Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/a43f2811-9f68-38d8-af6d-9e854929690d.roa
File: a43f2811-9f68-38d8-af6d-9e854929690d.roa (raw, json)
Hash identifier: L2tHF86yWrYfawM3hYdtarpIF1qajIxaQ3BELFDzzlQ=
Subject key identifier: 59:2E:AF:A6:29:D9:BA:C9:E7:4A:F7:10:74:8A:BF:90:04:55:09:5D
Certificate issuer: /CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f
Certificate serial: 010D0C9F4328584823953D9907BAC292389F00C0
Authority key identifier: 1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/a43f2811-9f68-38d8-af6d-9e854929690d.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 399788
IP address blocks: 23.189.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:3d:99:07:ba:c2:92:38:9f:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02579ac1-a8be-43c5-8d6c-dc02b9f7a35f
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=255141c0-5246-4e23-a4f4-474f127c8273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4b:c5:dd:b2:61:d2:dc:bd:5c:34:33:e4:d5:
25:01:dd:d3:01:bb:e9:67:63:88:61:c3:37:29:93:
46:ae:72:1c:25:a3:02:b4:3e:d2:52:e4:4d:78:68:
7d:84:9c:c1:11:15:00:f8:8e:52:23:9b:3b:6b:71:
64:e9:d2:eb:21:88:f5:a2:9e:41:e5:b7:f4:ec:61:
33:49:3b:f4:6a:94:46:22:ec:36:68:28:ad:3b:55:
9f:19:53:e5:db:55:4e:81:12:b1:4d:78:dc:c5:de:
1b:1d:a9:b0:36:37:ae:82:da:29:0f:88:33:e8:0f:
3c:16:0e:ad:6d:25:4a:b7:ad:55:30:eb:a9:6c:78:
59:16:ac:76:53:36:fc:d0:b5:4d:39:32:06:49:3a:
ba:7d:24:83:30:52:d0:85:5d:8f:7e:69:00:93:80:
9f:ad:85:8b:fe:e5:d8:d1:5e:cc:20:c0:ea:d7:b6:
34:1d:0b:8b:cb:9d:42:1f:a4:d6:64:b9:b4:a4:09:
ee:ad:51:89:98:52:b6:78:7c:71:45:af:ce:c8:b6:
4e:f6:12:4a:49:24:dd:89:4a:3c:f6:98:58:70:d3:
5d:05:71:d8:36:23:d2:db:9e:54:96:45:a2:e7:1d:
72:84:0a:0c:e4:cb:4f:bf:51:87:42:55:a2:90:c2:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2E:AF:A6:29:D9:BA:C9:E7:4A:F7:10:74:8A:BF:90:04:55:09:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/a43f2811-9f68-38d8-af6d-9e854929690d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.crl
X509v3 Authority Key Identifier:
keyid:1A:EB:AD:54:E4:8F:81:F0:1F:0E:B9:95:CD:EC:89:98:3A:EE:D9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02579ac1-a8be-43c5-8d6c-dc02b9f7a35f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:f1:33:b5:57:ea:54:04:04:13:34:43:e8:ac:08:3a:53:e7:
7e:60:8c:61:b0:bc:ce:43:2e:d8:a2:76:4b:17:3e:94:68:0e:
fc:2a:f1:7d:78:e4:ff:2e:f6:c2:07:f1:30:33:9f:cb:e8:06:
c3:80:22:0f:66:bf:80:e9:fc:64:d5:43:bb:37:c3:fe:58:b3:
35:c6:92:71:d2:75:3d:fb:96:40:6e:42:17:d5:71:c3:47:dd:
94:c9:ca:de:00:b4:3b:b7:63:d5:a9:5e:09:97:f9:f1:1a:16:
bb:52:f6:4a:0a:fd:81:f6:4c:ec:f5:77:b0:95:78:3f:76:89:
14:9d:2b:b5:86:2c:d9:59:b8:84:94:40:50:6f:59:55:a1:9b:
20:93:5f:19:91:ff:4c:3e:12:f7:a6:3f:2b:6b:df:96:0d:3d:
4a:04:16:c7:29:e3:af:d6:fc:a5:c4:21:16:c1:cc:d9:86:c7:
ca:5e:95:8c:6b:da:30:6d:63:71:31:4f:b9:89:c2:78:74:36:
f1:09:fb:5d:e3:d5:04:18:07:ea:7f:66:e7:65:fe:b7:a4:60:
c5:36:4a:26:48:ac:52:1c:f4:79:22:7c:2d:23:a1:eb:e1:10:
4a:4b:50:39:f1:a0:36:5c:da:24:48:21:00:59:5d:2d:a6:a9:
07:9f:c6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:48 2025 by rpki-client