Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa
File: 802bfd1a-4325-38af-be6f-64950728b155.roa (raw, json)
Hash identifier: ADs//GVmR2iFfxEHv3Buw6UhBXVURzUJkGW+VBP0j+c=
Subject key identifier: DF:EB:00:7B:01:55:C1:D2:1B:46:6D:52:54:56:DF:63:3F:75:6F:25
Certificate issuer: /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Certificate serial: 010D0C9F4328584812D520FE8E641599D966EEC0
Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 13737
IP address blocks: 23.189.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:20:fe:8e:64:15:99:d9:66:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=9b944631-2262-4e23-b904-e5fdacb9a28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:52:9c:6d:ed:52:9e:82:41:7f:5c:79:b8:
f2:71:77:f2:b7:bb:72:a5:22:6b:27:03:4f:55:43:
d7:5a:5a:20:03:ab:ba:5f:07:98:2a:15:3c:ed:f7:
80:4e:0b:c2:1d:ff:e5:29:4e:b6:e1:35:c5:69:4e:
b5:1b:97:e0:3f:c7:c7:81:d7:5c:67:01:1b:5a:ac:
d7:7e:bc:2e:f6:a0:b1:3b:69:ad:0d:e1:b4:5a:4c:
dc:97:3a:8e:70:08:65:78:ac:6c:04:be:d3:43:5e:
6a:ef:54:b7:23:c5:7a:00:29:aa:09:68:e3:d6:15:
44:f6:02:af:a5:d4:0f:a8:8a:fb:6f:67:bd:86:82:
3e:a6:6d:19:d4:24:d9:f8:0b:bb:09:08:0f:d3:2e:
08:c2:0d:3c:3f:66:60:2e:cb:35:35:7b:08:e1:64:
dc:7d:e5:a6:5d:a5:0e:e6:1c:83:44:58:a4:a2:f4:
47:7a:23:67:57:51:c4:1c:ba:ff:f9:2e:29:7e:7f:
5b:60:8f:29:f0:9b:e8:56:bc:58:55:39:c6:6c:2b:
31:ec:6e:de:6a:81:8c:4f:f1:c6:23:72:ed:f1:79:
4e:24:9f:d6:74:9f:88:f4:3a:6c:ba:a3:23:0b:55:
1d:03:b4:da:b4:09:1f:35:be:d7:0c:c0:e3:c7:d8:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EB:00:7B:01:55:C1:D2:1B:46:6D:52:54:56:DF:63:3F:75:6F:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl
X509v3 Authority Key Identifier:
keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:5e:bf:a3:84:23:7a:64:1f:f2:7d:00:2a:b3:4c:93:cf:cc:
db:07:5f:75:64:e6:c3:1f:40:12:83:60:d2:d2:77:00:1d:57:
ee:a8:bf:65:01:17:72:48:91:8d:00:04:e7:52:2e:c3:3f:d4:
f0:cf:41:97:f8:34:9b:28:2b:cf:0e:7a:04:cd:eb:43:08:37:
65:3e:2b:91:84:99:0e:a7:4a:b9:46:a0:fd:fe:64:82:d2:8f:
a2:82:93:10:f1:a6:b2:37:fc:41:89:c8:4e:9f:48:1e:2a:dc:
d2:6e:0f:60:6f:74:c6:a1:64:cf:3d:87:56:03:12:9c:9f:5d:
00:15:34:79:e7:25:3b:61:8e:11:9d:22:40:44:65:f9:ba:b6:
92:2d:e5:d2:64:98:7c:cd:8f:73:17:06:05:ae:5c:27:06:ff:
23:62:20:12:b6:93:7d:9b:a5:5a:52:9c:65:13:ac:87:ec:f5:
43:96:c2:1f:f5:4c:fa:f4:32:58:cc:25:ad:c3:e5:b1:e5:1d:
8c:ac:c0:c3:77:f6:3d:96:f0:2f:d5:dd:74:b8:64:a3:6c:ab:
4b:da:f5:a6:39:2e:65:72:3e:b6:56:01:1e:b9:5b:9e:93:87:
4b:a1:0e:3f:a3:03:10:72:f4:e7:f3:4b:ea:36:36:57:10:6e:
cc:45:98:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:58:18 2025 by rpki-client