Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa
File: f30842c9-2946-3389-a971-2942db75d63c.roa (raw, json)
Hash identifier: 9CNbuKPRQ2nVO5RHCURatt4zh4mE0FQ1+LULLZZZbtQ=
Subject key identifier: 18:C4:57:27:8F:48:BD:09:B9:01:05:30:69:04:A7:56:1A:D8:0B:88
Certificate issuer: /CN=7bb7623d-5096-425c-aeab-03e71deea5ce
Certificate serial: 010D0C9F432858484C10323BA0DCF0A4EC8C1DA0
Authority key identifier: 40:0E:60:E1:4F:A2:B4:E1:27:1A:80:DE:C7:EC:3E:8B:DA:C1:77:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 46705
IP address blocks: 23.171.40.0/24 maxlen: 24
2607:88c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:32:3b:a0:dc:f0:a4:ec:8c:1d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb7623d-5096-425c-aeab-03e71deea5ce
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=5abfb67d-ffe4-4428-8538-dec846f5ba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:14:ac:95:07:9b:83:75:e5:6c:c5:84:b3:
1a:ec:b2:5e:ca:2c:18:ab:e4:4b:1b:76:c6:50:6e:
ae:c8:42:44:44:42:f2:ad:1e:4c:72:e0:fa:52:64:
05:22:53:c4:d1:b2:8a:81:f0:fb:fc:1a:68:03:fa:
22:c8:6a:f6:43:c6:84:0f:ce:2a:30:df:b4:86:ac:
5f:1a:8f:88:97:d1:ff:a9:24:1b:b2:7b:c7:0b:8e:
ee:e1:f6:c4:3b:77:ed:95:d3:a0:b8:11:14:e9:84:
d4:2d:78:f4:1f:40:b7:20:17:70:94:bc:70:12:bc:
28:c9:92:f9:60:8b:24:86:26:56:06:c8:94:8e:1c:
ff:4b:16:35:a1:bc:53:36:94:93:f5:4f:49:fc:2b:
1d:64:6a:19:ec:73:eb:cc:bd:91:2d:42:62:39:68:
21:52:58:c1:95:fa:70:32:86:00:52:5d:ab:aa:ec:
e2:55:4b:51:f3:4c:74:b1:74:0c:73:e6:6d:f7:51:
ac:df:6e:3e:76:a1:48:f6:fd:68:8a:53:fb:e9:bd:
50:75:f7:47:2f:43:d9:9a:04:3d:7d:f2:1a:15:2e:
7b:96:f2:41:16:5a:fb:d2:0f:e0:8b:ca:1f:04:0c:
22:1f:ef:5f:f1:a5:59:fb:87:53:ec:ff:e5:b6:7c:
0a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C4:57:27:8F:48:BD:09:B9:01:05:30:69:04:A7:56:1A:D8:0B:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/f30842c9-2946-3389-a971-2942db75d63c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce/7bb7623d-5096-425c-aeab-03e71deea5ce.crl
X509v3 Authority Key Identifier:
keyid:40:0E:60:E1:4F:A2:B4:E1:27:1A:80:DE:C7:EC:3E:8B:DA:C1:77:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7bb7623d-5096-425c-aeab-03e71deea5ce.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.40.0/24
IPv6:
2607:88c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:cd:05:b1:46:a5:ae:4f:18:bf:7d:07:60:60:b8:0f:92:47:
43:bf:bd:9d:3f:5e:73:00:02:c1:56:13:de:95:06:d6:7d:b4:
7e:5a:af:a4:d1:b6:9e:ce:53:47:6a:4b:d8:5b:5f:54:87:40:
b0:c7:b1:43:3a:a7:fc:8a:4f:9b:94:44:54:5f:fd:d8:bf:8a:
16:41:1c:be:81:90:e2:53:4d:52:14:fb:33:39:54:17:a0:40:
69:0b:ee:74:d3:b0:28:bd:8a:67:b8:18:3f:6f:00:a2:c0:da:
23:b8:7b:c2:99:08:1c:78:c1:04:0b:d7:de:fa:42:41:ad:e1:
b7:73:53:d2:b7:fe:66:30:fb:c9:60:bd:68:db:5b:1a:31:19:
a9:43:91:a6:48:62:12:93:a4:36:f9:06:2c:6f:11:12:4d:f8:
4d:35:2a:91:5a:ee:1d:c8:a2:34:05:35:26:02:86:2e:ad:6e:
e9:cb:b8:78:21:de:1b:0c:7d:3a:6c:52:f9:f7:7d:e9:07:6b:
54:38:2f:9b:ba:f9:43:84:cb:d6:5b:a5:9b:86:7f:fa:c0:04:
25:02:f3:5c:e9:e2:17:7e:c9:ba:94:72:dd:42:70:3a:94:8b:
15:90:16:2a:00:70:72:b6:8e:db:29:5d:0e:63:55:df:22:50:
9c:92:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:26 2025 by rpki-client