Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa
File: d823da31-dfeb-3482-8118-efd174a432a0.roa (raw, json)
Hash identifier: hlTXbj144QU0cZ87MkndwWPKHVVF/IfhEWOaD9dDFFY=
Subject key identifier: 14:EC:C0:E1:4E:B3:5E:68:D8:B5:B1:03:EA:51:E6:0C:39:FC:05:F5
Certificate issuer: /CN=74aa5b22-bda2-4141-8bdf-98a78696dd03
Certificate serial: 010D0C9F432858488C446C11FE7E1AEBCA727300
Authority key identifier: DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa
Signing time: Wed 15 Jan 2025 01:57:55 +0000
ROA not before: Wed 15 Jan 2025 01:57:55 +0000
ROA not after: Tue 15 Apr 2025 00:57:55 +0000
asID: 400402
IP address blocks: 23.134.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:44:6c:11:fe:7e:1a:eb:ca:72:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa5b22-bda2-4141-8bdf-98a78696dd03
Validity
Not Before: Jan 15 01:57:55 2025 GMT
Not After : Apr 15 00:57:55 2025 GMT
Subject: CN=4a7745e4-2b50-4f2a-b372-24f4203fcfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:91:14:e3:c6:05:01:99:de:d9:f5:36:8c:
13:d3:ce:b7:c4:c7:c8:59:41:86:14:7c:24:3e:82:
8a:5f:0e:e5:bd:ee:01:76:4d:f4:0b:ca:84:ec:dd:
d7:7d:43:83:9c:27:20:32:94:d3:2f:15:ce:f2:9e:
36:07:27:8a:9a:ce:14:24:75:80:6a:d4:60:4b:4b:
2a:2f:9e:b0:61:60:b5:6a:46:1c:3e:94:20:b3:dd:
91:85:ca:dc:2b:5c:59:37:bd:12:1c:4f:10:ce:17:
5f:56:43:08:20:4c:38:ab:0b:38:2d:71:46:a0:06:
86:89:be:46:6e:60:c3:c6:94:b7:20:7d:34:5b:10:
5e:8c:e1:62:07:0a:f2:41:b8:5d:4e:82:d9:1b:dc:
73:03:32:58:f2:00:74:f0:5c:7b:3e:d6:53:4b:4f:
74:e5:7e:04:d3:e2:ab:4e:0d:be:16:e4:31:b3:a6:
5a:73:d4:ef:65:31:73:d6:2d:39:6e:14:b2:d8:95:
79:d3:6b:4d:4b:7f:bf:21:0b:1a:b8:ed:ef:e1:54:
0a:76:ea:e4:96:29:ac:e4:5c:17:6e:12:ba:e9:f3:
7f:6a:4f:92:45:77:05:39:9b:7c:c6:64:d0:da:00:
75:f6:69:41:b8:1b:a7:75:fc:29:65:47:90:80:1a:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EC:C0:E1:4E:B3:5E:68:D8:B5:B1:03:EA:51:E6:0C:39:FC:05:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/d823da31-dfeb-3482-8118-efd174a432a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.crl
X509v3 Authority Key Identifier:
keyid:DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:b6:a3:94:2c:ee:22:53:90:1f:27:c2:2a:bf:32:16:1a:31:
4f:41:df:51:fe:bb:72:36:07:d2:b1:35:bb:d7:78:c1:16:99:
33:8e:48:18:ea:5a:62:7f:18:4a:cc:2d:86:5a:79:03:ae:4a:
09:f9:ea:ff:02:db:23:74:65:a1:0e:17:c5:a4:db:60:b6:a1:
c9:21:88:c1:0a:3f:2c:c3:f7:01:53:ac:ad:fd:ca:0a:59:17:
77:cb:78:02:3d:8f:72:dc:ab:05:32:29:46:3c:e2:6b:5b:ca:
76:09:a9:51:96:69:fc:b5:5d:6b:0b:b6:57:15:f7:10:6f:ae:
f7:13:c2:da:ae:5f:6a:bc:83:a9:50:b4:c6:08:90:ac:70:0a:
e2:1c:81:dd:85:95:4d:ea:0e:50:48:e4:9f:bc:c0:21:36:75:
b1:15:34:4d:c7:3d:bf:bb:e6:05:b3:1c:95:3c:2a:cb:ad:b0:
fb:ae:86:76:46:c0:82:05:71:f9:aa:88:3c:1a:ac:fb:86:74:
4d:1b:48:36:73:50:42:1b:32:71:67:69:f0:43:b9:06:5f:1a:
51:3e:42:b5:b3:be:a6:37:82:f1:ad:66:f5:93:b1:15:0f:5a:
81:e5:52:29:c6:df:d2:13:09:4c:2e:2b:09:b4:e4:50:40:fe:
61:36:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:33:12 2025 by rpki-client