Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa
File: e6a5be0c-3342-3531-9d15-9b4cc482f541.roa (raw, json)
Hash identifier: yNJFzpszGA6iop4shHZlYiP6Yt9cg5uwXcyzo9XoAK0=
Subject key identifier: 2B:E2:58:97:3C:41:1D:12:BB:ED:75:8F:2A:8E:DE:80:1F:E4:AE:80
Certificate issuer: /CN=0e527a59-f1c7-4664-a1be-8a0911a07432
Certificate serial: 010D0C9F43285848222FDDB9D3F95154D4713280
Authority key identifier: 6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 40864
IP address blocks: 23.159.240.0/24 maxlen: 24
96.125.192.0/20 maxlen: 23
2606:1b80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:dd:b9:d3:f9:51:54:d4:71:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e527a59-f1c7-4664-a1be-8a0911a07432
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=2f196afe-ff89-4b93-8cc7-754740c0752d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:8c:57:88:91:fa:c1:35:87:18:b5:d9:da:
6f:31:ee:63:80:9c:6d:1e:a4:22:1c:96:b5:64:74:
6e:e6:58:9e:1e:33:d9:49:1b:9b:5c:4f:f8:4b:ae:
d0:6e:bd:c1:a4:85:13:a7:44:f6:6c:96:1f:d8:c1:
5c:69:2f:73:98:ec:6f:15:46:98:8c:07:54:14:32:
55:ae:13:a4:14:78:94:b4:33:d1:12:0c:d2:51:2e:
fc:a3:ba:7e:b7:da:81:8c:eb:5f:5e:5f:4c:bb:69:
12:8b:46:92:55:b6:bb:78:4b:16:7d:3a:97:e9:3e:
c3:7a:4b:17:76:86:0d:72:44:1d:cb:8f:6d:75:ab:
41:c7:2c:f7:ad:85:4b:92:b9:6f:5b:59:2c:c2:ef:
ec:0d:f9:ca:04:ca:74:80:1a:d7:48:87:0c:3d:bb:
a2:48:02:c3:ad:73:19:6a:5e:83:54:a9:9e:cb:c8:
1f:2d:e5:98:a5:d0:34:87:88:04:ec:98:55:79:4c:
10:89:97:25:23:56:fb:f9:b0:72:4b:0a:20:25:18:
95:a5:a8:95:73:76:06:6e:7a:94:bd:98:fa:2a:a3:
b1:fb:03:48:f4:34:ca:7b:8f:a9:9e:db:08:cc:68:
b4:85:a5:60:ec:73:b9:c8:6b:94:63:d6:68:da:a9:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E2:58:97:3C:41:1D:12:BB:ED:75:8F:2A:8E:DE:80:1F:E4:AE:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/e6a5be0c-3342-3531-9d15-9b4cc482f541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432/0e527a59-f1c7-4664-a1be-8a0911a07432.crl
X509v3 Authority Key Identifier:
keyid:6A:29:73:86:E7:27:75:53:C5:7C:59:76:56:81:A2:37:EE:4C:DD:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0e527a59-f1c7-4664-a1be-8a0911a07432.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.240.0/24
96.125.192.0/20
IPv6:
2606:1b80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:03:49:0f:cc:90:a1:63:8f:24:5d:58:79:35:a4:66:06:14:
d4:37:53:61:58:16:a4:b6:18:2f:89:12:3c:21:d5:a2:44:3f:
58:20:84:1e:0a:55:07:3f:06:fc:bc:92:d5:1b:f9:79:d0:bf:
66:cf:9e:86:8a:64:16:56:f5:a0:1f:ff:90:30:85:7c:88:38:
45:d6:95:12:a4:82:90:7d:46:27:03:01:e5:ef:7d:20:f0:42:
d8:41:63:fe:59:72:df:b6:d3:52:39:bc:7c:07:2f:e2:67:f6:
86:d2:42:6e:00:c7:1d:2c:18:19:00:71:24:de:9d:f4:b6:5e:
47:22:b1:3b:89:c1:f1:85:c6:43:58:e1:56:63:d0:90:19:64:
81:99:cb:2c:36:f2:0b:ca:6a:e7:be:f0:18:23:de:91:56:48:
4f:3d:27:02:fc:93:a5:30:f6:9e:b6:0d:ad:e8:b0:21:37:d5:
cb:a8:a6:87:4a:81:a1:2a:58:cb:ad:cb:1b:62:07:b0:3e:f2:
34:03:2c:59:0e:d6:c9:b4:22:98:49:f9:6f:85:85:a0:8d:30:
4f:3f:b6:4e:bd:5e:74:97:d8:ab:12:ed:38:83:d6:64:78:0d:
c8:62:72:a2:ab:56:43:05:59:cb:2e:2e:92:73:84:0b:46:9b:
14:81:57:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:40 2025 by rpki-client