Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/a1a30bd2-21d8-3084-b201-213a380b5aee.roa
File: a1a30bd2-21d8-3084-b201-213a380b5aee.roa (raw, json)
Hash identifier: dWz+/agsdkYpwjy+rBMxZyZYvUaYpK38pNhqB8FLGuM=
Subject key identifier: 0D:AA:32:63:FD:0B:3C:21:F6:7A:66:D2:0A:69:3E:F6:04:63:5D:15
Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial: 010D0C9F432858485B6C4B173A85D469F4ED3100
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/a1a30bd2-21d8-3084-b201-213a380b5aee.roa
Signing time: Sat 28 Dec 2024 14:03:39 +0000
ROA not before: Sat 28 Dec 2024 14:03:39 +0000
ROA not after: Fri 28 Mar 2025 13:03:39 +0000
asID: 14618
IP address blocks: 23.128.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6c:4b:17:3a:85:d4:69:f4:ed:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Validity
Not Before: Dec 28 14:03:39 2024 GMT
Not After : Mar 28 13:03:39 2025 GMT
Subject: CN=b155ab08-49f0-4431-9254-daeab1f0b91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:28:1a:f1:a8:04:a1:5d:53:48:ac:f7:7b:
bb:cb:84:aa:d6:10:54:c4:0c:80:fe:2e:18:a8:7e:
26:5e:23:c9:07:dd:4e:c8:82:ad:39:c5:bb:d6:f9:
df:33:4a:2a:f0:84:21:36:c8:fa:cb:84:1c:f1:9c:
b7:35:ca:a2:e4:03:83:ef:2d:b6:2b:fc:75:56:e8:
aa:bd:33:c5:c3:7c:52:58:7a:b8:be:7d:23:fa:7f:
b7:be:38:b2:a8:16:7d:82:6f:6b:9b:c5:a1:3e:ee:
af:f9:69:42:dc:71:aa:cf:1f:82:24:37:b0:47:13:
03:32:51:17:de:3c:65:df:31:eb:30:9b:ed:94:36:
b2:15:71:fa:8f:e9:2c:7d:aa:75:03:80:1b:01:58:
02:3f:15:03:ad:f3:e2:41:bc:3d:a5:16:dc:d8:03:
82:a7:0d:ac:0e:b4:83:93:bd:70:11:5c:d5:5c:63:
47:7b:bb:1e:09:3b:8c:23:4a:1d:10:c2:a2:44:4f:
7e:b4:10:1b:d2:ea:0f:17:d5:d9:3d:fa:43:9a:91:
1d:e0:a1:a7:b2:c0:f6:40:c5:8a:10:69:93:19:5a:
2f:79:f3:4f:ed:07:ed:b5:51:64:5b:e1:59:89:39:
c3:5d:0b:90:e9:bd:04:da:db:f9:5e:a2:31:1f:4c:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AA:32:63:FD:0B:3C:21:F6:7A:66:D2:0A:69:3E:F6:04:63:5D:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/a1a30bd2-21d8-3084-b201-213a380b5aee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
X509v3 Authority Key Identifier:
keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:16:72:af:92:06:53:b5:c2:da:38:00:d9:2a:7f:0e:21:42:
eb:0a:82:6a:7c:38:24:6c:28:63:33:2f:bf:34:0c:e2:53:0b:
52:ff:eb:e5:e2:2a:cf:a9:06:fa:3e:1c:a8:e5:0b:a5:31:60:
2d:e8:60:b4:48:e5:7e:cb:6c:c2:9f:f9:38:62:47:7f:75:b9:
ac:eb:80:dd:29:55:2d:e7:f3:3c:57:05:f4:12:a6:ad:f5:e2:
a3:44:68:2c:5d:9e:62:e6:08:15:36:53:f8:5d:72:94:1c:c5:
f9:5b:bb:34:a2:d3:e5:5e:5a:6f:2e:52:1a:17:60:6e:83:e5:
fe:9f:b3:5d:92:a9:d6:51:ba:2a:a8:7e:ca:1b:44:a8:d3:d0:
a1:68:ea:30:3f:55:4a:72:88:c9:3a:76:56:f3:85:31:d2:09:
5a:d4:8e:a5:5e:08:01:ac:7e:6f:3f:e3:f4:d5:8c:50:bf:23:
89:e5:81:2b:c1:1b:28:12:11:2c:53:10:18:87:cd:5d:0c:3f:
62:b7:c5:d2:00:c6:4d:53:72:a4:9f:a1:b5:da:3b:21:d0:d9:
4f:86:5c:be:0a:64:45:7d:80:1f:31:47:b6:d7:3f:e5:5c:c5:
b2:5e:7d:f6:c9:9b:c3:ca:aa:58:f4:be:15:95:54:fe:5c:6e:
e8:79:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:14 2025 by rpki-client