Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/a1d1cd0e-659c-3a00-b5b0-b799bfe60abb.roa
File: a1d1cd0e-659c-3a00-b5b0-b799bfe60abb.roa (raw, json)
Hash identifier: 9Pz2ibr5BmBkQbsJn26LYRyd3Y7NWyqif/3T8cTnNC4=
Subject key identifier: 22:08:63:72:FA:01:B2:32:6C:D2:5B:A5:58:6B:97:A4:EF:7B:AF:66
Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial: 010D0C9F43285848184EDA8D9DED6D5B10DE54C0
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/a1d1cd0e-659c-3a00-b5b0-b799bfe60abb.roa
Signing time: Wed 04 Dec 2024 13:05:10 +0000
ROA not before: Wed 04 Dec 2024 13:05:10 +0000
ROA not after: Tue 04 Mar 2025 13:05:10 +0000
asID: 8003
IP address blocks: 23.128.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:4e:da:8d:9d:ed:6d:5b:10:de:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Validity
Not Before: Dec 4 13:05:10 2024 GMT
Not After : Mar 4 13:05:10 2025 GMT
Subject: CN=f10b5ad2-7513-434f-b50a-f77ff250e0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:70:e6:96:b0:94:30:dd:af:b4:59:a8:7a:
b0:69:16:0f:a5:6a:46:b9:34:e3:87:2a:98:3c:65:
9f:c2:e2:ef:6e:05:fc:fa:59:83:1a:ab:e0:d3:41:
85:8b:30:10:ac:8a:62:aa:c5:5b:be:85:c5:58:23:
1c:96:d7:6b:80:89:7e:6f:f8:30:fd:c0:95:70:f2:
2f:87:f5:70:e9:02:c4:17:d3:8f:a1:0a:f4:c2:23:
b9:9a:3f:ff:22:e4:c6:b2:0d:9d:7c:27:58:be:0d:
c2:94:76:7d:c7:f3:b5:c8:7a:34:57:30:d3:20:24:
b0:b9:cb:f7:30:f8:5a:cc:3e:1a:a5:24:41:e1:14:
12:8b:4e:8f:79:0b:3e:27:64:0e:70:91:d6:77:4f:
a8:7b:28:8a:81:94:29:bf:f2:28:84:dc:3e:60:3a:
a7:04:75:3a:ea:68:0a:67:3e:c6:c7:c9:42:29:85:
d4:23:ea:8c:bf:40:76:41:fa:0a:cc:e8:52:20:6a:
f6:42:e7:93:c3:68:54:f4:16:0c:cc:b3:68:44:84:
c0:c3:72:db:a4:0b:05:2d:52:78:37:9d:a4:66:26:
98:3e:a5:bf:bf:95:f7:f3:8c:0f:8c:96:d0:ad:a7:
7d:58:ec:a8:ab:27:16:fe:ff:79:54:62:11:56:cd:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:08:63:72:FA:01:B2:32:6C:D2:5B:A5:58:6B:97:A4:EF:7B:AF:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/a1d1cd0e-659c-3a00-b5b0-b799bfe60abb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
X509v3 Authority Key Identifier:
keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:a4:8d:0e:6b:89:53:fe:4c:72:b6:b6:a4:c0:73:d2:d5:96:
0e:8e:a5:3c:1b:57:fb:e4:4d:bc:b7:fb:56:19:21:29:64:10:
9e:af:ec:85:9e:82:dd:3b:9b:23:a4:7e:65:4f:fc:83:44:2b:
55:47:95:ac:d0:c4:de:8c:49:b9:1c:46:93:19:98:94:78:0d:
03:02:a6:67:a0:37:08:72:2b:20:66:ce:c5:8a:ef:04:ab:10:
88:f8:cf:cf:87:c8:49:9a:2e:ee:13:a6:3c:93:b6:6e:8d:be:
8e:e0:cb:52:c1:4d:1f:15:ac:74:d4:6a:0d:73:96:dd:33:41:
ed:16:a7:fc:e4:33:5c:f9:8e:b8:3c:b2:83:7d:c7:d1:7f:28:
0f:df:c6:9f:01:72:3d:c6:59:77:62:98:88:79:fa:fc:86:1f:
7c:18:5b:c4:2a:a8:5c:31:77:14:04:d0:c0:bd:4b:66:3e:8f:
6a:8b:1d:40:f7:ba:69:af:38:42:e0:e8:e4:3b:05:72:2f:43:
8a:e8:eb:b1:e3:b9:6d:e6:0e:e0:e7:04:bb:1d:5f:64:52:49:
a7:bd:18:5e:91:ea:e4:11:e8:78:6b:b2:95:67:ce:ab:ac:6e:
ba:90:c7:6e:91:84:c7:2b:94:48:2c:b9:16:ea:cb:17:d0:96:
b1:03:7b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:53:47 2025 by rpki-client