Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa
File: f5f4a6f1-995d-3517-a463-04c47c4433da.roa (raw, json)
Hash identifier: ImnXTbN+aspt7+ceY1j0odZe1CLkOLt50ETFNUGG6A8=
Subject key identifier: 5F:C0:64:4C:AA:40:C8:38:22:36:9A:FC:48:D2:2C:6B:BC:8A:B1:07
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858485B6AFC7521CFE3F5802AB8D0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 29802
IP address blocks: 23.111.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:fc:75:21:cf:e3:f5:80:2a:b8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=a64cc008-866f-4862-b546-12687db90c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:16:c8:d4:70:c3:9d:1e:fe:19:07:1f:b8:
66:98:ba:d9:31:32:c9:dc:fc:75:ad:2b:4d:56:17:
e8:1a:85:e7:2c:2f:38:ba:d3:3f:e3:a3:cf:49:b6:
a1:d6:92:dd:e7:cb:98:00:56:8b:67:e2:e3:c0:2e:
c3:46:ef:98:1e:55:a0:cf:c8:7e:e6:43:21:b6:2b:
f7:e6:65:33:17:8e:41:f9:56:b5:7a:9a:dd:b3:aa:
cf:ed:e1:ed:5a:df:9b:18:58:90:c8:b3:6e:64:7d:
a3:65:d6:74:4f:f0:1b:17:0c:5d:34:2a:4e:2a:ec:
dd:28:5d:a0:83:43:07:57:fc:3a:38:c9:2d:f0:02:
33:a5:84:ab:ba:90:60:d4:a2:c2:a5:31:7c:0f:9a:
41:d9:2a:ab:7e:31:f4:f0:c7:58:aa:12:0d:cf:67:
b3:eb:d3:82:d6:f0:84:ec:93:2c:ed:fe:16:ef:25:
71:bd:83:d7:a7:a9:72:5d:14:be:43:83:67:7e:5e:
cf:e5:7e:28:2c:bc:bf:80:58:25:f0:36:c8:ae:39:
0c:94:4d:d3:46:11:27:0c:b0:3d:97:78:ac:8b:bb:
1e:44:a6:0d:8d:8d:20:aa:ef:a7:dd:f7:c0:ef:f3:
ee:78:99:61:1a:eb:2d:12:8a:d7:44:d0:27:7e:d2:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:64:4C:AA:40:C8:38:22:36:9A:FC:48:D2:2C:6B:BC:8A:B1:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f5f4a6f1-995d-3517-a463-04c47c4433da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.111.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:d0:2a:e7:e9:2e:b7:4f:22:ec:44:df:f5:87:58:86:bc:6f:
7d:9a:d4:7c:90:e0:f7:54:66:ba:3f:08:5b:f0:46:c8:bf:f5:
28:9b:de:c5:48:51:93:2a:ba:03:fa:2c:07:e0:3a:b1:27:d6:
a4:d8:0a:8d:af:fb:26:90:19:d3:e1:d1:57:e5:99:62:a6:0d:
62:b2:61:cc:49:6f:9f:52:a4:e9:09:9c:40:a3:75:32:f3:46:
00:93:dc:09:8b:ca:16:99:35:12:44:16:20:ba:14:2e:d8:34:
3b:09:6c:fc:d6:41:07:d8:37:07:92:32:71:de:9d:b8:1d:64:
fc:5e:12:24:3f:03:64:ca:61:b2:47:d5:d6:49:fb:9f:5d:d3:
4a:74:4b:21:ea:2d:4d:87:5c:e5:3f:e3:3f:57:2d:1f:a1:17:
76:c7:b7:f1:eb:60:55:85:7c:7a:12:d0:fe:2b:e3:4a:16:5c:
25:e8:bf:3b:ff:ea:1d:2d:3e:f6:4f:95:99:c6:7d:7b:7f:70:
e4:a2:b7:d9:ea:42:28:31:28:e8:6a:d5:1f:51:80:3e:46:db:
8a:ad:7f:26:74:a8:1a:6f:f3:e5:4d:e3:e4:64:a7:e7:f7:22:
a8:f2:09:fe:2e:d9:e0:d2:09:ee:8d:55:cf:19:f4:a3:d0:3a:
02:75:a4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:18:21 2025 by rpki-client