Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa
File: 2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa (raw, json)
Hash identifier: pijSXM2jSdZHkFDXURKkMaHUlRrkqFwzbnqRFg3g2gA=
Subject key identifier: 49:BE:FF:66:13:22:E6:ED:D4:23:63:FD:E1:01:0E:CA:11:27:47:C9
Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
Certificate serial: 010D0C9F43285847ED24C8CAD2CF35A81CA3FAC8
Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 399082
IP address blocks: 23.157.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c8:ca:d2:cf:35:a8:1c:a3:fa:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=45f0d0b9-30fc-49d5-be0f-4c31d4ea9c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:d7:ea:43:5d:0d:d3:4c:4e:d4:8e:c6:b6:
58:46:91:36:d5:8c:38:4e:b7:fa:e0:fd:8b:e0:b0:
47:9c:2b:fa:cb:19:63:8d:dc:95:90:9e:c0:91:74:
48:7c:4a:e3:fc:59:fc:62:40:58:fd:17:f9:40:44:
9c:b5:43:2d:d2:e7:46:9b:d6:9e:62:de:27:71:46:
dc:20:20:58:a3:79:63:da:19:83:02:d9:52:d3:33:
36:5a:2f:2a:58:b0:5d:c8:9c:94:00:51:9d:92:6c:
d4:e3:fe:f4:80:4f:4b:f3:56:f1:6f:4b:4c:c1:3f:
0a:a2:e9:67:3b:eb:42:25:7d:61:bf:f6:e5:78:31:
d3:a9:a1:b1:fa:1d:84:0d:27:4d:d1:4f:bf:57:2d:
fc:53:32:85:83:8c:11:09:a9:5a:ce:70:37:06:a4:
4e:54:d0:ba:8c:62:c1:f4:54:f8:90:9b:43:9e:38:
be:3e:72:7f:05:02:92:89:47:17:a8:11:f8:8b:bd:
46:f3:27:71:4b:be:02:ca:7c:22:7b:ee:a6:16:e7:
77:2e:32:ff:17:23:b1:ef:36:b6:b5:55:d7:ae:4d:
39:d7:0b:95:57:cb:ca:aa:f2:1c:13:4e:94:12:8b:
2e:19:31:d9:8c:4d:81:61:83:ee:fb:4b:6a:a4:52:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BE:FF:66:13:22:E6:ED:D4:23:63:FD:E1:01:0E:CA:11:27:47:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2ff6fd4a-64af-333e-825d-d1ebe58c9c76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl
X509v3 Authority Key Identifier:
keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:ca:27:0a:cf:5c:67:01:ef:68:7b:a9:aa:cc:cc:36:b1:f0:
c2:08:7f:22:67:f5:e1:30:ce:3e:48:31:97:e7:80:bc:f9:ed:
a5:b1:60:ec:16:d6:f7:07:3a:35:8a:71:71:89:91:97:ae:44:
2f:b8:0c:c3:6e:5b:6d:8d:76:6e:88:db:d1:d7:b6:5a:39:7e:
5b:32:3c:6d:64:21:dc:5f:2c:ef:5a:c2:3c:d0:14:ac:38:dd:
93:75:f2:ad:20:d1:39:cb:84:41:ab:73:d8:b8:7e:87:c2:0b:
fb:83:43:6c:52:83:91:a9:5b:38:01:58:59:99:7a:59:0d:ac:
19:72:a9:0f:3d:b8:a6:3d:89:b1:ac:6e:ca:7f:3e:27:40:6e:
58:02:27:13:1c:93:cc:bb:22:91:0a:21:71:36:21:c2:54:42:
a7:89:9a:03:6a:18:90:75:7a:88:b9:2b:77:3f:63:e4:95:2a:
be:fd:db:e9:a1:99:f1:c4:f3:c8:f6:2f:3e:71:a9:23:2f:59:
38:d3:b8:ad:ab:9b:84:c1:45:7f:fd:79:1c:4a:15:da:b5:9c:
11:dd:b6:14:30:75:db:d3:19:db:2e:a2:b5:0a:ea:58:28:d3:
7d:6c:f2:40:a4:8b:ce:de:b9:8c:2c:f4:91:db:fb:8e:04:7b:
87:d4:ef:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:41:53 2025 by rpki-client