Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa
File: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (raw, json)
Hash identifier: zkkjRFsbW8g8QP9JI6pbwoEiqVqz14RzqVDmUxhIWdQ=
Subject key identifier: 14:41:25:FC:E8:7A:E7:A2:A1:97:54:93:16:C2:26:54:A7:3E:E0:64
Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15
Certificate serial: 010D0C9F432858482EC001394924F33D7F3AB380
Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 399717
IP address blocks: 23.179.176.0/24 maxlen: 24
64.112.106.0/24 maxlen: 24
2602:fc7e::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:01:39:49:24:f3:3d:7f:3a:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=ac46efd2-df1e-4465-a193-90313a5edbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:97:1b:7a:ea:05:bf:87:72:df:a1:c8:b8:
07:96:64:f6:1a:7e:be:0d:40:03:6e:1b:47:bc:d6:
8b:1d:af:e2:a1:e8:a0:07:2d:96:ed:77:26:90:1b:
ba:67:fb:fb:4f:15:03:13:e3:c1:14:ea:74:91:16:
4e:97:f9:58:f5:8d:fa:2e:91:77:2e:70:09:50:3a:
dd:97:9a:8b:df:55:c4:17:8a:ac:3e:20:f5:d8:36:
3f:50:ef:69:d4:36:7d:6c:d4:f3:d6:1b:5a:c9:88:
92:62:18:eb:56:93:92:cd:0a:f5:0e:5b:fb:f2:88:
b6:a2:1d:14:80:39:ca:fe:e7:95:b6:1e:c3:c2:ef:
78:f6:86:6d:da:dd:9b:ea:3a:a0:5a:7c:7b:4c:c4:
ec:66:a5:a6:bd:d3:d7:a0:48:51:f5:ff:15:3e:ec:
17:77:8a:f7:14:51:9a:2b:b7:1a:aa:38:63:84:45:
2a:83:d2:bd:f4:97:7c:51:e1:29:b6:0f:87:01:9b:
14:0c:52:6e:be:be:15:f3:f0:e3:04:29:60:7b:97:
78:3e:00:fe:93:24:ac:01:9b:65:2a:ea:57:f5:e4:
a4:14:aa:93:1d:ba:3d:d0:64:25:e7:4b:0d:69:f2:
76:73:eb:67:00:48:ae:24:2f:d9:98:84:f6:e2:21:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:41:25:FC:E8:7A:E7:A2:A1:97:54:93:16:C2:26:54:A7:3E:E0:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl
X509v3 Authority Key Identifier:
keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer
sbgp-ipAddrBlock: critical
IPv4:
23.179.176.0/24
64.112.106.0/24
IPv6:
2602:fc7e::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:c5:9e:d1:c3:50:05:82:50:4d:00:a4:63:7b:ed:5c:43:a9:
17:83:cc:ba:7e:51:cf:f2:aa:20:97:3a:e3:62:70:b7:a0:ce:
a1:14:17:3f:b4:c9:ce:2e:d1:2c:31:6f:ae:b6:9c:43:8c:13:
b3:52:45:08:ba:94:05:95:e2:4e:65:6c:1f:b9:b9:be:6a:04:
ff:22:32:24:69:bd:dd:ad:90:b6:14:f8:6c:fc:2c:af:36:ba:
b4:70:bd:9c:53:6c:07:e8:1f:fb:38:24:e0:09:7e:e8:63:43:
cb:f2:cb:07:46:5c:58:0c:4c:d1:21:d1:4c:6e:4c:d5:9d:d3:
9b:dd:e4:17:c2:1c:cb:bc:4e:b0:af:8d:1e:f8:7b:ba:4a:38:
31:6b:7e:4b:60:34:14:ee:75:f5:1b:16:1e:28:1d:7c:24:ca:
e7:74:0c:fc:9a:51:b2:9b:75:d2:23:7d:95:bf:ad:41:7d:58:
64:9e:5b:6b:1f:5d:85:4a:95:fd:b9:3f:76:b0:da:ec:a6:89:
4a:33:11:52:d3:36:48:a8:32:b5:bd:1a:fe:94:46:29:3e:78:
60:0a:4a:23:2c:0b:7f:63:7a:15:20:c3:2a:7c:90:a9:f3:45:
42:bb:28:be:d2:50:fc:20:3e:84:3f:24:fb:49:28:53:6a:26:
33:81:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:36 2025 by rpki-client