Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/67afccfc-971d-3664-bda2-59ef795c9140.roa
File: 67afccfc-971d-3664-bda2-59ef795c9140.roa (raw, json)
Hash identifier: Uq1oagJBfiu+D/l+05aHvNX/i+wXupRgbITuScMuQdY=
Subject key identifier: D3:40:B3:4B:59:D8:8F:E4:8F:6A:75:73:8D:2E:BC:60:DF:F3:02:C3
Certificate issuer: /CN=344c647c-2bcf-4b84-a292-fe7e96b86354
Certificate serial: 010D0C9F43285848292A9D0B5459468F6926EDF0
Authority key identifier: B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/67afccfc-971d-3664-bda2-59ef795c9140.roa
Signing time: Tue 10 Dec 2024 14:00:52 +0000
ROA not before: Tue 10 Dec 2024 14:00:52 +0000
ROA not after: Mon 10 Mar 2025 13:00:52 +0000
asID: 63150
IP address blocks: 23.187.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:2a:9d:0b:54:59:46:8f:69:26:ed:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c647c-2bcf-4b84-a292-fe7e96b86354
Validity
Not Before: Dec 10 14:00:52 2024 GMT
Not After : Mar 10 13:00:52 2025 GMT
Subject: CN=76db493b-f18e-43b3-8cc5-67d5de79f596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:cd:b7:71:41:eb:48:87:75:38:d1:64:1e:
5a:59:89:f5:d6:3c:82:4e:0c:84:a8:30:c9:71:b2:
f8:55:a4:b6:f9:1a:2f:5e:d2:b1:3d:d4:10:4a:12:
2f:02:5d:96:8a:f0:e2:3a:40:e1:6f:88:87:31:fa:
3f:b5:b9:e6:06:a4:89:95:ea:bf:d1:8f:40:6b:53:
06:01:a9:01:97:b3:76:e3:32:15:a8:68:10:e6:51:
6b:2e:6a:2f:3f:e0:97:b5:a1:23:97:d6:3e:7c:49:
51:72:94:e5:ad:5e:cb:19:89:56:18:38:7e:39:89:
7b:d4:3a:9f:4f:65:f3:c0:cf:84:9b:03:47:55:49:
ce:35:99:56:77:0a:8d:6a:11:dc:49:e8:60:15:30:
09:ee:40:c6:fb:27:ff:18:c4:d9:2d:54:41:05:2c:
35:dc:67:89:d9:f5:2f:b3:32:5e:d3:57:a5:ed:94:
bc:a4:80:7c:e9:f2:82:c5:e0:12:7d:95:ab:3d:18:
66:2e:ec:f1:84:ff:31:c5:81:64:2c:ce:77:78:34:
c2:dc:2c:1e:a4:ea:1c:8b:d7:10:dd:a8:85:19:10:
e8:87:16:0d:b5:db:ba:f6:9a:91:1e:0a:9d:0a:dd:
4f:50:45:03:d9:6f:df:aa:ea:d3:c2:c5:63:c9:75:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:B3:4B:59:D8:8F:E4:8F:6A:75:73:8D:2E:BC:60:DF:F3:02:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/67afccfc-971d-3664-bda2-59ef795c9140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354/344c647c-2bcf-4b84-a292-fe7e96b86354.crl
X509v3 Authority Key Identifier:
keyid:B6:11:09:F6:41:4B:57:A8:D7:2F:88:E1:72:4E:FE:DC:8A:AA:6B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/344c647c-2bcf-4b84-a292-fe7e96b86354.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:24:3c:91:d4:eb:38:1f:80:2d:46:c8:e9:aa:74:a8:3e:ff:
65:d6:ee:31:bc:e1:9d:0b:e2:2a:4b:b7:93:b6:f5:a5:12:56:
7a:32:89:ab:4d:a9:2b:bc:17:83:83:c9:2e:0b:37:75:3e:ae:
7e:af:46:fc:27:75:62:29:83:a1:14:bc:c2:76:6b:b2:a9:35:
d0:69:fc:22:d6:06:01:f0:f5:fc:91:ed:81:ca:5f:a7:a9:fb:
7b:52:1c:d4:1e:fd:ad:f1:71:16:6d:94:b1:30:d5:e7:ae:74:
3c:15:fd:c6:31:54:0f:03:b0:cc:a4:b0:88:0a:3c:41:72:fe:
0c:b8:40:77:e9:e9:ba:3f:fe:ab:55:a6:4a:18:21:9c:96:1b:
24:1e:55:b2:65:a6:fa:c2:bf:c7:af:7c:ff:90:50:a2:5a:0b:
d5:b0:dd:3f:b2:a3:2e:96:4f:90:0f:e7:e3:b1:dd:9e:91:69:
7e:80:37:f6:88:29:69:79:8f:5e:4d:c9:9e:cf:e8:a8:08:f6:
c1:3b:c4:2d:4d:e9:5b:85:ff:0c:e8:cd:b9:e9:b4:35:85:1f:
ea:5b:3e:16:00:0c:b5:73:78:fa:d1:73:fc:9f:a9:5f:0b:ab:
83:ad:cd:f1:70:7f:cf:8f:cf:77:c0:77:f1:06:4c:f0:58:2a:
3a:40:59:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:11 2025 by rpki-client