Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa
File: 7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa (raw, json)
Hash identifier: TahcpQhXHd8LfRKrDz90SSVzx3IVwrTO9t2/PlwGU+E=
Subject key identifier: 2B:EF:42:55:12:90:2E:A6:31:CC:02:D2:45:0B:31:FB:F2:AD:36:85
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62A9D9FC695FA202D3CD100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 23.251.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:9d:9f:c6:95:fa:20:2d:3c:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=94dd1cee-8744-438e-b57d-f86ead035e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:55:ae:f5:93:ed:10:d5:b9:67:8b:8d:3c:
c0:f3:fc:72:30:27:f9:98:d5:c8:b1:36:f6:45:86:
e9:f3:09:cc:a8:1e:2e:5a:e2:1a:ac:51:dc:9e:94:
90:d8:b1:04:8a:3e:15:80:29:95:14:60:4a:94:3b:
18:80:c0:9a:ba:f4:bb:c7:a9:fe:53:9a:37:df:1d:
43:d6:49:36:2d:97:9d:20:03:fd:35:14:79:fb:e6:
42:59:ac:42:1e:26:05:41:fd:57:63:bc:d3:b2:be:
f5:5f:68:89:70:d2:6f:ce:80:7d:2b:b2:c5:02:cb:
48:d2:3b:84:f8:aa:18:b9:d3:8f:7d:55:2c:10:2c:
ce:2e:bf:a6:7c:18:6c:fd:4e:6a:60:1d:65:57:c1:
7a:ef:e1:78:16:b4:77:44:37:44:76:63:80:05:db:
0e:e3:da:b3:d9:85:93:7c:c4:ec:1a:62:aa:a7:a2:
ee:49:91:ca:f6:cf:54:e5:ee:14:44:49:d4:70:72:
03:8c:bd:f5:a9:71:f3:d4:25:f1:cb:95:ad:f9:52:
2a:e2:0e:cd:12:af:e5:56:9e:d6:9e:15:5a:53:73:
0a:c5:ab:e0:de:ef:d1:02:58:16:d9:b6:7e:4e:3d:
c9:7c:47:b7:8c:ad:be:a9:27:13:a6:cb:23:e7:b6:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:42:55:12:90:2E:A6:31:CC:02:D2:45:0B:31:FB:F2:AD:36:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7709f8de-af0c-3ee9-965c-7a3e5ed2b1f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:fb:3e:17:f8:bc:22:67:63:45:07:24:6c:46:34:1a:61:0f:
0a:d6:7f:9f:45:d2:6a:12:67:17:0c:06:d9:d4:24:27:23:7f:
80:db:18:60:32:af:e0:d8:7c:a0:8b:15:04:fe:1c:59:bd:4d:
3d:38:7f:3c:84:56:1d:0d:01:cb:c1:a3:c4:ea:41:68:9e:6f:
8c:1a:a0:bf:b6:3a:fc:2a:7b:a3:38:d3:7a:07:52:9c:71:58:
bb:7f:43:5f:8f:a0:21:ba:08:e9:1b:9e:c2:63:74:a2:80:a3:
d3:4a:ec:1c:f4:4a:c3:8f:fa:ef:36:41:38:04:8f:b3:f3:87:
b6:51:59:65:e3:1c:21:94:f5:bd:4d:bf:f5:67:80:c0:96:fd:
90:70:1d:b1:08:29:4e:be:9b:3f:4b:ec:f9:cd:de:3c:78:f4:
f3:29:7f:22:da:78:33:ef:97:68:54:66:37:11:13:1f:a6:da:
7a:f3:9b:34:66:c7:e2:c6:57:dc:28:86:23:99:ca:a4:33:1d:
b5:f2:f2:55:5b:e1:b0:41:71:be:c1:92:13:a9:44:e4:e6:3c:
33:2c:34:4b:be:84:7d:58:e0:73:80:cd:30:7f:18:30:61:bb:
0d:00:25:10:5f:36:9d:a1:c2:7a:3b:e3:61:37:c2:f9:33:f7:
4f:58:ed:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:33 2025 by rpki-client