Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa
File: bf5295e2-1c04-3ba0-be72-988f0756c50e.roa (raw, json)
Hash identifier: klNdur/6VP6tiDoKHCR8Dgkogc0q+8D9E8DAU7jVAMk=
Subject key identifier: 38:74:EE:E8:4E:29:E3:72:F3:3E:1A:D1:C4:2B:6F:49:B4:CC:6A:05
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F4328584861004FF120934BF5E9E1E9C8
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 29802
IP address blocks: 23.227.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:4f:f1:20:93:4b:f5:e9:e1:e9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=824f9c85-aa1b-4104-ad37-688ad6abdc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:50:7e:00:b6:ee:e7:f1:59:19:cd:5c:88:
0d:9b:42:40:56:bc:ed:4d:85:dd:54:db:f0:7b:95:
d3:e5:38:72:e8:bc:4d:76:b9:b2:3b:a1:be:c4:fa:
15:44:b6:54:90:19:61:ce:a9:0f:c7:a9:47:b3:32:
f0:74:b7:ae:83:2e:fc:0b:63:b9:ae:d7:2d:31:a7:
e6:3f:9c:13:7d:87:ac:6f:27:7f:0f:e3:96:5e:69:
85:94:6c:83:df:a1:3b:a4:ab:45:e4:26:90:82:76:
2a:7f:ab:2e:93:4e:b1:86:54:b0:46:4f:89:60:6b:
55:93:bd:8d:71:2a:aa:25:93:95:fe:2c:36:e5:e3:
0d:86:8d:d9:54:9f:db:c5:ff:d1:22:4c:ec:2b:66:
61:9d:ae:1f:a7:f3:8b:ba:db:d7:3b:c6:8d:92:d6:
ed:35:92:8b:a4:dd:77:5d:92:75:1e:0a:e2:11:59:
d7:96:a8:b7:bd:7f:a1:05:36:47:4c:92:ee:2a:56:
ce:38:f6:ea:01:a6:ac:51:e0:1c:22:5f:70:2e:3b:
e1:29:fb:57:4f:57:77:0b:6b:b3:e4:f8:81:22:48:
89:0f:b3:6b:46:cd:c6:ca:f1:98:a1:dc:5b:9d:6d:
17:05:e8:fa:8e:7f:9a:b5:3d:49:97:93:39:28:a1:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:74:EE:E8:4E:29:E3:72:F3:3E:1A:D1:C4:2B:6F:49:B4:CC:6A:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/bf5295e2-1c04-3ba0-be72-988f0756c50e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:48:b1:32:91:2a:a2:84:48:a0:99:f0:c7:3b:4b:8a:b4:93:
ed:fa:e7:a1:f9:56:e7:3e:7e:2d:73:04:d6:b9:71:71:11:1d:
d5:89:6d:2d:53:f0:0c:01:23:e5:2c:07:7a:6b:61:7b:74:16:
fb:0c:1b:b7:a4:db:72:12:ce:42:8a:2f:f5:d3:b2:d9:a0:55:
6c:73:a4:7f:28:e6:74:c4:09:b5:5c:43:8b:3e:2d:54:5e:1f:
bb:17:2c:83:6b:84:42:87:2c:a8:08:bd:bb:e5:65:25:f4:da:
b7:a2:62:a6:13:5f:87:6b:4d:02:aa:6a:b6:95:37:ce:ce:de:
46:d9:00:de:27:6f:e7:22:8b:cd:bf:ce:a8:4f:33:c1:8a:21:
e6:f2:f8:75:10:b8:4e:b1:63:1f:44:c6:28:66:bb:2d:01:38:
09:aa:53:8a:a4:9c:65:ad:c6:b5:aa:10:2f:b3:96:d9:8d:17:
2f:cd:7f:01:4b:85:19:8f:2a:e7:45:83:ee:b3:9c:a1:02:cd:
1e:6a:60:1e:f8:fc:74:f5:ca:ec:c0:46:4f:86:ef:8d:5f:34:
16:c2:db:a7:cb:cb:0a:f8:8b:f2:43:1b:d0:c7:7e:32:9b:b4:
e1:89:85:35:47:81:91:81:9a:8e:65:c2:20:96:89:23:b6:f4:
78:3c:19:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:44 2025 by rpki-client