Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa
File: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (raw, json)
Hash identifier: BWV1rjXwCPktzSPja0jWQ3uV6MxcrUMeeJfkaSGJBlw=
Subject key identifier: B7:51:7A:7A:EE:78:8F:38:4E:58:40:1E:4A:EA:84:03:6B:BD:E8:C6
Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial: 010D0C9F4328584827C52B487CA5705784B77300
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 396500
IP address blocks: 23.187.152.0/24 maxlen: 24
2602:f82d::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:2b:48:7c:a5:70:57:84:b7:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=a55c029d-1fbe-4f44-b1d1-e6a0e68bb161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:c3:e8:86:00:72:0d:86:58:e4:11:26:b7:
7a:23:fa:f0:cc:d7:39:cf:60:1c:eb:36:1a:1f:80:
c2:c4:21:54:55:41:36:28:80:0c:60:8c:bc:f3:3c:
c7:ec:1f:ed:d4:b5:70:d0:b5:00:87:da:a3:4d:8b:
5f:d8:08:7a:9d:b4:73:47:05:5c:60:9b:88:0b:13:
5b:8e:af:87:3d:70:ef:46:3a:21:ef:b9:a0:df:84:
9d:89:13:29:bb:0f:3c:cb:52:b0:ce:2f:00:25:8a:
3f:b4:23:e6:37:e2:f0:3d:d2:7a:49:5a:06:db:f5:
72:ec:65:0e:51:6b:93:4f:64:ec:2f:c3:f3:bc:44:
12:9a:13:0e:47:f2:1f:92:5a:b9:40:af:10:22:6f:
62:90:98:48:1b:0a:65:a8:62:22:0b:8c:a8:26:18:
da:51:10:05:8e:2c:7e:8e:bc:db:2d:da:0e:60:1e:
10:49:41:eb:2c:93:4b:91:7e:21:2a:eb:61:4b:7a:
0d:90:fd:83:98:c1:01:32:30:b7:7f:b3:00:1c:7d:
f0:e1:6a:7c:ce:c9:cf:3a:4c:0b:02:e0:ce:a7:37:
4f:60:32:9a:dc:76:7f:40:87:df:c0:22:a6:b7:72:
cc:3e:34:01:17:56:fe:05:1b:8a:b2:5c:a1:4e:fe:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:51:7A:7A:EE:78:8F:38:4E:58:40:1E:4A:EA:84:03:6B:BD:E8:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl
X509v3 Authority Key Identifier:
keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.152.0/24
IPv6:
2602:f82d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:11:81:b8:f3:eb:39:42:f6:16:10:8b:c6:60:de:86:40:f9:
58:12:b9:1e:5b:49:03:ff:ff:4c:22:3e:21:85:b6:5d:0b:c3:
3e:66:b0:e1:00:4f:d8:12:14:50:40:f5:be:01:8d:a8:d3:78:
27:85:68:e5:d1:d4:2e:a7:7f:57:e7:d8:f5:67:44:10:bd:c7:
6b:40:36:b1:e9:4c:40:0f:c7:e0:a0:8c:8f:a3:1e:96:d2:d0:
9c:e9:e3:24:ff:a7:73:7b:a3:15:08:fe:19:01:e4:ac:3d:58:
77:db:fe:90:d1:d0:c8:18:17:43:d0:7d:03:3e:16:89:6a:2a:
1d:47:43:80:78:6d:19:8d:33:e0:37:f9:7b:f0:a6:aa:db:90:
a5:71:42:29:c6:4c:04:fc:62:33:86:5a:e1:9a:77:a1:fe:ae:
27:43:54:dd:83:1e:a9:56:0d:26:24:59:b2:21:05:cc:c9:6c:
12:87:58:2a:1c:9f:d5:c9:2b:c8:5a:1e:b2:a6:2a:62:07:e5:
b9:0a:4d:bf:0b:82:16:37:db:28:f2:eb:42:3a:1b:66:fb:2c:
de:02:c2:80:b3:ac:9e:68:87:06:87:28:3d:c0:5c:fc:fd:3a:
11:75:d8:28:81:ab:25:d8:fb:74:8d:a4:34:06:cc:96:fe:ae:
d8:cc:31:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:59:16 2025 by rpki-client