Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa
File: d68b1747-8766-30c7-9761-0368f3106f64.roa (raw, json)
Hash identifier: +w+ayqcaOqCAuBc2WVoGRM3DszyW42CM3INIEH+EHz0=
Subject key identifier: E7:1E:97:AE:8D:A4:EB:F7:F3:1B:60:62:B3:30:5E:AA:29:8A:A5:F5
Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Certificate serial: 010D0C9F43285848530AEE84E64E18BD050FF980
Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 30690
IP address blocks: 23.171.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ee:84:e6:4e:18:bd:05:0f:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=478cf609-beae-47ec-860c-a80639f2b7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:ef:2c:c8:2b:87:78:29:96:a5:dd:85:d8:
b7:f1:9b:99:13:56:2e:dc:09:dd:dd:ef:0e:da:be:
56:77:90:b6:16:c2:70:95:63:07:9e:17:80:3f:a5:
5f:b8:08:28:e5:c0:a0:28:9d:45:0d:b7:fb:0b:70:
f7:2e:72:ff:45:16:33:f0:6e:bb:c6:50:fd:73:4a:
8d:bd:72:e0:bb:c1:3f:4e:b3:e9:0c:ed:c2:35:c0:
50:16:52:de:42:80:d0:5b:d6:9b:0c:f0:87:0e:32:
19:75:01:28:9b:90:9b:33:43:62:f4:50:b1:c5:9a:
3f:bd:d7:ab:c7:35:9e:aa:07:a1:d3:c3:d0:96:a1:
38:4d:23:bd:5a:a4:ae:1f:60:ac:7e:b0:00:fb:88:
03:dc:b4:c1:83:61:82:e6:0a:8e:e9:24:df:f4:c1:
e3:db:02:d3:43:3f:cd:c4:43:43:1f:bd:3e:82:73:
e2:23:e3:49:cf:8c:f5:01:8c:6e:95:0f:d1:6c:79:
8e:3b:ac:bf:28:2d:3e:4d:7e:cf:11:66:fd:f5:b5:
bb:d2:ab:ff:3d:1c:72:74:15:f4:32:ff:3a:8f:64:
5d:43:ad:3e:56:ec:0b:b7:42:15:18:d1:2b:ad:44:
76:8a:f7:c4:89:79:f6:e8:18:d5:cc:c8:2c:4c:5b:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1E:97:AE:8D:A4:EB:F7:F3:1B:60:62:B3:30:5E:AA:29:8A:A5:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl
X509v3 Authority Key Identifier:
keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:6e:29:1e:95:4b:24:43:b5:e1:e8:8e:57:37:5f:bc:fe:60:
3a:0b:db:8e:cc:b2:de:cb:bc:69:65:29:17:fd:f9:59:0d:48:
3d:60:3f:32:fa:18:70:70:05:e2:fc:04:d7:38:19:83:6e:ac:
bb:97:97:4b:08:4e:23:e6:ca:bc:38:d4:2a:ef:74:64:d2:3a:
86:be:87:96:1d:40:8e:19:eb:30:44:8f:82:2a:8a:86:e8:a2:
fe:e1:4a:94:0c:8d:3e:e2:36:4e:3a:a4:a2:9b:14:ab:16:fa:
41:8e:2d:b4:d4:79:a0:65:f1:59:21:83:dc:a4:4b:6c:99:c0:
5d:65:43:10:e1:89:92:57:d4:83:7d:53:cd:0d:6e:04:d2:b5:
2b:87:d0:98:5e:0a:a5:e8:35:bc:61:5a:9c:78:38:09:cb:d8:
c3:2d:40:74:bc:49:d7:5b:5c:61:09:38:6c:2d:d1:43:75:4b:
ec:16:f3:54:7c:b9:9e:1f:31:bb:a5:66:72:97:9d:d1:54:75:
f7:f7:68:1f:13:f8:3f:f5:78:7d:90:4c:18:71:05:42:15:a5:
2a:2c:ff:c8:f8:0a:8b:22:4f:74:ca:f0:0f:a5:06:6c:d7:d6:
a8:f5:0f:85:75:6e:81:47:7f:11:85:df:e3:4d:c1:23:02:d9:
df:d5:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:47:23 2025 by rpki-client