Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa
File: 2feb0cec-2470-3c1b-b3be-57e967538fd8.roa (raw, json)
Hash identifier: V90K+jNK8GSpU+CUGx8dkUlOQ7Qa24a+Z4hp9KLZkEg=
Subject key identifier: 5B:A2:95:D7:78:6D:1B:16:AE:10:8C:CF:76:D2:EC:EE:1C:66:86:AB
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486C2B1701C4DD19C719B10C00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 394285
IP address blocks: 23.88.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:17:01:c4:dd:19:c7:19:b1:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=0cd76453-a3e1-46a2-986c-88a97500ade5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:aa:4e:05:05:fb:68:d2:98:d0:6a:36:8c:
dc:7e:09:05:39:75:14:5b:32:ab:b4:5c:f1:8f:83:
b2:3f:cb:25:c0:63:05:0b:fc:0d:6c:29:0c:15:34:
dd:c5:e6:63:d8:bb:b3:47:f9:d9:45:79:e6:80:d7:
54:e3:36:c2:d4:86:e4:ca:b2:8a:78:8f:e1:81:d1:
19:78:e5:1f:54:2f:d2:20:64:a7:98:6e:0f:b7:48:
4f:ee:84:03:0a:03:5b:b9:c1:fe:ed:e8:32:ad:af:
3c:54:a4:e2:7c:58:8d:59:9a:fb:0d:cd:bf:d6:fa:
1e:04:aa:3c:22:57:2d:3e:56:3d:54:2b:f2:d2:60:
f6:c4:20:ab:a8:11:20:f8:ae:77:93:4f:82:9c:ea:
15:f8:a3:e7:df:46:ba:ef:b7:24:cf:0a:1d:83:c1:
8c:50:e2:56:cb:3f:0b:3d:b7:a1:27:49:71:de:43:
22:5c:f7:6d:0c:b6:24:3c:e4:f4:37:ba:c2:26:8c:
05:8f:df:9b:c5:3c:20:4b:07:13:82:06:78:46:84:
b6:45:b6:48:d4:71:11:9c:e7:a8:2f:43:2d:d5:b9:
1b:a2:1f:d2:db:2a:73:72:17:c9:c1:21:35:7e:76:
3b:a5:0f:c4:81:f9:14:9f:71:20:f6:f2:5b:15:cc:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:95:D7:78:6D:1B:16:AE:10:8C:CF:76:D2:EC:EE:1C:66:86:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2feb0cec-2470-3c1b-b3be-57e967538fd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.88.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:03:79:39:f4:21:cc:0b:a6:72:03:d9:e8:8d:ef:f8:82:91:
1f:6d:b4:ac:65:a9:c9:6b:f2:42:fe:14:34:1c:63:01:3a:a2:
6d:99:1d:f7:f3:65:c3:22:ca:ea:b1:ca:e5:95:e3:c8:da:f6:
35:f4:15:6b:15:ca:55:21:91:bb:1a:2a:4f:b0:68:ec:5c:d7:
de:b2:cc:3f:e6:0c:7e:9d:93:98:95:46:19:48:bb:8d:98:60:
0f:74:0c:ac:8d:7e:86:d1:e8:4c:cd:c6:93:3a:47:16:79:c1:
2a:85:d3:11:c3:63:3d:90:7a:37:e3:db:d3:56:ab:74:08:7d:
e5:52:3c:de:92:2d:86:f2:a7:41:ec:0c:4b:72:8b:8b:85:44:
b1:a2:21:24:98:16:30:86:37:a4:bb:ff:58:89:ec:a9:08:55:
1a:7c:11:81:78:36:87:e0:25:be:fe:db:a8:91:f8:83:36:eb:
d7:ec:d2:f2:98:06:59:2c:c0:44:97:3e:44:6f:d5:e2:2b:ac:
1d:ac:d8:02:09:bf:22:e9:4c:a9:a6:29:3c:95:ee:ce:7d:c4:
65:b4:ef:5b:2d:49:d8:ad:6f:dd:db:e7:5c:22:ce:ae:65:80:
c7:c9:24:4a:6b:92:5d:4d:ee:1c:76:51:5e:b3:00:39:7e:06:
7c:66:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:02:41 2025 by rpki-client