Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa
File: a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa (raw, json)
Hash identifier: a37OCvCfmoFXfN/TiHiWw2QCA0Dpeik2Og9xWTz2BuA=
Subject key identifier: 41:8F:EB:B8:A4:3A:04:17:0C:84:57:69:F9:FA:B5:F9:57:0C:46:C1
Certificate issuer: /CN=d2799306-5973-45b1-8828-5797abf141e5
Certificate serial: 010D0C9F43285848302537951EEDBE5C7EC348E0
Authority key identifier: D9:EA:50:F4:19:DA:80:D5:B1:CC:8F:F6:F5:66:C3:46:D6:6F:64:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 32281
IP address blocks: 23.159.224.0/24 maxlen: 24
2602:fe31::/36 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:37:95:1e:ed:be:5c:7e:c3:48:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2799306-5973-45b1-8828-5797abf141e5
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=1b3a53e0-2cfd-43e2-85f7-724974a38c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:07:3b:79:8e:b1:f9:90:21:8d:60:52:f2:
7d:c3:f6:cf:67:6f:99:93:2c:02:6d:d1:47:2f:5e:
2f:7f:1d:ff:7b:93:bd:ad:58:c6:7a:c3:c3:c6:c7:
db:ac:c9:d0:29:9e:86:09:fb:0c:db:b4:24:e5:b1:
30:7b:09:e2:9e:12:43:b3:a7:3d:e7:05:f0:df:5c:
4c:f3:2d:f6:c2:83:9f:dd:85:f5:c4:23:83:8f:00:
e1:cc:a0:11:8a:71:15:ef:5f:91:dc:58:68:f7:db:
af:32:25:8b:0d:d6:77:41:00:c9:2b:b2:b8:e8:fa:
43:6c:64:f0:9a:4e:11:11:ee:22:8d:57:23:3d:bb:
bf:4c:2a:6b:0d:c4:91:d0:c8:3f:d1:e4:12:86:fa:
79:9f:8f:0a:97:0c:c6:05:20:ce:02:5f:07:64:e7:
42:f5:ba:4d:6a:f1:8e:30:e6:6f:27:3d:e5:9e:2c:
51:83:aa:6e:11:42:0c:d4:04:bf:8c:c1:b8:26:70:
7a:d8:2a:9a:71:c9:66:45:ab:45:21:a6:6a:ae:2c:
04:49:5f:d9:83:56:81:33:3c:da:99:2d:16:01:b3:
29:94:57:29:3b:6c:d7:86:7a:42:6d:8b:21:44:46:
7c:61:99:6c:2c:4a:a4:82:1e:d5:fe:77:a4:02:40:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8F:EB:B8:A4:3A:04:17:0C:84:57:69:F9:FA:B5:F9:57:0C:46:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/d2799306-5973-45b1-8828-5797abf141e5.crl
X509v3 Authority Key Identifier:
keyid:D9:EA:50:F4:19:DA:80:D5:B1:CC:8F:F6:F5:66:C3:46:D6:6F:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.224.0/24
IPv6:
2602:fe31::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:20:13:32:6f:a5:cd:55:a7:19:f1:76:c1:ac:6e:55:a8:bf:
a3:3c:59:1a:1f:b9:23:c7:7c:39:58:b7:03:30:ba:fc:24:06:
e5:bd:38:9e:dc:d8:65:95:f5:19:f6:25:64:76:40:61:b4:e3:
c2:dd:92:f3:ad:cf:c4:87:67:9e:7e:4e:90:35:4b:ca:aa:1e:
54:94:8d:e7:e6:2a:1f:2c:ff:f3:95:99:78:bb:1c:2b:50:72:
28:bc:39:38:77:71:24:3f:1f:a6:fc:11:a0:92:d0:65:a8:fc:
65:93:73:82:ba:58:4c:08:b7:39:60:dc:80:3c:4a:70:ca:27:
b1:6a:a8:95:02:12:77:ee:ea:9e:31:35:78:48:26:0c:23:28:
33:61:86:14:b3:cb:28:95:20:88:57:0a:06:43:0a:d2:76:6a:
f0:dd:cf:d5:ca:2d:f6:77:35:30:36:8c:fc:00:c5:02:1f:21:
bf:40:65:a6:76:a0:2d:fa:e7:4f:5e:f7:89:7d:9d:5a:19:76:
0d:1c:b6:cc:72:f6:bb:66:d9:d5:fb:45:c7:74:17:0c:73:bd:
29:b8:b3:4b:9c:df:f4:b8:0e:f6:60:e7:73:13:86:09:06:16:
c4:aa:ca:0b:13:78:7d:8e:13:9c:3d:0b:d9:f3:e9:1e:a1:a5:
fb:77:85:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:52:34 2025 by rpki-client