Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/c3cb8684-f47f-3303-a3bd-521051961d0c.roa
File: c3cb8684-f47f-3303-a3bd-521051961d0c.roa (raw, json)
Hash identifier: R1Tad2viFMju+LX6TTncwTJgnw3aBkZgMfXcBNvM5+s=
Subject key identifier: C0:76:6F:E1:14:8C:A5:1D:8F:DD:38:CB:76:A8:B6:74:06:B9:BE:54
Certificate issuer: /CN=abaad708-212e-4627-8dbe-416a8512677d
Certificate serial: 010D0C9F432858484D758910A756F1371AD7E580
Authority key identifier: D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/c3cb8684-f47f-3303-a3bd-521051961d0c.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 399747
IP address blocks: 23.181.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:89:10:a7:56:f1:37:1a:d7:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abaad708-212e-4627-8dbe-416a8512677d
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=e2ef2e11-2277-4e7c-b525-b2187e4bb16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:96:91:99:0d:d5:71:0b:91:22:a7:98:d3:
e1:b8:6a:8f:24:70:ab:41:32:4d:7a:e5:68:b6:00:
d7:a8:8d:a3:ce:5f:cd:c3:fc:d4:a9:15:be:61:fd:
06:9f:c6:b5:45:fd:48:a2:f4:66:1c:b8:ae:aa:0c:
dd:36:a6:2f:68:81:25:83:f0:a8:08:fb:62:56:1c:
de:a9:45:2d:80:bf:b3:48:2c:53:03:c2:e4:88:2a:
79:35:28:20:37:75:c5:da:67:42:47:39:3c:42:9c:
e6:41:a7:7e:74:3f:8d:52:0a:dd:df:b4:3a:d4:6c:
8b:bb:22:9b:b6:e8:c1:8a:be:41:90:97:d0:a7:a7:
7c:8b:65:82:dc:b9:4a:25:51:bf:01:63:73:e6:00:
f8:44:79:0a:bb:c9:7f:7b:75:a2:16:01:d3:e8:87:
e7:d1:de:3c:7c:d8:92:85:6c:71:8b:e7:a7:e5:7c:
31:3f:af:21:b0:74:d4:42:b5:8c:88:9d:fc:4f:bc:
bf:7f:2d:51:a9:25:32:4b:97:2e:6f:f1:da:08:3e:
55:20:87:9c:06:71:01:e4:fc:74:04:cf:1e:a2:36:
a1:16:a4:f3:45:92:ba:bd:56:48:46:e3:8b:71:ef:
4d:06:f7:f8:73:80:92:84:c0:16:1b:d9:02:b1:ff:
ff:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:76:6F:E1:14:8C:A5:1D:8F:DD:38:CB:76:A8:B6:74:06:B9:BE:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/c3cb8684-f47f-3303-a3bd-521051961d0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl
X509v3 Authority Key Identifier:
keyid:D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.181.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:e2:91:00:5c:82:10:b2:fd:66:d7:ad:39:22:d4:37:1f:47:
1f:4d:36:d0:21:99:2f:4d:cf:f9:ff:8c:6a:b6:da:9b:82:4a:
9e:f9:9f:f9:4e:79:88:6c:0b:bd:f4:1b:c4:8d:43:f2:0f:0a:
2d:04:e7:f7:14:86:87:c2:1c:88:df:b1:59:c0:1e:99:9e:33:
73:4a:70:4b:bb:de:a2:b9:e6:07:bb:b7:2b:ee:0e:81:19:82:
7d:06:e7:77:31:a8:28:7c:9e:d3:b0:6b:8b:ee:42:76:aa:6c:
c9:d8:65:47:d9:2f:33:56:13:2f:d0:bb:9e:68:c6:4a:f9:79:
9c:72:0b:4d:91:78:8b:bb:1f:5e:bf:65:b0:9c:34:2a:14:16:
68:45:a3:77:37:db:42:ef:ea:ec:c3:6f:fa:7a:53:29:d0:ce:
c6:50:cd:6f:a9:51:b4:57:e6:c8:08:f5:a2:96:0f:ce:ea:c9:
d7:b2:e8:b3:59:76:2b:b6:07:7f:9d:24:13:68:8f:a6:44:fd:
38:1c:34:16:d9:28:f9:8d:96:b5:41:8d:d3:0d:4d:a5:81:45:
46:80:e1:85:7a:81:8a:c0:9f:bc:71:b5:33:8b:92:02:8d:c7:
4d:94:c8:ea:ae:0e:b3:d2:e3:ed:b5:f1:70:6e:82:c6:c5:5b:
56:73:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:45:04 2025 by rpki-client