Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa
File: c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa (raw, json)
Hash identifier: uJ96AcI3UnahJpdBhE2x9QYLz5bEr4nef5sxmBTBOwM=
Subject key identifier: B0:63:41:64:CC:FF:5F:3A:81:17:4F:3E:A9:E8:26:56:C3:1C:E9:4E
Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial: 010D0C9F432858485B6AF64BA3ECFE67CD9485C0
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 16552
IP address blocks: 23.128.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f6:4b:a3:ec:fe:67:cd:94:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=3e6c1a49-859f-462a-8705-ab1bc40698e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:aa:bd:08:e5:d3:ee:dd:2e:2b:1c:8e:6e:cb:
ee:ee:24:3a:07:86:e3:d1:94:1e:12:73:6e:7c:68:
fd:39:cc:31:7c:a5:21:5e:c6:e4:b5:8a:86:2c:31:
fb:4c:43:bb:8e:5b:9a:02:ff:35:5b:74:83:4d:da:
f5:16:48:84:b4:26:8f:4b:b0:a1:67:b9:45:92:5e:
cf:6b:e8:81:f7:5f:23:7e:47:4a:1b:90:29:fe:ff:
c9:0b:c2:f3:33:ee:99:d6:03:91:20:dc:ae:8c:aa:
f0:0b:f0:e3:65:e5:63:a1:4e:49:0b:3c:45:4a:1c:
41:e2:ad:c2:2b:c8:a9:42:6f:ff:05:d5:39:08:1d:
de:a5:f0:88:5b:c5:93:19:08:12:af:dd:24:2d:26:
97:fd:eb:9c:ef:23:78:d4:76:a6:f5:bf:84:6c:e7:
d4:b6:3e:5c:62:3d:6e:1d:3a:40:a7:74:01:14:76:
ca:81:d0:aa:ab:af:50:3a:cc:c0:26:71:4a:a8:82:
07:1a:91:02:ae:3f:d9:c2:1f:32:8e:2c:e7:af:f3:
fd:11:af:f8:b7:9d:ed:c3:c1:58:fd:7c:06:ad:5d:
90:d7:8a:8b:20:b2:a2:c5:d7:ce:7b:44:c7:c5:95:
b3:23:15:ea:6d:bd:88:01:fa:7c:bc:e2:7a:a2:77:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:63:41:64:CC:FF:5F:3A:81:17:4F:3E:A9:E8:26:56:C3:1C:E9:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/c5e7840b-6637-3129-9bfc-ebdeec5a61be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
X509v3 Authority Key Identifier:
keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:68:cd:72:0b:86:63:e3:e3:04:ac:03:24:e4:16:c3:47:d7:
bb:4e:1f:49:5d:21:2c:78:a1:2b:f7:bd:ef:76:4f:0a:41:1f:
ab:23:81:76:57:8e:8a:df:6b:d6:d2:a5:14:9f:a9:61:f9:03:
fc:96:a3:f7:41:3c:3c:ac:95:05:68:1c:14:51:32:ba:a8:11:
1a:a0:7e:31:d8:d3:38:6a:74:aa:32:93:3e:6c:28:d8:2b:b7:
d0:8b:7f:ab:8b:81:87:e5:43:cf:09:61:37:e4:96:2e:4b:19:
75:8c:e4:be:a6:7a:e2:ae:a5:c7:12:7f:34:21:c3:2c:cd:fc:
1d:51:1c:d8:dc:47:9c:f9:3b:25:f1:f1:b3:5f:40:7a:a3:79:
64:94:7e:2d:07:a5:7c:64:6d:ae:3f:64:68:90:e2:a4:4d:b1:
61:ef:f8:94:83:ec:55:ca:b9:1f:ee:3c:e4:e3:a8:75:67:98:
10:1c:b2:3d:e3:06:6d:f6:dd:ea:c1:e2:73:f8:0b:69:22:07:
f0:fd:7f:9b:49:61:78:fe:3d:cc:21:c7:aa:ab:8e:d7:30:a7:
9e:cd:f1:40:d0:6b:d0:60:87:07:5a:42:91:82:72:14:7d:37:
d3:1e:58:28:14:46:0e:7b:a0:04:5d:40:26:e7:30:e9:d1:aa:
96:7b:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:13:16 2025 by rpki-client