Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa
File: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (raw, json)
Hash identifier: fWb+qNmlBI9V2q8PmvpsA+E+aUP2ln5WjdcD65//EF8=
Subject key identifier: CF:D8:53:05:00:62:6A:83:35:B0:E3:0F:41:CC:5D:99:7F:48:9E:C5
Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b
Certificate serial: 010D0C9F432858484C101E02085B24D877C90100
Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 393444
IP address blocks: 23.165.48.0/24 maxlen: 24
2602:fd1c::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:1e:02:08:5b:24:d8:77:c9:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=8248fd91-0347-4012-8a44-7955999f40bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:94:d0:33:68:45:6f:fe:a0:54:c4:02:1f:
29:04:f1:8e:10:e0:e6:17:8d:c5:6b:49:23:f6:20:
1f:e9:71:d5:43:52:7c:9f:ca:12:ca:87:23:64:a6:
f8:16:1b:51:05:c1:e5:df:99:39:6b:2d:a7:9d:2a:
ac:5e:9a:4a:cf:36:45:0f:4a:ec:42:79:65:33:81:
0a:ee:ed:22:56:fe:2b:70:3d:27:14:b0:51:90:14:
1c:3b:11:b0:03:92:d1:16:b2:eb:2b:9d:ae:4b:db:
af:ce:4a:db:5c:e1:71:73:24:5c:4d:d7:a6:e8:e6:
5c:5e:3e:a5:57:e2:15:2c:19:92:be:cd:c6:7a:ae:
7b:f6:4d:44:5c:db:dd:52:41:ae:41:c2:32:66:6f:
ed:20:e4:9c:93:20:e2:df:48:49:36:85:7e:e3:9e:
0f:92:dc:50:a3:38:b7:a7:2e:cb:b3:ed:f9:c4:30:
d9:ef:ce:45:5c:21:e1:fb:be:6b:65:59:ed:3a:2f:
de:c4:25:bc:a5:95:20:ae:cb:aa:b6:10:0e:60:d6:
44:47:ee:12:9a:87:67:43:9f:e7:00:73:e5:3f:d0:
83:b3:52:7f:ed:ef:e1:dc:96:63:2b:9a:77:72:ff:
76:fa:6b:f4:80:e6:9a:00:89:11:7f:6f:89:a9:e2:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D8:53:05:00:62:6A:83:35:B0:E3:0F:41:CC:5D:99:7F:48:9E:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl
X509v3 Authority Key Identifier:
keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.48.0/24
IPv6:
2602:fd1c::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:34:87:23:7f:9d:e4:90:33:b3:84:05:38:dd:a2:27:12:32:
38:0a:31:8c:9d:69:74:60:b4:76:45:77:b5:d4:a1:b0:b6:76:
c6:45:20:34:d9:dc:21:34:a4:48:8b:13:3b:0f:0a:6e:22:7b:
7a:09:81:ab:d1:c4:a1:9b:2d:bd:2c:94:22:ab:8b:f6:4f:cd:
05:fc:02:c5:67:b5:18:40:2a:43:58:07:b9:ac:8e:d6:bd:bb:
40:a9:e3:5c:15:81:75:40:34:86:3b:f2:7d:c4:c5:d4:8d:e0:
39:8c:77:e7:db:5d:95:71:2b:67:6e:ad:64:a4:38:6d:52:6a:
6a:8c:55:a7:b8:be:2f:8a:16:6b:3b:28:f8:6e:60:ea:1b:89:
66:73:e7:6f:22:20:12:3b:2f:69:c6:19:2f:a3:b2:0c:a3:73:
60:31:41:37:e5:75:c8:d6:67:87:e9:6f:e0:00:80:d6:e3:74:
0e:c7:2b:64:b6:45:15:8d:f2:08:55:2a:46:0c:d5:8c:6f:d9:
ea:4c:8e:95:d1:07:6c:0c:6b:e8:a0:ab:62:75:46:45:ce:20:
3d:90:2f:d8:28:e8:93:6b:4d:4a:90:70:f2:8e:56:70:c2:d9:
b2:23:1b:bf:e8:9d:d3:32:16:bd:92:d5:41:b5:6d:b7:3f:66:
2e:a3:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:14 2025 by rpki-client