Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa
File: bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa (raw, json)
Hash identifier: JWfOhDg0t+6s6K7Gr2cvaKVRwUtK51ab/FAXVg/3Pck=
Subject key identifier: C3:9C:32:AF:7A:76:6D:8C:C7:7B:2D:82:36:A7:BD:B2:C4:19:5D:B8
Certificate issuer: /CN=687d1923-22fe-4744-9984-8ca387a57cf3
Certificate serial: 010D0C9F432858484EDAC6F543E82EBC12291050
Authority key identifier: BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 400495
IP address blocks: 23.133.104.0/24 maxlen: 24
2602:fbae::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:c6:f5:43:e8:2e:bc:12:29:10:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d1923-22fe-4744-9984-8ca387a57cf3
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=883aac50-b2f1-4d4a-8edd-a5f4be0008db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:40:68:13:dd:22:f3:d0:5e:51:d3:4c:af:
45:3f:22:ea:3c:35:4c:9a:a4:45:e6:29:bc:06:38:
53:41:35:7c:e1:89:c3:a5:e7:cc:ef:b4:53:5b:dd:
32:4e:98:9c:16:bd:c3:ee:28:28:ab:6b:3f:72:c7:
f2:6e:2a:19:50:75:20:39:b7:86:1d:41:ed:f7:a0:
a0:5b:c9:9d:48:76:62:39:94:81:25:db:01:46:f9:
b7:44:80:b6:90:12:5f:85:e3:c5:15:3b:cf:b6:b3:
3c:b2:f8:19:2e:46:23:9e:f9:b8:aa:dd:3a:c5:f7:
9f:78:cc:70:b4:bf:3c:6a:52:a6:52:d9:95:e1:31:
69:bc:a5:0a:f2:96:aa:5c:84:ba:23:09:b3:80:4c:
bc:29:1d:3c:3c:b8:3c:82:4e:af:6a:a1:ae:3c:bf:
10:48:15:18:0c:26:b4:62:5d:c4:0c:19:3f:fa:b1:
43:1a:ec:43:1e:f6:ac:2d:32:77:67:d0:8f:c9:5b:
d6:14:5b:d7:c9:95:f0:e7:59:bd:81:5c:43:30:69:
ce:ad:0e:e9:12:6c:72:9d:bd:33:6b:ea:34:fe:8e:
de:53:b8:fc:0e:0d:80:e7:bf:c1:2d:04:bb:45:d2:
94:a9:a9:19:f6:f1:2a:53:d6:3b:b9:6e:ce:f9:2b:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:32:AF:7A:76:6D:8C:C7:7B:2D:82:36:A7:BD:B2:C4:19:5D:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/bf6183cf-17c2-3a63-b9d8-a8c4e69f4a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.crl
X509v3 Authority Key Identifier:
keyid:BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.104.0/24
IPv6:
2602:fbae::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:fd:65:8a:e4:d5:eb:07:7b:3f:f6:db:10:d4:c1:61:9f:1b:
85:5e:2c:9d:1a:2c:3e:a3:8b:85:c0:bf:e6:f1:f7:ce:e1:a6:
25:c9:ba:a1:1c:8e:9b:f6:74:f0:7b:91:62:51:e3:0c:e8:32:
e7:b5:af:72:a8:aa:92:b4:72:15:ea:e0:1f:29:b8:ba:b2:27:
43:ba:5c:71:67:41:d1:20:6d:bb:eb:82:dc:be:b5:e2:53:da:
59:15:6a:fe:e3:e3:7f:a7:f9:a5:0a:dd:8f:ac:e2:c6:8b:ad:
0a:72:82:07:bd:eb:96:8e:84:c2:a0:d1:91:10:1c:b1:fc:b9:
3d:db:b0:72:d0:6c:8a:b2:d7:44:54:c7:e0:e7:03:b8:75:d8:
39:39:fd:e8:69:8d:48:e9:4d:3f:a2:58:61:5f:2a:db:95:6b:
91:92:1d:d8:b7:3b:4b:45:41:ab:1d:9c:5f:30:a8:67:af:14:
c9:7a:7b:3d:8d:9b:30:98:36:90:85:3a:97:7a:4b:f5:bd:50:
ce:a3:9a:58:46:e9:e4:ce:a5:f6:bf:1d:9c:a3:4b:fc:00:09:
f8:07:59:80:67:1a:9e:45:70:6b:48:b9:e1:d1:bb:1c:ad:58:
9d:a3:5e:0c:42:0f:2e:df:48:a8:52:b5:37:57:b7:e3:be:c0:
8b:c0:22:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:15 2025 by rpki-client