Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa
File: 4cecb50a-dda5-3206-892f-841e1f8d6994.roa (raw, json)
Hash identifier: gwQ07DnrjNS7mBiR9EULIyY0ddGl57fsxeMAzCS4XbI=
Subject key identifier: 5F:5F:7D:6E:7A:E9:56:17:1F:BC:7B:0C:94:7E:85:8C:94:FE:64:33
Certificate issuer: /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial: 010D0C9F432858488DAB4F65FEE7173E32213600
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 23347
IP address blocks: 23.156.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4f:65:fe:e7:17:3e:32:21:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=34e7916d-7c61-41c1-8718-05d76779f7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:0a:e2:a2:51:92:e9:8f:f9:96:cc:d8:56:
a4:01:ac:f5:4a:ff:52:bc:a3:44:b5:5e:47:d3:8e:
cf:51:3f:22:7b:c1:5b:22:30:74:aa:b0:4a:97:37:
ec:8a:9e:36:bb:2e:57:b9:cd:11:4d:5c:b4:3d:cc:
15:cd:ab:40:48:46:17:f2:90:93:58:bb:ff:f2:7f:
ad:6c:48:5d:28:bf:a6:63:36:09:2c:d7:92:ef:c2:
b7:9d:7c:c8:58:90:11:83:db:9c:7a:c9:63:51:65:
e6:8b:66:e5:7e:08:3e:db:6d:dc:7c:47:72:cd:de:
e0:85:8b:8f:1e:ef:f8:c6:07:2d:12:20:32:f3:61:
a4:ea:0a:45:fa:49:dc:b9:0e:69:88:df:43:87:49:
72:d9:ca:c8:49:83:80:cf:20:40:78:18:a1:a3:c6:
39:77:72:d9:0d:67:53:42:e0:29:08:70:28:1b:e8:
9c:22:90:c0:8b:29:f2:17:93:23:1b:6d:38:6c:33:
1a:c4:c2:3a:9d:b3:53:3a:7a:a4:94:d6:94:5a:6f:
31:68:a6:4a:91:d0:89:84:9f:82:e0:41:d2:c0:da:
7a:88:a0:d1:3d:f2:26:15:25:d7:93:ed:90:4e:0e:
d2:1d:f9:09:aa:0c:ad:52:7f:d2:4c:6d:6c:d8:55:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5F:7D:6E:7A:E9:56:17:1F:BC:7B:0C:94:7E:85:8C:94:FE:64:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/4cecb50a-dda5-3206-892f-841e1f8d6994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
X509v3 Authority Key Identifier:
keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:6e:5b:a6:b3:f8:8c:ac:d3:10:c3:68:41:5c:0f:fa:0d:90:
c2:6e:e8:fe:f5:75:fc:7f:d0:1c:e1:5c:3f:8f:fb:ac:9e:5c:
de:07:bd:2f:12:08:dd:ea:27:83:6d:c0:35:29:6a:18:a7:0f:
8c:e7:70:32:fc:63:e3:e0:ee:58:90:32:11:b0:40:79:20:b3:
72:cf:4f:c1:a0:87:21:b2:78:4e:7e:60:a8:d2:05:ce:f7:09:
32:ef:45:2b:02:d0:a5:d3:cd:c8:2d:9d:39:c6:04:48:23:bd:
5c:eb:96:86:71:88:72:61:b2:ee:6d:03:fb:92:d9:1c:4d:c3:
1f:10:2a:54:64:09:d2:cf:ac:34:55:9f:e2:d0:d4:13:49:4b:
3b:ea:7b:43:4e:b7:2d:24:f0:d9:e7:a4:c6:81:a9:eb:8a:48:
30:f4:73:52:bd:61:fb:c5:e3:71:33:4c:9e:41:ee:22:96:3a:
6e:14:ec:aa:7c:37:6d:3b:44:f5:25:d8:00:ac:8b:10:cf:52:
ac:0e:ac:a6:7c:8d:85:40:4c:87:63:d4:69:8b:35:5c:8e:b3:
f5:44:88:e1:96:7e:9f:49:93:31:85:39:0f:77:be:41:87:4a:
29:1e:20:a2:e9:1d:e7:ff:2b:b8:c2:59:d4:ed:3f:d6:81:b9:
c5:13:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:07:46 2025 by rpki-client