Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/5a866018-70fa-3794-ba86-57885d76af56.roa
File: 5a866018-70fa-3794-ba86-57885d76af56.roa (raw, json)
Hash identifier: 5DWA0Lr7gLhCIoWKRAwcKPUivGo477qYXXuV4SybFXY=
Subject key identifier: AB:09:9E:DA:38:03:04:BE:AA:07:B1:3B:02:72:B2:F8:71:18:B2:F3
Certificate issuer: /CN=bce2ace0-971c-48f1-8361-962ad02d9618
Certificate serial: 010D0C9F4328584897708DA5D743452EFE834240
Authority key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/5a866018-70fa-3794-ba86-57885d76af56.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 32943
IP address blocks: 23.175.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:8d:a5:d7:43:45:2e:fe:83:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce2ace0-971c-48f1-8361-962ad02d9618
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=7f69d1f6-5967-4d95-a96a-9a8234e6682e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2b:78:ce:c4:ad:d2:c2:95:df:5d:cf:c7:ab:
16:9a:6a:d9:e1:75:f5:d3:5c:0c:85:c7:98:98:65:
91:31:76:97:e3:4a:53:82:9f:33:9c:fc:69:07:51:
6f:42:6d:0a:4f:2d:55:f2:4f:ac:40:cb:5d:71:d4:
28:bc:bb:b2:ab:21:e5:68:8a:04:48:10:bc:e3:be:
88:0c:80:18:ed:fa:ac:6c:60:93:3f:9a:2d:04:ea:
89:cd:bf:1f:8e:c7:cc:06:ca:86:0a:92:c1:ef:50:
8b:f3:35:f9:61:eb:39:15:2e:16:b4:a8:2a:3d:a2:
bf:ff:78:24:c9:e5:da:c2:c3:38:c4:22:92:4c:83:
09:99:45:bc:30:4a:94:88:97:86:5b:19:a0:f6:7a:
c7:56:94:49:43:73:f2:80:2f:97:bd:0f:f4:67:04:
ea:4c:51:79:62:f1:23:74:51:ab:e0:17:15:bf:03:
41:a3:ba:51:7e:62:37:6e:18:d9:d9:97:a4:5c:4a:
53:a9:1a:ad:80:32:6b:32:e8:41:64:33:a4:bf:85:
42:b6:ff:e0:55:44:44:f4:15:d2:e6:0a:d2:23:bb:
95:44:81:7a:c7:b2:cf:cb:7d:80:df:46:fc:a4:2a:
0c:f2:b2:68:1a:dc:2c:31:1b:e6:b4:14:72:a6:13:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:09:9E:DA:38:03:04:BE:AA:07:B1:3B:02:72:B2:F8:71:18:B2:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/5a866018-70fa-3794-ba86-57885d76af56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl
X509v3 Authority Key Identifier:
keyid:E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:01:91:75:36:86:f5:a8:6d:f7:86:c2:7e:4f:56:0f:36:08:
73:46:bb:36:34:5e:e6:21:b7:73:24:2a:d5:1d:b9:4b:3a:87:
ad:27:3a:37:99:43:f2:60:0b:32:71:ce:3e:fa:9b:57:0f:6f:
a2:cb:b6:9f:30:6b:bb:b8:3a:f3:42:7c:81:0e:7f:a7:1e:2f:
bb:14:0f:98:5d:05:76:4e:7b:f4:cf:52:a3:f6:98:64:41:82:
ac:37:89:5b:39:92:a0:15:2d:d3:d4:62:d0:e6:ef:49:28:e4:
71:fe:e5:8a:cd:e5:fe:c3:2a:dc:55:f3:1c:fc:69:d3:69:44:
6b:7a:ec:91:61:f7:5e:3e:99:03:1e:f9:0c:f2:d0:7d:4c:a2:
2f:a8:bb:a9:46:cb:38:b7:fd:bd:17:d3:5e:11:d4:fc:a1:9a:
29:2e:67:05:44:6e:c4:8a:f0:52:fa:ab:b7:cf:74:1a:64:ea:
f4:38:d1:04:d2:eb:2b:5f:47:32:92:cc:55:4a:f3:cc:33:2e:
93:8f:69:75:fd:47:ce:0f:39:41:3d:d8:f6:4a:fa:b1:51:59:
76:3a:ad:6d:d9:fe:a6:73:96:1a:2f:61:17:f8:af:5d:24:42:
41:d6:8f:b9:d8:26:38:86:0a:88:e4:89:aa:b0:b6:df:5a:e9:
ed:af:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:43:01 2025 by rpki-client