52:c4:cc:69:73:49:7c:c7:70:d6:87:ed:1e:da:14:6c:f9:ca:
ae:7b:fb:57:a9:bb:65:25:d8:ca:51:6e:67:2a:7e:a1:83:18:
21:a7:f4:96:24:01:a4:1e:93:19:00:45:00:c7:19:fc:2c:b1:
69:72:08:25:ad:d5:7c:57:1b:36:a2:87:80:7f:54:27:6e:4e:
68:ad:da:a6:f7:f6:b7:f5:9a:51:d5:98:45:66:99:12:26:c0:
f3:17:67:e5:a4:32:84:5d:34:f0:ed:aa:90:cb:13:5b:cc:83:
03:85:c0:51:5b:71:a0:b6:cf:0a:10:dd:6b:a8:5f:2d:3f:ab:
a0:53:56:64:6b:99:5b:76:8c:9e:39:ba:e4:8b:54:35:e8:6e:
26:72:74:98:06:b3:ad:dc:28:47:37:33:e6:97:9a:45:ce:fd:
e6:f1:1a:f6:e0:60:c9:a1:f9:3f:fa:21:92:1b:da:99:9a:a0:
53:ba:2b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:49:09 2025 by rpki-client