Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa
File: c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa (raw, json)
Hash identifier: 0NW4xWJnlaGe/wSZeyjKmhtDcJTqkzEjUiSNdg/bGHA=
Subject key identifier: E7:A8:AD:AA:E5:F7:C5:E3:FB:47:36:82:13:1E:ED:87:C1:2D:93:25
Certificate issuer: /CN=4dbb61da-2e8b-4329-96f7-b408b17cd6d2
Certificate serial: 010D0C9F43285847E78F690E3E62D6FEFE855000
Authority key identifier: 2C:1E:0B:FA:9C:8A:2D:A8:61:80:34:5F:5C:29:54:05:11:3D:64:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa
Signing time: Sun 17 Nov 2024 02:00:28 +0000
ROA not before: Sun 17 Nov 2024 02:00:28 +0000
ROA not after: Sat 15 Feb 2025 02:00:28 +0000
asID: 27458
IP address blocks: 23.169.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e7:8f:69:0e:3e:62:d6:fe:fe:85:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbb61da-2e8b-4329-96f7-b408b17cd6d2
Validity
Not Before: Nov 17 02:00:28 2024 GMT
Not After : Feb 15 02:00:28 2025 GMT
Subject: CN=ba812c0f-5be0-4ce5-8a15-4ac3c21c078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:29:1f:14:63:65:9d:cf:6b:1c:50:39:b8:
01:e0:9b:51:29:3c:2b:4b:ef:d9:f0:d7:e7:ff:f2:
7d:f4:3b:95:ad:70:b7:6b:94:db:ed:8c:ce:d1:fd:
13:aa:e5:3f:8b:8e:33:bd:97:0d:80:10:76:7a:c1:
24:8e:2e:e6:4f:00:9e:fd:ce:75:a1:77:63:e2:39:
89:94:81:d6:66:d8:75:53:18:37:ca:7c:ff:1b:6b:
6f:9c:79:c9:63:7b:0e:1e:96:b9:2c:74:01:46:15:
41:d5:e9:81:82:50:e1:01:a0:72:b8:82:6d:b5:cd:
ba:c3:f9:34:e6:36:cc:4e:93:96:23:c1:17:1d:81:
29:b7:5d:d3:dd:a0:0b:50:dd:80:50:95:55:99:64:
2f:a7:7d:10:4e:75:d6:ac:0c:25:81:e3:d7:c1:ea:
df:db:fd:7b:49:6c:de:ae:9e:e5:42:ff:60:a8:56:
15:6d:3a:b3:5d:c5:ac:71:99:3c:af:ba:97:f8:c7:
73:d8:90:7c:f3:c8:1f:31:09:62:6d:59:2b:d0:b4:
66:72:5a:54:99:6d:5b:ad:d3:03:7a:7a:15:06:41:
91:c2:f0:40:fb:2d:fa:04:47:07:92:4d:88:0d:6c:
7c:d8:08:7d:08:9d:a9:13:0f:2e:ab:64:b8:9b:8e:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A8:AD:AA:E5:F7:C5:E3:FB:47:36:82:13:1E:ED:87:C1:2D:93:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.crl
X509v3 Authority Key Identifier:
keyid:2C:1E:0B:FA:9C:8A:2D:A8:61:80:34:5F:5C:29:54:05:11:3D:64:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:ac:d6:5d:7c:be:f6:6f:7f:17:c8:bb:77:52:01:fc:62:5e:
3d:75:1e:95:a0:67:31:f9:74:10:2d:35:84:e6:89:8a:0e:ef:
b2:25:58:cd:87:4e:70:96:5d:c7:cb:0c:e1:c1:a0:f3:31:5d:
90:9d:6e:44:0f:16:fd:a5:85:ac:94:56:9e:96:da:b8:1e:74:
75:4b:6a:54:a7:63:1b:33:48:d7:2f:51:9b:15:82:e6:bb:f7:
93:0f:b0:5b:cb:06:79:80:b6:81:9e:b0:4c:91:d0:c6:1d:86:
7b:93:54:d0:56:2b:c4:a9:9f:b8:70:b4:b9:eb:db:7e:bc:d0:
14:47:ab:e4:8e:44:b3:14:a3:eb:96:9e:df:b3:b2:da:d1:77:
72:df:fd:ba:5d:19:12:ae:fc:c9:0e:d1:26:2d:3f:52:6b:a6:
9c:79:d2:5c:46:c0:f5:7b:de:3b:04:ad:1b:ff:d8:a0:a9:b9:
6b:52:d2:cc:8a:8c:54:3d:74:73:2b:16:e4:a8:06:2f:78:a0:
b2:eb:98:3e:e7:9b:f1:43:ae:18:68:f8:92:d4:b0:61:6b:e7:
96:86:4a:34:56:ed:1d:33:63:a6:44:0e:c0:36:00:6f:b5:98:
cf:f4:93:3e:f0:bf:42:50:d6:61:36:41:dd:42:4b:a2:14:69:
84:3d:6c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:53:55 2025 by rpki-client