Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa
File: fda8929c-8853-3deb-9937-6ac2a4d97c46.roa (raw, json)
Hash identifier: XS0+Pfm//3a/Ksbaz7TkKD0ZuKZkoEG+4s1pk2RiUpE=
Subject key identifier: 28:5E:38:D3:6F:33:2E:4D:4E:D4:42:32:39:FF:D4:49:46:87:69:60
Certificate issuer: /CN=7d172af9-258d-47d2-b4e6-7e0c02152fea
Certificate serial: 010D0C9F432858486D9051D1AE08B88963006540
Authority key identifier: 71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 198487
IP address blocks: 23.156.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:51:d1:ae:08:b8:89:63:00:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d172af9-258d-47d2-b4e6-7e0c02152fea
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=b4ef4362-fa9d-4fad-b537-5434f48249b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:89:23:7f:06:8e:75:dd:e7:d0:fa:0e:83:ab:
41:ed:58:78:4f:3c:cf:dd:72:b5:99:22:60:ca:3b:
90:84:ab:c2:ea:fc:d7:79:5b:9d:f7:20:56:8b:41:
93:bb:d6:b6:0e:00:03:5e:5d:e4:44:63:89:af:6d:
c2:07:a2:39:97:ed:37:dc:7b:df:07:34:7a:83:6c:
ed:df:f4:b5:ed:ff:02:06:ca:46:37:f3:d2:0a:e8:
cc:37:22:e9:90:2d:e8:91:9f:20:d6:6c:2d:e4:b9:
4a:4a:c9:74:6a:91:db:ff:73:35:76:95:6e:5b:6c:
f7:ac:38:97:a9:4e:a1:c5:06:92:34:63:e4:65:98:
4a:fd:6a:06:54:84:44:c7:60:34:fb:c8:e7:27:67:
82:13:93:77:24:c9:f9:81:0d:34:ce:c7:8d:78:c3:
66:5a:42:9d:fe:02:1d:22:fc:60:5b:15:f3:41:53:
98:a0:06:2a:43:ad:bb:fe:5f:49:47:b9:6b:f7:9c:
7e:0b:7e:b0:38:58:d7:60:0d:99:44:72:96:1e:21:
63:b8:1a:7e:5d:22:26:a7:3f:4d:af:dd:b0:76:96:
fb:d5:ee:ac:f1:96:2d:0f:f4:3d:72:cc:2c:ce:6a:
da:c8:94:9b:e3:78:9a:1e:d9:e0:44:d2:21:45:6a:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5E:38:D3:6F:33:2E:4D:4E:D4:42:32:39:FF:D4:49:46:87:69:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/fda8929c-8853-3deb-9937-6ac2a4d97c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea/7d172af9-258d-47d2-b4e6-7e0c02152fea.crl
X509v3 Authority Key Identifier:
keyid:71:04:7E:96:58:55:DC:3D:DF:E9:07:F5:EC:3B:A8:BB:67:FC:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7d172af9-258d-47d2-b4e6-7e0c02152fea.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:cb:fc:83:e6:cc:18:e2:1d:02:95:56:4f:d5:3e:8f:bb:02:
e3:4a:5b:e8:6c:fb:71:df:8e:84:c6:a0:9d:52:47:b0:06:6e:
af:0c:88:43:ce:e9:33:93:50:5f:0e:5b:4c:34:aa:e9:1d:26:
2c:d2:b8:16:91:70:59:5e:b9:f2:1f:52:ca:cd:51:ff:b4:18:
59:83:7c:25:0a:27:54:e4:f1:4b:91:dd:3b:8a:9f:73:18:36:
75:56:3c:ef:cc:99:77:aa:cd:14:cd:38:41:cc:00:26:20:31:
b6:ef:0e:ae:6e:be:ba:ac:74:c4:cf:75:8c:ea:10:a0:39:11:
53:79:6b:ec:13:9a:d4:23:7b:72:05:6d:ab:4b:e9:68:1d:4a:
0f:e3:b5:70:20:05:53:28:78:41:f0:6d:97:e6:e6:8b:90:63:
73:cd:df:d8:bb:98:08:9f:5d:ed:51:a9:ff:b3:c4:26:c4:de:
7a:f6:ca:61:8a:4b:33:ba:da:f6:dd:da:4f:73:99:ae:8d:06:
96:05:23:bc:da:b1:b8:fd:2e:ea:a1:a1:a5:c1:e7:e0:e1:7c:
ab:fb:30:f6:4e:4d:64:4e:8b:9d:ab:d1:94:5f:d1:ff:d8:74:
c7:d2:68:57:79:f1:a6:57:71:f2:b3:26:f8:f7:6d:79:dd:e9:
01:76:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:57 2025 by rpki-client