Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa
File: a1bc269a-e265-3234-b628-e9d71b3d725d.roa (raw, json)
Hash identifier: yBBLiFZxs9Jpaz0iobdkQSIek+SlEfcdCpidJPMxZII=
Subject key identifier: 10:08:AC:53:7A:09:1F:D0:B5:B0:9D:7C:2A:4D:AD:A8:53:43:F0:D4
Certificate issuer: /CN=c8252214-88a3-4807-bbe2-b344c3be7f19
Certificate serial: 010D0C9F432858484D758AAE3BA217BD8775CEE0
Authority key identifier: 62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 25639
IP address blocks: 23.152.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:8a:ae:3b:a2:17:bd:87:75:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8252214-88a3-4807-bbe2-b344c3be7f19
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=f7343cf5-4fe3-43bd-b71d-2e6907687730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:b6:a4:5d:68:dc:8a:b7:e5:2e:83:5e:2b:
2c:dd:39:86:a0:a7:32:d0:f6:ef:3d:2c:c2:79:99:
ac:62:a4:00:3a:eb:6c:ba:09:01:a9:2d:25:0e:5a:
17:7a:19:a9:8f:52:3d:9f:ed:cc:83:c7:b4:f1:fa:
d2:01:90:e1:05:fa:10:4e:7c:21:cc:fe:ed:8a:f2:
2b:32:21:2c:b7:df:e9:6b:1c:b8:21:7f:3a:63:89:
29:d7:17:1c:b9:2e:33:b5:37:74:14:43:0a:af:24:
3b:22:79:28:95:56:e1:88:85:a7:db:91:01:53:60:
c6:99:f7:f9:f5:c1:ef:97:77:c7:9d:ec:5d:67:ad:
3d:ed:aa:79:c3:b6:05:87:a3:16:05:d9:1a:2c:7b:
4b:b4:a4:e3:0c:58:db:c3:d4:f6:57:74:67:e5:27:
84:57:9e:ca:28:9e:3b:15:9e:ff:b9:49:57:50:d6:
6e:bb:d3:62:9c:82:01:d6:bf:e6:45:dd:bb:2e:09:
e7:69:7f:e4:26:09:80:74:87:b8:24:f0:d7:4b:c8:
5d:d3:28:ad:5d:ed:71:ce:31:53:72:62:61:13:bd:
a0:2e:07:75:f8:65:cc:29:df:10:c3:2a:0b:79:5f:
11:0f:e1:19:5c:bf:68:82:86:c4:55:a1:79:1e:19:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:08:AC:53:7A:09:1F:D0:B5:B0:9D:7C:2A:4D:AD:A8:53:43:F0:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl
X509v3 Authority Key Identifier:
keyid:62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:43:f2:e1:6a:39:81:41:5c:a7:55:81:90:4f:98:be:25:a4:
6f:b6:e8:c1:bf:1e:c4:e4:c1:c6:c7:2c:0f:a5:bd:a9:bd:db:
28:fe:e3:66:45:9b:54:7f:24:d3:41:6f:fd:bb:32:ed:57:f2:
36:ae:36:b3:fb:44:20:7e:77:f7:9e:99:70:09:b7:e8:ad:e6:
37:a0:8e:86:d6:50:4e:ab:03:fa:ed:f6:da:c4:3a:df:67:95:
33:94:a5:1c:ea:04:a0:af:cd:84:d6:c9:86:86:1b:09:ca:c9:
85:b5:80:29:3c:43:f6:12:1c:1a:11:53:d3:14:7f:e3:93:07:
82:6f:21:f0:d6:d7:07:fb:06:8a:82:a1:ac:9b:13:bf:4b:3f:
20:c9:ac:78:6b:c7:cb:7a:02:31:41:90:1a:ad:50:21:5b:a7:
fc:02:e3:9e:a6:0a:8e:b7:b3:d9:ec:11:0f:41:4f:7f:fe:29:
0e:fc:a7:c7:e6:27:a5:27:1a:77:d6:f6:22:2e:ee:8c:7c:de:
b1:f2:8f:76:03:d9:4d:4f:8b:b2:be:26:d4:29:24:66:9a:3b:
b5:2e:36:b5:42:aa:7c:7c:7c:fd:03:69:c7:88:9b:b1:15:9c:
d1:47:9f:cc:ed:b2:d6:34:57:cb:eb:e8:a6:ad:66:8d:c0:60:
14:ee:4f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:12 2025 by rpki-client