Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/237d99b9-087a-3afe-927c-18b9bed4f66c.roa
File: 237d99b9-087a-3afe-927c-18b9bed4f66c.roa (raw, json)
Hash identifier: C0d51mQHqARJmxaaEyXGYeMOA98PqBCHAq3YBydU3jE=
Subject key identifier: 0C:F8:7F:BA:F1:EF:33:31:88:72:43:B8:D6:F5:53:F0:F4:3E:19:65
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62B3A4CBC0D76DA7C78A0F0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/237d99b9-087a-3afe-927c-18b9bed4f66c.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 23.251.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:3a:4c:bc:0d:76:da:7c:78:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=f7af147b-f826-4b69-a947-e6ee680842db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:7c:ac:8a:0b:2c:d9:2f:67:e4:ec:4e:91:
90:a3:80:22:a3:18:92:53:ad:b9:bd:d4:cd:ec:d1:
95:bc:d8:94:5b:c4:66:b0:36:4a:0c:9b:d8:b9:fd:
b2:03:c3:2a:87:03:5e:17:c9:06:74:4a:3f:23:cb:
ee:2a:c0:13:9c:52:1f:a0:e8:ca:08:26:52:29:09:
93:d5:21:da:4c:88:c0:0d:ca:f6:31:e6:ac:52:b4:
79:fe:03:66:59:51:51:25:8d:41:55:e9:d0:4c:c1:
46:c1:ca:22:2c:8a:ca:99:62:d7:b9:6c:31:1f:d5:
8b:c2:74:3f:91:6d:da:cc:57:2e:60:e4:94:e0:7b:
32:28:ae:57:c8:ad:6d:be:02:87:6c:b8:8d:94:fa:
29:65:c4:17:8b:c3:78:ea:70:3e:a5:e3:37:2e:b5:
37:fc:96:ac:aa:e4:74:1e:2b:8e:d4:41:33:3b:34:
3f:c8:83:31:f2:e6:b2:30:17:b4:56:05:b4:df:d7:
66:fb:d5:bf:49:66:25:11:40:de:47:c5:94:18:0d:
b9:76:36:22:52:ed:75:b7:01:aa:2b:84:d8:39:fb:
21:d6:09:06:d0:13:53:30:58:ad:62:4b:e0:11:e6:
ca:c2:99:23:ad:b0:45:56:a5:75:36:e9:6c:e1:61:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F8:7F:BA:F1:EF:33:31:88:72:43:B8:D6:F5:53:F0:F4:3E:19:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/237d99b9-087a-3afe-927c-18b9bed4f66c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:6e:31:1b:a3:dc:4c:19:99:e1:46:23:85:27:78:fc:7c:21:
5e:19:e4:42:d2:fb:e4:03:98:ab:86:d6:d7:19:1a:54:f5:b4:
a8:89:ff:aa:7e:85:22:86:8a:2b:b8:36:72:27:57:10:ff:4a:
1c:9c:0e:af:3d:4c:15:a8:4b:f5:ad:b3:07:0a:57:e7:85:d6:
4e:7b:fb:dd:6c:b4:88:8b:e3:85:8b:50:81:f4:28:3d:34:a4:
c2:12:a2:6a:bc:e9:ca:df:b8:cd:21:c5:9a:15:48:7d:c5:ca:
7f:c1:8d:c0:b0:31:a2:16:e0:2a:2b:22:8f:84:43:ed:e7:11:
45:11:e5:ac:f0:09:b2:27:4d:8c:0d:b9:dd:00:9a:8a:1b:96:
f3:63:dc:0d:7b:ab:79:2c:21:95:b3:e2:93:1c:e0:fc:c6:38:
ef:0f:30:19:4f:08:6c:9a:dc:d9:a8:22:be:00:0c:e7:67:f2:
7d:2c:9e:be:f5:2c:86:77:6e:be:34:09:87:3a:52:80:73:5c:
35:5e:7c:56:5d:e4:55:80:2e:09:5b:79:10:41:79:26:3b:02:
51:fb:68:d8:b1:5f:18:66:fc:52:f5:6e:88:e9:ae:47:c3:8b:
96:b1:45:5a:3a:5b:c3:9a:49:94:a7:88:39:d7:e2:9f:db:ec:
a4:5b:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:41:55 2025 by rpki-client