Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/660fc943-b6d6-3832-851b-50a2c889df0e.roa
File: 660fc943-b6d6-3832-851b-50a2c889df0e.roa (raw, json)
Hash identifier: sSk6y0S9wbAKxZ0EWtL9CT4XtmCJ/EhTeWSL2C8U8v0=
Subject key identifier: 05:E3:48:9A:DE:D0:28:56:C7:A5:D3:51:AF:94:EA:F5:60:6E:45:52
Certificate issuer: /CN=e1029eed-2e88-4036-a7d9-ea093001f5cc
Certificate serial: 010D0C9F4328584839EAB99E3D2A5A656D8E2780
Authority key identifier: 05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/660fc943-b6d6-3832-851b-50a2c889df0e.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 31898
IP address blocks: 23.190.16.0/24 maxlen: 24
2602:fc0f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:b9:9e:3d:2a:5a:65:6d:8e:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1029eed-2e88-4036-a7d9-ea093001f5cc
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=85f6114e-67c7-49c8-9125-3476e1bcef0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:93:67:69:cf:55:5d:38:ad:0f:ec:f1:f3:
5e:be:b7:10:cf:0a:51:08:03:8b:14:33:64:e9:d2:
12:b7:f2:ad:9e:17:8f:f1:8b:2b:6c:f1:02:60:89:
2f:80:6f:53:2e:a9:49:89:82:63:9b:14:2f:29:a5:
83:ea:88:1b:de:3c:c6:44:ac:34:03:42:9f:6e:8b:
28:84:83:05:da:cb:92:6a:ea:1d:10:07:75:d2:95:
2e:d5:fa:d4:3e:ce:ee:5e:8e:bf:50:29:e8:67:c4:
c2:6b:41:8e:b4:66:58:7f:53:4c:d8:0f:5f:86:02:
96:47:ae:e5:1d:4e:ef:f6:e0:71:09:06:b1:e7:bf:
c9:04:b6:c7:11:22:3c:1a:fa:48:11:cc:a7:5e:2d:
ce:e8:34:c9:31:b2:b6:9c:f0:81:d7:d8:e8:b7:b7:
91:d1:8d:80:4a:4b:b9:c0:31:a9:11:3c:01:cc:38:
45:28:48:f7:22:27:a4:36:71:73:22:6d:77:a3:fa:
83:9f:17:98:e5:cb:aa:90:ca:0e:de:4f:52:1a:f1:
82:32:84:44:6a:4a:04:a2:29:74:21:e8:7d:b9:5d:
6c:27:90:5a:8d:4f:62:b6:04:25:df:87:2f:6e:4f:
8a:3f:b3:3b:45:41:a2:d8:7c:a3:a1:d2:5b:a5:49:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E3:48:9A:DE:D0:28:56:C7:A5:D3:51:AF:94:EA:F5:60:6E:45:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/660fc943-b6d6-3832-851b-50a2c889df0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.crl
X509v3 Authority Key Identifier:
keyid:05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.190.16.0/24
IPv6:
2602:fc0f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:8c:2e:7c:c6:33:ba:f0:6f:bc:28:5a:c9:9c:c8:8a:10:10:
94:cf:4a:f9:eb:ac:09:0a:21:e7:e6:0e:a1:dd:4b:ec:d5:46:
2e:f2:82:26:d5:90:bd:8d:7a:92:bb:dd:03:cb:6b:2c:5d:cf:
c5:bc:9d:2a:a9:6b:ee:c6:8d:c4:f5:7f:94:3d:de:32:9a:eb:
f7:a8:14:a1:e0:83:7d:7c:9b:1b:e9:5b:9a:ca:c4:3e:8d:de:
18:f4:6f:d7:57:3e:61:b7:95:08:81:03:6d:81:a6:87:36:bb:
bb:4a:cc:36:57:b7:f8:7b:0c:c4:a9:2c:f1:a0:6a:c1:fc:39:
5f:67:0d:4f:50:0b:98:d0:e0:a6:1c:e3:d0:34:6e:8a:fd:a6:
d9:fd:72:44:a2:98:13:ba:82:5e:32:a2:c4:7f:09:a7:7d:2b:
f9:52:71:f4:26:8d:f9:77:eb:c3:b1:5e:81:ef:35:a5:60:56:
5c:8a:a9:ff:14:4c:9d:e5:32:a2:fd:58:f3:c5:3b:4f:67:2c:
0c:a2:a7:55:1a:0b:a8:46:df:ec:fa:3f:4a:1f:b3:dc:a5:5f:
e9:52:2b:3d:28:0e:9b:5d:10:8e:ef:6f:93:cf:ec:76:c2:af:
97:8f:c3:e3:ae:26:96:81:02:85:37:17:bc:7a:09:9d:5b:87:
5d:7c:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:56:16 2025 by rpki-client