Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
File: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (raw, json)
Hash identifier: yrHq0M5hSmj/jcf6x+kvQrT7WvJute66RFT45zfwp3o=
Subject key identifier: 3F:66:D1:51:0C:6F:AF:56:B6:20:86:E0:C5:01:43:F2:B4:B0:75:EA
Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07
Certificate serial: 010D0C9F432858481BFAEB541B95D26A20BDB830
Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
Signing time: Thu 05 Dec 2024 20:39:17 +0000
ROA not before: Thu 05 Dec 2024 20:39:17 +0000
ROA not after: Wed 05 Mar 2025 20:39:17 +0000
asID: 20067
IP address blocks: 23.148.8.0/24 maxlen: 24
2602:811:c000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:fa:eb:54:1b:95:d2:6a:20:bd:b8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07
Validity
Not Before: Dec 5 20:39:17 2024 GMT
Not After : Mar 5 20:39:17 2025 GMT
Subject: CN=9d9ff28f-d158-4fc6-849f-74357ef7326e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:e1:bb:2c:7c:ee:14:bd:5d:ca:66:45:f9:
65:3f:98:0a:2a:8a:b2:8e:d3:c8:d5:c4:7d:7e:50:
5f:bd:19:a1:90:36:79:55:83:6b:f5:7d:39:65:28:
6c:80:34:cb:56:f5:7a:7b:91:59:c7:e0:ed:31:2c:
52:cc:4d:ce:8c:b6:9a:d3:7f:80:e3:eb:af:b9:f6:
03:15:09:51:f3:b1:02:d6:ac:1d:83:5c:49:17:e8:
a4:fa:28:80:ca:53:7a:4c:12:10:3a:2c:12:d8:77:
c1:8f:f4:64:50:bc:ee:43:18:be:46:26:1d:b0:e5:
52:8e:98:a4:33:aa:ae:fc:fe:74:69:e5:42:19:d3:
1b:76:b4:f8:2d:34:12:1d:0b:2c:6e:f4:13:0c:d6:
15:84:b1:f7:78:d2:1a:07:20:be:7b:35:03:e9:e3:
a5:72:d5:59:80:4d:29:76:9e:a1:a7:65:6e:06:61:
48:5c:20:d3:9f:cd:fa:e4:f9:6c:61:6d:f7:3b:f1:
4e:83:61:79:b2:a8:98:9b:aa:81:76:b4:44:46:04:
32:93:72:92:a9:19:b2:3e:bf:a2:ed:bc:4b:5b:07:
17:f3:b2:f9:5a:46:a2:99:c3:90:76:5f:1f:4d:c3:
dc:8b:2b:d9:41:61:54:a5:03:e2:4b:97:63:28:92:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:66:D1:51:0C:6F:AF:56:B6:20:86:E0:C5:01:43:F2:B4:B0:75:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl
X509v3 Authority Key Identifier:
keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.8.0/24
IPv6:
2602:811:c000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:8b:3b:32:58:c4:6f:ba:ee:db:ce:97:bb:ce:03:42:9f:20:
f1:12:b2:97:ed:2b:3f:e1:c4:1b:6b:b0:0c:e6:96:ac:d6:9f:
fa:9b:0b:45:46:4f:f1:51:d2:1a:ee:60:64:46:67:86:a4:78:
ce:c4:76:5b:1b:a6:d7:b8:5f:05:b9:b7:59:69:a7:8c:9e:65:
31:10:82:64:08:10:39:c8:d3:9b:ba:c9:38:e1:18:5e:26:19:
52:04:c0:59:4f:92:ef:13:d9:8e:84:d7:ed:f2:b3:b1:75:c3:
61:68:cd:7a:a4:f2:de:b6:91:52:6f:b0:c5:da:41:40:46:40:
71:ad:72:2e:5f:28:d8:31:ee:37:a3:82:08:4a:08:63:b2:18:
7a:c0:96:6b:23:14:72:b3:b4:78:45:11:9b:20:40:28:bf:e7:
5a:bc:ac:73:e9:4f:8a:6c:5b:dd:be:b2:0b:4a:f2:13:5f:93:
0b:b7:0f:a0:1c:ba:ca:45:29:39:85:50:49:dc:81:f4:bf:1d:
31:55:12:1c:bf:66:36:33:4d:b8:20:42:75:6b:c0:ef:c2:67:
40:5b:39:7c:b4:2d:99:20:52:53:6b:29:88:e7:cf:1c:30:de:
b9:6e:1a:fe:f8:fc:56:68:c8:ff:84:14:1e:06:5d:ce:f0:23:
4c:36:a0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:41 2025 by rpki-client