Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa
File: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (raw, json)
Hash identifier: Pom325WgjtvaDVAHyh3ElKapP5dT+6WE1whhextcZ7I=
Subject key identifier: 03:CF:AD:C8:FB:45:C4:2E:22:B6:8B:8D:EF:24:FD:D7:80:83:22:7D
Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1
Certificate serial: 010D0C9F432858485470207A4C3FB7D339C6F400
Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 22224
IP address blocks: 23.187.128.0/24 maxlen: 24
207.174.168.0/22 maxlen: 24
2602:fed6::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:20:7a:4c:3f:b7:d3:39:c6:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=eec32875-741e-4c7f-addb-b5cf087d7f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c6:ab:ef:2b:99:71:a4:20:75:f2:4a:6c:fc:
87:9d:a4:81:8f:4f:42:b4:ea:9c:c1:10:0f:2f:89:
ab:35:2b:a5:16:87:1d:d0:40:37:42:39:84:ae:95:
65:8d:77:2f:e4:00:e6:dd:15:0c:5e:dd:e7:2f:e8:
54:c0:9a:83:82:3b:a3:f6:78:a6:8c:e7:9b:f1:cc:
12:54:c3:5c:9e:15:a3:50:11:bf:8c:61:96:94:fc:
9c:f5:33:4d:f4:20:d5:13:f6:47:84:09:1c:80:66:
2c:34:f4:21:bb:72:02:e2:ad:ab:dc:bf:cd:5d:4f:
db:63:8e:1d:21:f6:3e:ef:1b:7d:ad:81:23:56:51:
0d:10:2d:08:20:6f:92:c3:05:ab:9f:e3:ef:74:d7:
b6:86:ca:10:b4:03:58:f1:a1:35:41:6c:a5:a2:bf:
27:b2:05:32:fd:31:d0:64:14:cc:4e:9a:c1:0f:8b:
a1:2c:c9:8f:b4:57:33:b5:d6:7e:bd:bd:6f:10:b3:
20:05:78:a5:3d:b5:a0:e1:76:31:7d:c8:0c:dc:b7:
cd:a4:b1:a9:90:d7:e5:b2:e0:e7:4f:2a:d1:f8:11:
7c:84:ea:cf:57:94:c8:6d:7a:20:32:56:7e:70:54:
1d:f1:fc:53:66:36:04:74:d7:06:a0:04:c1:eb:fe:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:AD:C8:FB:45:C4:2E:22:B6:8B:8D:EF:24:FD:D7:80:83:22:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl
X509v3 Authority Key Identifier:
keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.128.0/24
207.174.168.0/22
IPv6:
2602:fed6::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:53:bc:bb:a7:0e:a6:35:4b:48:84:f4:a0:4c:15:c7:6a:01:
29:ad:79:3d:6c:7a:5c:85:e2:1a:3b:9a:35:a9:dc:90:9b:5b:
52:c7:9d:6f:c9:35:25:9f:57:f7:af:f5:1f:2f:d9:c9:5a:0f:
14:3a:f6:66:e7:04:cc:9c:b2:61:5c:97:c2:95:7b:0b:32:35:
da:3f:68:b7:a5:da:0f:80:56:e5:7c:d2:e3:60:a5:ac:b5:00:
2f:38:87:75:7e:5f:dc:51:10:1a:8a:d4:14:ca:05:a8:de:41:
c2:25:4c:a5:9f:fa:99:0d:ba:f1:61:e4:ce:0b:ea:87:43:f3:
2c:e6:a3:d6:37:3d:9a:56:22:44:90:ce:81:07:76:17:a6:5d:
10:19:d4:b3:f3:5d:92:f9:61:59:07:85:a7:c1:cf:a9:9f:70:
15:1a:31:7c:9c:78:69:07:c8:67:81:06:70:25:a2:c3:8f:6b:
3a:7a:65:f9:7b:ed:88:62:dc:a0:8c:2d:bb:b6:76:eb:a7:b6:
3e:09:64:86:92:1b:d3:3b:f4:01:5f:55:aa:30:9c:14:ea:b1:
a3:01:95:9f:14:73:85:54:af:1a:f5:30:b1:d6:c0:93:ee:9f:
97:3f:8c:4b:86:05:6c:99:0f:31:70:0c:8f:9a:b7:00:3f:a1:
a5:e6:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:09 2025 by rpki-client