Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3bcf8fa6-ec78-394c-813c-f941b803fc26.roa
File: 3bcf8fa6-ec78-394c-813c-f941b803fc26.roa (raw, json)
Hash identifier: kGnrp8fesuuXH1HyTkZqZO+FZvVzK6S03s4TiyGNMJU=
Subject key identifier: 48:F7:9B:1A:97:5D:DA:1D:96:55:04:D5:92:6D:2F:79:6E:A5:9D:56
Certificate issuer: /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial: 010D0C9F4328584829440C2EB66A1B2E7B51C000
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3bcf8fa6-ec78-394c-813c-f941b803fc26.roa
Signing time: Tue 10 Dec 2024 14:52:08 +0000
ROA not before: Tue 10 Dec 2024 14:52:08 +0000
ROA not after: Mon 10 Mar 2025 13:52:08 +0000
asID: 0
IP address blocks: 169.145.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:44:0c:2e:b6:6a:1b:2e:7b:51:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Validity
Not Before: Dec 10 14:52:08 2024 GMT
Not After : Mar 10 13:52:08 2025 GMT
Subject: CN=8ef55970-b7f7-4f1f-860f-ef0e4865eddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1e:3f:ff:df:cc:fd:e2:93:d2:8c:f7:c5:44:
44:89:18:3f:fd:f7:d1:57:f1:1d:6c:d2:33:04:07:
7f:f6:27:55:8a:77:28:8b:63:f8:6f:ae:a3:2a:e8:
2e:d1:52:fc:e8:aa:94:96:d4:8f:45:a6:2f:6a:66:
71:56:42:e2:8f:bb:b8:aa:3a:e6:42:5d:97:71:02:
95:9b:63:6a:3d:ab:0d:20:04:b2:68:73:3c:97:73:
18:87:e8:a1:f4:1a:e1:ae:25:42:89:f6:30:5a:0f:
dc:3d:25:1e:38:f7:3c:66:92:8f:74:13:07:49:05:
a3:dc:42:91:57:59:9e:58:e1:f7:3b:14:ae:f4:29:
e1:65:01:86:11:bf:a6:75:61:2c:20:4d:2d:be:6c:
d9:ce:6c:93:11:8e:e2:e0:08:d8:a6:71:af:fe:65:
02:a7:3a:38:f6:42:96:95:fe:51:47:64:1f:92:6b:
5d:b0:f1:c8:8c:65:91:6a:be:ea:26:2d:e5:9c:c4:
77:86:1f:ff:81:c4:94:d4:99:6d:b7:da:e8:9c:88:
e0:1a:6e:eb:15:1f:09:3b:6f:94:04:ef:a3:0f:0b:
52:e0:69:81:d5:1d:8d:ba:09:41:64:74:14:a8:5c:
4f:29:bf:7f:89:7e:13:9a:2d:a1:3a:f1:eb:9d:bf:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:9B:1A:97:5D:DA:1D:96:55:04:D5:92:6D:2F:79:6E:A5:9D:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3bcf8fa6-ec78-394c-813c-f941b803fc26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
X509v3 Authority Key Identifier:
keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
sbgp-ipAddrBlock: critical
IPv4:
169.145.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:71:ec:68:83:08:8c:39:00:fd:3f:d5:80:f7:bd:1f:67:fb:
ec:65:d9:43:78:59:e3:36:67:b9:94:cf:b0:44:29:1c:39:a0:
0e:90:d3:e6:d2:ed:21:7b:ec:e9:4d:7c:a5:a6:2c:a0:f6:84:
7c:27:92:46:07:f2:b4:8e:0b:03:2a:09:06:5f:ff:c6:2d:8d:
b8:a4:a6:52:b2:d1:4b:c4:4d:08:d9:0f:52:80:30:e5:30:62:
2d:4e:35:84:78:2e:ea:4e:12:9d:a0:5b:38:ad:9c:9c:2d:14:
07:b3:3c:df:2c:b7:2c:c8:f1:db:e0:62:5a:22:c3:e7:15:57:
ca:7b:ad:b1:9e:49:47:20:ea:18:e7:ff:e3:9a:c6:a2:98:b6:
6a:53:68:5a:d6:69:c1:bb:19:65:48:57:88:60:ba:c5:97:06:
72:2e:e5:5f:f8:55:25:56:98:af:18:76:e2:e2:32:c0:71:45:
9d:a8:e0:4c:bc:e7:29:dc:42:49:9e:f8:c7:73:3d:83:04:c0:
6f:23:ad:bf:9c:8d:4b:a9:29:86:95:0f:89:b7:72:44:80:a5:
90:2c:38:3e:f1:78:65:e1:68:d0:0a:13:e1:3e:bd:3b:2d:c5:
64:97:c7:8e:42:3a:0a:b1:d1:a1:70:7e:4a:22:7b:22:a0:98:
b7:7c:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:00 2025 by rpki-client