Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/ead27e67-c07d-30c6-a3f1-e23d77c953c8.roa
File: ead27e67-c07d-30c6-a3f1-e23d77c953c8.roa (raw, json)
Hash identifier: 0bDZ0R8xm1N+LP0X7dtsh7aLXx5HU78Jp4P3aMm1OHo=
Subject key identifier: BF:A4:9A:06:C5:A1:6B:51:B2:98:EC:B7:CD:74:84:D9:0D:53:7B:41
Certificate issuer: /CN=55bbf9e8-b36d-4738-b477-dcc24272dbf6
Certificate serial: 010D0C9F4328584849456ED01B2D575FAF1F80F0
Authority key identifier: 63:41:45:20:E6:F3:69:D2:70:D0:25:C7:9C:ED:98:AD:57:67:48:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/ead27e67-c07d-30c6-a3f1-e23d77c953c8.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 397547
IP address blocks: 23.130.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:6e:d0:1b:2d:57:5f:af:1f:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55bbf9e8-b36d-4738-b477-dcc24272dbf6
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=f6d9ef79-a626-4a38-a1ff-8646882daf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:08:e9:02:a2:8c:f4:f0:78:e2:b6:ac:34:
30:20:65:da:0d:4c:10:22:bb:6e:45:26:18:26:32:
50:cf:ab:74:a1:01:ab:c2:6e:9a:f6:04:dc:59:86:
69:d3:50:b9:5c:6f:20:d9:7d:98:ee:45:16:30:de:
b4:31:ee:ab:4b:e1:cd:ed:5d:b2:ce:22:af:c2:6a:
c4:11:9f:cf:c9:20:ac:22:4c:43:55:48:d2:59:ac:
06:ba:a0:ba:c1:c7:32:b8:30:4f:3e:6b:d3:61:db:
9e:2d:b8:44:4d:60:05:24:40:f9:d5:18:60:1d:d8:
90:38:be:ac:e2:76:5f:c4:94:d6:ef:d6:ba:ca:d3:
24:52:2d:62:34:b4:08:92:b1:46:bc:1f:78:f2:4f:
37:f6:02:eb:2e:a1:95:d8:44:20:34:d2:a6:1a:4d:
01:6c:56:27:0a:e8:c9:12:5d:d6:64:37:7b:4c:81:
bd:09:81:9f:cc:b5:90:d9:4c:c9:31:f7:2d:11:6b:
65:72:7d:57:08:ef:1c:83:81:ec:15:57:4d:6d:82:
1e:e9:59:46:e1:ae:fe:d2:bb:2b:61:48:fb:85:7b:
c1:11:48:f9:ba:91:fe:18:28:8c:55:ee:9a:1c:66:
0f:2c:c8:d6:8f:a1:1f:6a:85:09:56:5a:d7:2b:54:
43:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A4:9A:06:C5:A1:6B:51:B2:98:EC:B7:CD:74:84:D9:0D:53:7B:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/ead27e67-c07d-30c6-a3f1-e23d77c953c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6/55bbf9e8-b36d-4738-b477-dcc24272dbf6.crl
X509v3 Authority Key Identifier:
keyid:63:41:45:20:E6:F3:69:D2:70:D0:25:C7:9C:ED:98:AD:57:67:48:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bbf9e8-b36d-4738-b477-dcc24272dbf6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:28:e5:23:33:ef:8a:e4:e4:2a:fb:9a:0d:2f:60:10:7c:91:
35:26:bf:72:35:60:82:64:b6:3b:fb:da:60:5b:3d:e8:7b:08:
08:26:76:b7:d9:b9:45:51:48:40:9b:a2:cb:41:e8:87:db:e4:
1b:81:4b:82:e3:24:ee:ee:23:15:31:f2:13:39:ba:cf:b4:16:
98:47:59:58:9c:27:22:a0:03:15:55:3f:23:32:23:5f:5f:de:
58:f6:43:a1:2d:9c:61:ee:13:15:49:2e:39:4f:8c:fe:48:bf:
39:54:4e:50:be:b9:37:86:da:52:d3:6f:b2:bc:27:d4:d7:82:
30:d0:89:b0:d4:c6:97:ec:3b:49:5c:47:bb:17:bd:ad:3a:4c:
a8:79:b0:d2:9a:c0:18:88:d1:92:79:50:87:ce:f5:98:29:04:
dc:5f:e9:ef:8b:13:a5:27:35:55:44:cc:19:26:8c:c7:bb:ae:
c1:ee:42:8e:20:f0:87:ee:4f:6c:1a:58:df:b5:0d:f5:bc:b4:
ab:cc:c9:60:b4:c7:23:d4:97:a9:65:73:75:5b:27:9a:98:aa:
0d:6b:fc:ff:5d:b3:eb:33:69:2e:23:8f:f8:68:7d:72:61:63:
68:57:59:c4:b1:42:8f:a3:15:43:ba:4a:5a:92:b4:52:99:32:
59:13:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:20:19 2025 by rpki-client