Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa
File: 44fcabf0-f89c-3bb1-adb4-595ce7300823.roa (raw, json)
Hash identifier: 0Qku4hSW93aL9a6maDaGcpnuBOwaAuxbbvquOM/pz5A=
Subject key identifier: DB:B7:FE:0D:33:B4:CA:07:AD:1E:A4:77:AB:00:5F:34:47:22:E3:98
Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial: 010D0C9F432858485B6AF03DCA3E3CE08C297100
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 401370
IP address blocks: 23.187.152.0/24 maxlen: 24
2602:f82d::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f0:3d:ca:3e:3c:e0:8c:29:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=996016bb-5d06-4144-8f1f-b76a9a336e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:00:19:c7:ac:27:3a:32:06:be:ab:12:3a:
c2:fd:34:b7:ef:b5:e9:37:66:02:82:2e:31:bb:de:
c0:a9:f6:8e:3e:f8:e5:41:ea:6c:3d:ce:17:fa:11:
6d:2a:d9:c6:d7:7b:51:f7:ff:63:62:3f:b3:df:0e:
05:5a:99:c2:0f:d3:00:6b:bf:7c:2a:66:ba:2d:5e:
dc:f6:09:9f:3d:2e:66:58:bd:38:99:04:1d:83:b6:
c3:51:b0:09:bd:f6:c7:26:19:fb:d3:f3:5e:c0:48:
b1:cb:ee:8b:14:f8:26:da:34:aa:11:c7:e4:dc:09:
75:97:b3:9d:9a:69:b8:55:82:f0:e5:15:0b:24:fe:
a2:a3:56:8a:79:3a:23:7d:19:4c:75:03:83:3c:ab:
b6:ce:e1:92:94:1a:82:fe:bd:85:33:0a:4e:1c:cb:
3c:c4:58:19:f3:6c:79:eb:8c:81:f1:80:98:1e:84:
e5:e9:30:59:89:4e:9c:e4:bd:ab:ca:12:bf:13:96:
14:bb:74:0b:10:38:50:8e:17:e4:72:2e:83:26:2f:
84:56:1b:fe:f5:42:2e:14:a6:25:79:d5:9e:82:f6:
6f:fc:33:86:54:4b:51:f7:71:73:09:2c:7e:8c:97:
c8:d1:d8:c8:73:4e:4f:57:15:19:df:fd:ac:5a:a1:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B7:FE:0D:33:B4:CA:07:AD:1E:A4:77:AB:00:5F:34:47:22:E3:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/44fcabf0-f89c-3bb1-adb4-595ce7300823.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl
X509v3 Authority Key Identifier:
keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.152.0/24
IPv6:
2602:f82d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:a8:0e:59:ec:29:24:07:87:e8:19:c6:8e:41:61:73:1d:c9:
a1:4a:06:e9:ff:46:9a:1e:dc:c7:ca:00:1e:d3:84:90:b9:9f:
c9:35:ec:32:63:fb:94:7f:d6:c6:55:a4:d5:13:b5:09:47:3f:
42:91:5d:cd:f1:78:92:62:6a:41:15:12:f6:fc:fb:c4:2f:f2:
00:cd:3a:b5:a4:36:d5:0b:fc:b2:12:5d:26:ab:42:9c:05:0a:
42:10:26:53:12:a4:da:61:3f:c4:e6:13:96:d1:a7:cc:7d:06:
13:46:ff:bc:70:f4:59:62:2c:97:ba:1e:42:f5:6e:28:5a:24:
05:82:50:b8:bc:9b:f8:c8:27:5b:5e:d1:09:9e:93:8a:2f:ed:
69:a0:08:05:ed:8f:a7:60:f9:d6:c4:c8:0a:32:cc:38:47:48:
76:99:0a:33:6e:1c:a4:d2:72:5e:62:0d:47:40:7f:a4:ee:d2:
f7:03:3d:85:89:ec:fb:40:93:1f:27:50:a8:cb:7e:ae:07:75:
60:a5:57:42:1a:bd:62:92:6d:b2:80:7e:67:7a:73:3f:bd:59:
5c:97:4d:0f:ac:c9:54:d4:c1:39:95:be:37:4a:7d:ba:1f:c4:
72:58:bf:57:a1:2f:44:8e:e5:e6:84:f7:73:f9:80:b2:d9:2c:
74:09:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:53 2025 by rpki-client