Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa
File: 78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa (raw, json)
Hash identifier: bwXfLt9aTNXNPXYJqp/V2yHCLEz/zcRsu+4nAlt6pK8=
Subject key identifier: C8:1F:BD:C7:BB:FA:0D:A6:6C:70:39:2C:3C:D9:D3:A7:76:CB:21:8B
Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial: 010D0C9F4328584863CB02B1CE8FB051A9D28880
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 40249
IP address blocks: 23.137.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:02:b1:ce:8f:b0:51:a9:d2:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=d7d8d76a-9bca-4aae-9cce-1d2ea9508f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:f3:6d:2e:3d:bb:66:b7:6f:c0:40:0c:63:
f2:ce:af:36:af:21:ed:30:43:66:48:11:a2:98:89:
43:5f:97:b6:f9:18:07:d6:df:51:7c:2b:b2:5e:e5:
eb:e8:75:af:5b:1e:65:05:7d:63:e0:37:11:17:8b:
fd:11:72:47:1d:d1:9d:15:0b:ab:9d:21:ea:d5:a8:
b3:3f:19:12:f0:32:93:a8:e0:01:8a:87:59:45:cc:
d7:60:46:d7:06:c0:d3:4f:af:3e:90:f4:04:f1:87:
36:1f:cf:86:f3:02:10:a2:3a:0e:b2:d0:cd:66:5a:
f5:bc:4f:f1:f9:8d:ef:b4:17:ed:ad:34:d6:2a:5a:
29:14:f8:73:b1:db:ce:7f:ad:e6:5c:a1:6f:89:c2:
28:a0:a6:a6:bb:fd:ed:ca:de:65:18:33:e3:6e:ae:
33:80:1e:66:8c:e3:77:bc:a1:4a:f5:1a:86:97:36:
65:6b:98:4d:c6:4a:22:dd:cb:0b:e4:4f:3a:1c:df:
b1:86:20:d2:48:ff:79:59:51:db:c4:ec:97:9d:90:
78:ac:61:d4:4d:30:bb:05:d3:82:84:92:cc:6e:17:
a8:1f:96:66:e8:1a:ed:3d:14:c5:b6:1d:7f:81:93:
b9:89:a8:07:ba:45:f4:a8:6a:7a:3a:cc:5c:96:51:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:BD:C7:BB:FA:0D:A6:6C:70:39:2C:3C:D9:D3:A7:76:CB:21:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/78bc00a8-8871-36fb-9c9b-ad8a3d7c03d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
X509v3 Authority Key Identifier:
keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:87:9a:e8:75:d1:77:0b:34:fd:6d:af:c7:28:68:c5:29:8e:
5b:31:79:24:3c:88:3c:d8:6d:a8:5d:ed:72:53:46:47:8d:8a:
af:78:c6:d4:71:74:c7:b2:58:ec:89:a2:14:6f:2d:9f:dd:e3:
7a:46:bf:8b:d2:c3:08:8c:a2:46:a5:9e:a5:11:8d:a7:dd:b0:
a7:d1:0d:54:2c:d7:ad:95:d5:55:62:d2:35:d0:26:1a:5d:f0:
8b:0e:6c:30:76:ff:d1:4f:19:0f:0d:93:46:00:ea:d1:1f:ac:
7d:5c:77:18:41:49:bf:97:86:7b:88:8d:da:d3:83:6d:c8:b2:
41:10:bf:e6:f0:3c:d9:04:7a:fc:52:3d:54:72:61:1a:e6:51:
61:19:ab:ce:4d:d9:5a:2f:d5:b1:61:56:68:af:3a:0c:84:6f:
ec:fb:02:6a:ab:9f:91:d1:04:8d:9f:71:b4:73:f3:64:92:e0:
30:d0:32:6b:b0:d1:fa:bb:bf:e8:5f:2f:6c:71:d3:60:fd:da:
55:cc:5a:a2:3f:45:f1:7c:42:3a:b1:48:c9:45:59:97:c6:00:
33:6a:74:54:91:03:b5:e5:61:6f:4f:7c:a5:24:5c:b8:74:2c:
cc:a9:fa:57:29:83:23:ca:04:de:48:9b:57:0f:3a:63:46:91:
e1:c0:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:26:09 2025 by rpki-client