Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/32e02635-8cd2-3775-81c9-ed30a8a029d4.roa
File: 32e02635-8cd2-3775-81c9-ed30a8a029d4.roa (raw, json)
Hash identifier: 6zyFNN4g844vzB13fvFvM4jHMUmPixo3ydUJaiVoZVA=
Subject key identifier: AF:56:FF:D9:AB:AE:FC:DC:CC:20:E3:2F:E2:2B:16:1E:55:36:4F:FB
Certificate issuer: /CN=e3587642-0817-4894-845b-fb11599b2f03
Certificate serial: 010D0C9F432858484EDACEECA9FB894B67B9E3C0
Authority key identifier: 79:84:8C:A0:0A:40:21:02:46:28:23:6C:57:17:A9:2F:94:8F:BE:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/32e02635-8cd2-3775-81c9-ed30a8a029d4.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 401222
IP address blocks: 23.183.248.0/24 maxlen: 32
2602:f87d::/36 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:ce:ec:a9:fb:89:4b:67:b9:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3587642-0817-4894-845b-fb11599b2f03
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=1b9340c6-1629-4445-b060-d15fecd0b543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d7:a8:8c:9a:93:86:3e:de:b3:cb:56:4d:8e:
7b:c4:1e:8f:b3:7d:71:57:6e:aa:48:16:2c:97:f8:
21:11:df:58:b8:00:60:5d:05:b8:22:2f:21:51:9f:
4d:25:45:16:e3:6d:b2:49:7a:68:2d:59:99:5e:e3:
4d:1e:31:4e:50:2f:a8:1e:f1:59:60:69:de:62:50:
1b:29:11:72:ba:b6:a5:23:98:bb:e2:3e:28:d3:99:
6d:fd:b6:35:57:da:79:7a:7a:d2:af:5a:ec:7a:e8:
60:fd:6e:cb:55:a9:ac:5c:41:e3:d5:a3:38:1f:58:
3d:4e:3a:1a:29:76:81:44:59:71:8b:73:a1:db:b6:
00:9e:6a:3a:35:3a:0c:71:c6:a3:16:db:f2:97:2f:
e4:61:f1:c6:16:79:7c:aa:42:d5:7a:a3:48:eb:bb:
fe:f1:be:32:85:10:49:8a:55:13:b7:3b:c5:6b:09:
7a:9e:0b:ae:7a:3c:3b:ae:75:c9:47:71:ce:0d:02:
ca:17:4c:cb:24:c3:aa:f0:65:e4:dd:9d:6c:47:f9:
a4:68:aa:d7:ba:4f:08:86:76:73:b7:c6:a5:cd:ed:
e6:93:b7:54:48:d2:61:aa:00:ae:cf:f0:ea:91:ff:
cf:79:9a:5a:f8:57:f8:47:b1:db:91:50:f1:ff:8a:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:56:FF:D9:AB:AE:FC:DC:CC:20:E3:2F:E2:2B:16:1E:55:36:4F:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/32e02635-8cd2-3775-81c9-ed30a8a029d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03/e3587642-0817-4894-845b-fb11599b2f03.crl
X509v3 Authority Key Identifier:
keyid:79:84:8C:A0:0A:40:21:02:46:28:23:6C:57:17:A9:2F:94:8F:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e3587642-0817-4894-845b-fb11599b2f03.cer
sbgp-ipAddrBlock: critical
IPv4:
23.183.248.0/24
IPv6:
2602:f87d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:8e:f1:8b:c2:7d:b9:aa:70:5a:cc:69:85:47:00:63:29:25:
a8:82:93:74:44:5e:10:07:ae:4a:e5:3a:23:5b:d6:d0:84:39:
11:69:64:36:e3:44:62:b6:8d:f1:0c:36:42:16:6d:19:93:2d:
9d:93:7f:f8:41:13:ca:48:9f:45:b9:72:1e:4f:62:cd:26:3f:
97:e8:e6:61:2a:aa:ca:3b:50:a7:1d:89:5b:2e:16:40:98:24:
28:71:4c:ca:94:d1:c5:db:e7:5e:da:70:68:1e:b1:33:7d:8e:
ae:79:fe:7c:99:d0:b1:c0:63:83:80:15:42:68:44:a5:a5:12:
3d:33:d3:03:ca:a0:f9:f8:77:f2:e0:8e:fd:ae:b9:bf:e0:17:
f4:72:d3:b5:0a:4d:38:79:76:80:a9:f7:98:de:7c:c6:50:08:
e3:84:a9:8c:b7:27:f3:53:04:5a:09:a4:5e:79:a4:56:08:32:
84:48:ea:97:28:c4:f3:ce:d6:92:a1:77:cb:37:f9:ea:99:86:
e8:cf:da:49:04:2a:70:b2:af:e6:c4:12:84:ac:1a:09:51:11:
71:81:ba:a7:26:20:c3:c7:be:c9:7f:ae:02:eb:46:3b:e1:53:
cd:65:53:35:d5:6f:05:a6:84:28:18:59:d9:e9:0d:ae:c7:09:
df:7f:e0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:52 2025 by rpki-client