Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa
File: cf670401-9d4b-3637-856f-5c947821a74c.roa (raw, json)
Hash identifier: C6RXxJwcrJ340XUSWNPAxB5ODNLe5xzrLy+HsQ0AvMM=
Subject key identifier: 75:44:C1:CD:A9:7F:EA:5D:A9:11:CB:00:27:EE:F3:4E:05:82:51:7D
Certificate issuer: /CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299
Certificate serial: 010D0C9F43285848116FBA7190F1540C0EBFF9C0
Authority key identifier: F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 15333
IP address blocks: 23.189.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:ba:71:90:f1:54:0c:0e:bf:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=7a57c4ef-d756-4a69-9920-622977d15c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:33:59:fe:6c:a9:59:d7:1b:78:cc:4c:b7:37:
71:a6:03:1d:78:e2:ce:ed:35:9b:6e:b0:7a:81:ad:
3c:6e:59:9d:8d:ba:0c:f2:6b:7c:fd:80:69:8e:77:
ed:6e:86:81:bd:3a:63:68:f8:41:0c:54:1b:8f:87:
0a:86:8b:ad:11:74:ab:39:8b:86:ce:60:07:ef:4d:
fc:b5:d8:2c:b4:16:8a:a4:34:7b:d7:fd:03:6d:00:
1e:fb:17:7c:ef:1e:db:ce:7d:0b:13:96:f3:64:ce:
e8:b0:70:da:3b:4b:93:53:73:48:b5:fd:24:03:4e:
28:ee:81:f7:81:c4:fd:d6:31:75:a4:e6:55:83:b3:
21:ea:54:72:3f:01:3a:91:fd:31:c8:48:34:19:63:
be:fa:78:4c:46:c2:8c:d5:8d:2e:83:3e:bd:1c:bc:
c4:e0:76:b9:2a:a5:1a:ec:69:42:6b:4e:8a:35:18:
d0:b7:ec:eb:6d:f8:e4:c8:43:a5:7f:80:96:4c:b8:
0d:d7:d9:78:a6:53:8b:90:d0:1d:99:72:94:d3:73:
8c:6b:a3:5c:8d:7c:92:07:8e:26:19:2c:e8:4d:b2:
60:ec:14:c9:1f:c9:2e:2a:05:49:c9:d7:1b:c0:c6:
b5:97:67:a8:fc:00:3d:f3:2b:86:6b:21:d7:59:c5:
aa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:44:C1:CD:A9:7F:EA:5D:A9:11:CB:00:27:EE:F3:4E:05:82:51:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/cf670401-9d4b-3637-856f-5c947821a74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.crl
X509v3 Authority Key Identifier:
keyid:F1:AE:7B:0F:B9:3F:2F:09:E4:D5:85:E9:7E:46:88:44:3A:85:65:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3afcb6-08fb-4ba2-9d96-a4e0c3c1e299.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:1e:a0:ad:af:89:06:94:73:88:09:03:45:cc:73:85:d8:77:
c0:c1:21:36:2c:37:de:b3:86:cb:0e:8e:ee:af:87:f1:58:24:
67:9f:d3:c7:53:9f:ad:d4:5d:35:bb:18:1c:a8:af:16:27:97:
65:3f:68:3c:20:97:fb:34:85:68:30:eb:aa:1a:a4:d2:28:7a:
35:97:4c:8d:e4:ea:e1:1d:fe:a6:b3:8f:59:d3:a9:48:b8:f5:
ef:92:bd:f9:2a:80:fc:6b:00:a6:cd:5f:c7:af:c9:26:26:6f:
c8:80:f0:76:c5:f2:79:cd:fd:9e:c0:38:b2:6a:f1:97:ca:35:
f5:f3:6f:bc:9a:6b:ea:22:2a:0d:47:6d:86:b6:ac:2c:c2:55:
1a:0c:5f:0e:43:c1:9a:14:6e:67:b1:fe:ad:3d:f9:11:19:c2:
e3:c6:73:fb:6d:2c:ba:d5:1f:15:1c:c7:05:db:c5:98:f1:3e:
31:06:0f:0a:85:49:e1:89:3f:15:e0:8b:8f:64:79:c0:f0:c8:
6e:40:6d:bb:b0:6e:03:49:fb:a1:fc:03:c2:4d:31:2e:1e:d1:
21:0b:c8:29:9f:fe:5d:50:8f:14:65:40:58:4d:94:6c:0c:7f:
70:67:7f:82:7c:49:df:35:0b:0f:41:9a:54:cc:86:0e:01:fb:
0c:e4:27:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:20 2025 by rpki-client