Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa
File: d73dd892-ee55-3262-86e9-4939ca3508af.roa (raw, json)
Hash identifier: 52uG1J6FdPxtb/5HY4UlLpjwVl7LWbnzCdORhfAQea0=
Subject key identifier: BD:75:0A:AB:08:3E:7C:E3:B1:C4:CB:FA:78:3B:72:14:DD:B9:36:7F
Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Certificate serial: 010D0C9F432858485A0577F87129C602B00DB6CE
Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa
Signing time: Sat 28 Dec 2024 02:00:38 +0000
ROA not before: Sat 28 Dec 2024 02:00:38 +0000
ROA not after: Fri 28 Mar 2025 01:00:38 +0000
asID: 401368
IP address blocks: 23.187.152.0/24 maxlen: 24
2602:f82d::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5a:05:77:f8:71:29:c6:02:b0:0d:b6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
Validity
Not Before: Dec 28 02:00:38 2024 GMT
Not After : Mar 28 01:00:38 2025 GMT
Subject: CN=6085e089-959f-4077-bc64-f121a06e76ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:15:3a:2a:9f:49:ad:ac:5d:e6:e4:b1:a6:
2a:9c:da:f1:80:d8:3f:2a:c6:ba:c1:48:c8:ae:f4:
ee:2c:88:d8:21:f6:ac:52:a0:c2:c5:52:a1:22:2c:
bd:4a:bb:47:2f:51:0e:54:a7:28:50:43:16:fa:e5:
0d:a4:72:9f:a0:87:c5:2d:70:40:47:a6:dd:ba:5c:
fd:d3:c8:01:43:67:b0:26:5a:48:13:39:55:c0:eb:
af:62:02:50:3c:15:b3:70:66:30:81:d8:fc:e5:a0:
e4:a8:64:6f:b9:94:8d:14:d1:e2:e7:93:29:6e:57:
3d:c7:79:6b:00:59:31:86:0b:e0:a7:53:2a:c8:b9:
64:f3:6d:bd:ef:7e:6e:2d:41:af:71:8a:93:89:2b:
a8:ad:bd:b1:d7:bd:fc:26:1b:fc:19:d9:c2:c2:69:
7d:d3:e5:5d:ee:22:2f:9a:82:5c:08:df:62:ef:15:
91:0b:96:58:5b:60:6a:18:3b:53:4e:f0:34:8b:54:
4d:2a:19:0c:28:78:b8:e2:46:6c:c4:ab:30:71:af:
02:5f:8c:50:9b:e0:b1:49:38:64:4c:47:64:68:04:
5e:a4:49:4c:69:76:11:b7:d0:e6:c3:13:33:54:ed:
db:b0:af:55:3a:8f:29:b8:54:cb:ac:72:68:c3:22:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:75:0A:AB:08:3E:7C:E3:B1:C4:CB:FA:78:3B:72:14:DD:B9:36:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/d73dd892-ee55-3262-86e9-4939ca3508af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl
X509v3 Authority Key Identifier:
keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.152.0/24
IPv6:
2602:f82d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:cf:78:b6:cb:89:d4:dc:0f:09:d9:25:3d:26:12:f6:00:b1:
61:be:e9:b5:4f:4d:44:d0:81:9a:5b:fa:b3:f1:2d:26:48:86:
d8:38:92:52:9d:1f:0a:ee:d1:9b:a1:dc:8a:0e:37:3e:c9:9a:
0c:41:a1:10:6a:fd:d9:9f:18:77:3b:2c:9d:a4:35:50:0e:5d:
d8:26:74:28:ba:3a:e4:48:ad:97:51:be:b4:1f:57:df:59:ce:
0d:c6:be:41:c1:27:ad:4b:f0:88:c9:95:00:44:04:8d:31:45:
e0:4c:e1:9c:aa:2b:2a:5a:f9:be:bd:67:39:3e:5e:d1:0a:f6:
7b:8e:93:f9:8c:f1:6a:b8:9d:0e:df:e6:0c:ef:15:89:f7:19:
d0:e0:12:2b:90:b0:a4:85:81:2b:98:ef:0c:00:f4:bb:69:31:
20:aa:4e:e6:17:03:67:5b:f3:f7:4e:36:76:74:6b:a7:22:c7:
cb:71:b3:ea:cc:6f:87:a3:5f:fc:c9:f8:92:22:85:4f:7b:2f:
17:58:68:ce:ef:2a:f0:57:bf:6a:71:41:e9:6e:59:e2:36:58:
a2:d6:bd:c0:80:56:8d:d9:5f:a2:5c:11:6a:06:7b:da:00:ae:
60:ba:0c:db:43:f5:ff:0b:a6:50:85:42:58:67:af:f2:b8:72:
a4:9a:05:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:03:05 2025 by rpki-client