Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa
File: 51f23690-2c9e-3571-8cfe-0e89c650c651.roa (raw, json)
Hash identifier: ReEpD0FFoA1Y+GJ/Oi7hDdk5p66A0TmbCxYwxo42P0c=
Subject key identifier: 6B:92:0F:E5:91:F3:32:DA:39:D9:AE:AE:5C:FF:17:87:7B:1D:37:EC
Certificate issuer: /CN=e7f205fa-32db-476e-9815-f418a58479c3
Certificate serial: 010D0C9F43285848037A4A213ED90B5A882E2CE0
Authority key identifier: 2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 398041
IP address blocks: 23.146.136.0/24 maxlen: 24
2607:20c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:4a:21:3e:d9:0b:5a:88:2e:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f205fa-32db-476e-9815-f418a58479c3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=921150cf-87cb-49d9-b99c-7465394a9ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c1:70:7a:b9:d2:bf:cb:f4:3e:cf:f9:47:3f:
65:e4:17:38:b6:8b:34:fa:8b:a7:be:94:a5:ae:92:
6d:cc:c2:5e:42:30:68:fb:73:56:ab:a7:8c:a5:c7:
b0:1a:61:ae:26:dd:e3:ca:5f:24:8e:5c:23:b5:f2:
ef:5b:34:91:d5:8b:7c:62:fc:85:9b:da:3e:92:c2:
be:12:dd:5c:42:53:1d:d2:3a:de:8b:df:25:c7:66:
a0:ea:1f:14:b4:88:3f:26:eb:71:94:61:15:1c:0a:
68:4d:8a:61:3a:ba:1e:49:22:c3:62:11:75:26:08:
9b:35:4f:0d:8e:00:94:fa:30:ed:45:ac:1f:34:9d:
52:4c:36:0b:4e:6a:dc:84:13:a7:ca:cc:9f:e4:19:
b3:cd:c8:02:2d:71:1c:db:9b:8b:0f:ec:1f:f7:55:
ba:bc:0f:7a:8c:04:47:09:e0:33:0b:3c:b9:94:6c:
55:11:7d:ca:4a:c7:5c:90:2c:55:dc:3e:c0:eb:ac:
fb:be:b4:9e:4b:86:ef:ec:c5:6b:9e:de:e6:6d:5c:
ee:7b:ba:95:0f:b7:73:85:70:f6:b3:21:4b:08:e3:
9e:42:22:f3:83:4d:e6:81:c3:ec:5f:f3:55:3d:d5:
4f:c3:30:e0:0c:90:74:39:b8:db:5c:fc:ae:d8:ca:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:92:0F:E5:91:F3:32:DA:39:D9:AE:AE:5C:FF:17:87:7B:1D:37:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl
X509v3 Authority Key Identifier:
keyid:2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.136.0/24
IPv6:
2607:20c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:db:05:20:40:d9:16:f5:54:2e:be:52:e7:71:27:a8:25:cb:
dd:db:87:ff:ad:0c:ea:94:92:98:56:f0:a8:7a:94:e3:f1:38:
9c:d7:b3:24:d1:91:bb:20:80:91:b2:cd:b0:b9:35:b1:55:81:
93:2c:d8:7a:e4:41:47:44:40:ce:69:2a:e4:7c:7c:e7:44:6d:
3f:bf:d4:17:ca:07:07:0c:a5:93:0b:00:10:d6:aa:e1:6a:ee:
a5:56:98:ae:b7:4e:2e:1a:d8:45:05:b6:82:de:53:e8:45:e5:
b9:90:9e:69:c8:33:c1:1a:4f:d1:3f:d6:c3:65:d6:60:d9:de:
3e:9d:70:e8:37:de:02:5f:65:a8:34:74:c5:e9:33:83:76:84:
c4:fc:01:83:68:05:cb:18:41:bb:91:91:2f:58:2c:99:b9:d2:
7a:f0:da:b2:b3:42:bd:64:7a:72:b5:28:2a:f8:9c:ee:25:d0:
d4:aa:e6:28:ad:bf:88:c3:c4:67:1e:67:13:52:fc:27:bc:6c:
ea:27:ea:ef:fe:fe:70:7c:31:86:8a:4f:cf:fe:da:8f:5b:7e:
2e:8c:bf:21:7e:f0:f8:79:fa:2b:72:36:e4:81:8f:60:7d:55:
43:c3:e2:ac:ee:07:a9:fc:93:07:df:fe:fc:44:86:21:4d:cb:
7a:1b:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:35:33 2025 by rpki-client