Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa
File: facec0c3-3e20-3ab9-92ff-cea91868e688.roa (raw, json)
Hash identifier: Ib5jOU4u8ekWVyAGKvx01QCkiYcf/cKUjdj1+VLxW9s=
Subject key identifier: 2C:F6:4A:B9:C0:07:02:D2:75:15:6C:DD:E1:0F:F7:BB:FF:1E:45:7E
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F432858485CD032379EAFAC7A33688A80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 7015
IP address blocks: 23.249.160.0/24 maxlen: 24
23.249.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:32:37:9e:af:ac:7a:33:68:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=dddfcd39-e1dd-4f7d-bafa-337fdd47632e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:be:ed:3b:2e:f4:62:c5:c8:d2:07:5f:b5:
99:8c:a1:a8:21:62:9d:7f:11:0d:58:2e:d6:65:cf:
51:02:b1:00:a5:61:59:11:b2:f3:b4:ad:b5:dc:72:
35:d9:a9:41:e8:90:43:69:99:17:2c:2d:7a:0c:bc:
cd:f2:af:42:71:3d:3f:e4:82:14:57:ef:73:b3:40:
c0:eb:1a:93:7e:c6:fa:a7:55:80:49:08:fd:1f:64:
3b:37:8e:f4:97:2b:6c:29:a7:43:fd:1d:d4:d6:02:
0d:c4:50:3d:05:43:03:eb:a6:7a:82:66:1d:ce:bb:
40:f3:2b:5d:f6:ce:cd:61:b8:29:4a:96:0a:9e:07:
38:2d:e4:a9:99:da:14:f5:a3:d2:d8:ed:fd:ec:e5:
fb:7e:66:c4:29:75:e6:aa:cb:da:57:3c:ad:42:01:
05:8e:09:3e:86:df:9b:5e:ae:c4:15:16:d0:8a:d2:
4b:03:34:0e:e1:97:81:75:82:eb:3a:87:8d:8c:8e:
9d:22:14:3c:74:8f:9b:ad:f9:a7:4f:b9:3f:0e:8a:
09:10:f1:41:f3:41:c6:26:7d:4d:22:83:49:27:3a:
3e:be:4e:3f:23:77:74:00:e4:91:51:82:6b:9c:90:
1c:b6:42:ae:fa:8b:2d:f6:94:1a:4d:6e:9b:45:b5:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:4A:B9:C0:07:02:D2:75:15:6C:DD:E1:0F:F7:BB:FF:1E:45:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.160.0/24
23.249.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:40:28:95:3c:84:66:3d:29:03:f7:e0:41:97:88:35:2e:46:
14:90:4c:f7:2d:85:21:0c:46:1b:eb:e2:80:1d:76:58:bf:d3:
7d:e8:0d:0f:92:ed:47:fa:3e:a3:9b:cd:dd:93:68:b4:50:01:
e1:ce:7f:77:ff:bd:8c:2a:e9:c9:05:b0:dc:32:51:c4:42:30:
0a:61:5e:c1:ca:ff:e8:e2:16:ec:09:48:b1:95:5a:39:7a:ba:
cb:07:18:67:8b:ec:f7:d9:e8:52:f3:da:4d:7b:d0:25:c2:be:
c5:3c:0f:6d:bf:2c:7f:cb:f0:bc:83:73:70:97:d8:39:72:47:
86:72:a6:1a:3f:b3:da:94:92:ac:71:53:b4:16:35:55:b8:fa:
4d:33:9f:11:c6:8d:f9:da:e2:cd:b2:4b:10:cc:75:ea:6c:ac:
69:e8:13:4c:1d:c9:f0:7a:1e:03:7c:9c:0c:5d:cf:81:ae:8b:
44:b8:fe:c6:ec:9a:c3:89:8f:5c:eb:fb:bd:0a:7a:b5:3e:95:
9b:ea:32:0b:6e:8c:e9:2f:8b:39:e1:aa:5f:6f:d7:e8:28:6d:
a7:87:72:e2:63:d8:91:2b:23:66:27:d9:19:29:e1:75:4a:97:
b1:64:c9:6f:9e:0b:4a:af:bd:fc:d7:9b:63:e1:93:89:6b:f5:
bc:1a:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:07:02 2025 by rpki-client