Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa
File: 5038e415-936d-36b4-b347-422bca3e97e0.roa (raw, json)
Hash identifier: 7P0sRL98rw6Twtk/M++NvJfjeQiECMDr488+q5SqNno=
Subject key identifier: 3C:13:FE:FA:D8:4F:F3:8D:0C:F2:25:39:AE:73:A9:91:75:39:7A:36
Certificate issuer: /CN=75c2d703-b68a-47d9-8657-d65247155419
Certificate serial: 010D0C9F43285847E95A2994B7369978871D0080
Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa
Signing time: Sun 17 Nov 2024 17:24:58 +0000
ROA not before: Sun 17 Nov 2024 17:24:58 +0000
ROA not after: Sat 15 Feb 2025 17:24:58 +0000
asID: 21658
IP address blocks: 23.175.40.0/24 maxlen: 24
23.175.41.0/24 maxlen: 24
149.112.109.0/24 maxlen: 24
2602:f926::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e9:5a:29:94:b7:36:99:78:87:1d:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419
Validity
Not Before: Nov 17 17:24:58 2024 GMT
Not After : Feb 15 17:24:58 2025 GMT
Subject: CN=dd650a64-7903-42d6-b9e7-9efecd165e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:7b:d9:69:c3:01:bc:40:9e:13:39:fd:b4:
d6:89:a0:93:0e:5c:54:e0:5d:ad:18:d3:1d:a7:6d:
bf:3d:a0:de:db:9a:d1:01:24:99:24:90:74:45:62:
52:98:ec:4c:c0:9c:64:b7:21:0e:fe:26:ed:cb:0e:
76:33:29:de:53:8c:15:b8:7e:fa:22:75:52:86:9a:
99:75:dd:fe:3f:1d:9f:32:a5:15:3c:20:b1:7e:61:
e7:df:2c:58:a2:df:e4:67:0f:fc:27:7b:96:1b:f3:
92:79:26:56:a2:af:38:d5:d4:f3:4b:29:53:13:a8:
63:8d:b2:bd:dc:f0:39:c6:df:48:24:41:d6:7e:63:
fa:97:6f:6a:68:21:be:2c:fd:89:16:87:75:6d:50:
e1:4d:46:2f:8d:d0:69:a4:c4:ad:42:1f:fe:ae:e2:
73:4a:04:5f:84:0e:fe:94:d2:9e:01:a4:c0:08:59:
fe:6a:b8:98:d1:b9:bb:c7:b8:d7:5e:d2:d3:9b:d2:
dc:d8:85:c6:98:cd:0b:8c:f0:e4:78:cd:fa:6f:be:
50:6f:05:5c:09:e6:7d:f5:91:9c:10:ef:c0:53:2c:
48:8f:bf:d7:42:48:5f:86:bd:a6:24:1b:67:f0:7c:
83:86:3c:34:b8:9e:0c:f8:a8:b9:bf:7a:e4:bc:b3:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:FE:FA:D8:4F:F3:8D:0C:F2:25:39:AE:73:A9:91:75:39:7A:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/5038e415-936d-36b4-b347-422bca3e97e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl
X509v3 Authority Key Identifier:
keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.40.0/23
149.112.109.0/24
IPv6:
2602:f926::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:31:98:96:65:43:7f:08:f2:ba:a8:23:aa:26:ce:e8:1e:ce:
35:cc:70:c0:cb:d8:36:71:ab:73:9d:9e:9d:f0:5f:40:d2:3f:
3a:32:95:b4:af:c9:b2:41:f5:b7:78:04:a8:5c:a5:74:b1:1a:
fe:21:bf:dc:f8:eb:fd:dd:64:91:7f:85:d2:89:01:92:1f:bf:
fa:b5:fd:99:1b:ef:1d:84:77:4b:d4:b2:d9:4e:da:a9:f4:84:
2c:45:ec:db:52:2b:a4:dc:c5:da:fb:fc:63:12:ba:8d:a2:c7:
b2:06:b9:82:8f:06:d6:1f:84:3d:f4:9f:3f:3b:4c:a5:b0:b7:
cd:2f:84:2f:2b:4f:74:cc:31:0f:04:c9:81:d0:72:c8:09:3f:
28:b5:20:1e:d4:83:7f:98:db:59:26:c6:d0:ac:ce:f7:0d:7d:
e4:c2:c6:e0:00:00:fb:8c:ed:5a:bc:92:4f:84:ac:47:4a:26:
d2:1c:80:e1:56:de:4f:9b:f3:0a:12:74:df:58:0d:69:1e:85:
4e:18:18:89:a7:6b:45:99:2d:37:72:93:3d:2c:ff:b3:57:f9:
1b:b4:b3:04:62:ef:05:36:32:d2:e5:7f:91:53:df:7c:2b:1e:
19:6f:22:58:7d:57:b0:7a:95:01:c6:88:f1:a4:7f:a5:25:e1:
9a:67:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:49:11 2025 by rpki-client