Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa
File: 874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa (raw, json)
Hash identifier: H2+HCQ1Jqri9Te0ZBpi4f6ANg06D/iJF/HBEfgRonuQ=
Subject key identifier: A0:AF:62:62:B3:87:B4:7B:24:EA:DF:0F:F8:A4:53:EC:50:21:E1:34
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F43285847E62AB6B839412D1816DD3E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 23.251.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b6:b8:39:41:2d:18:16:dd:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=2c5bcee6-f7d8-4f36-963a-4659f0059a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:cf:6e:d5:b6:4a:0b:53:a0:f3:bb:22:dc:
27:28:94:64:3c:16:ec:25:ef:39:2c:a0:b2:ab:e6:
15:15:f4:b7:cd:2b:69:10:49:7c:c5:71:80:24:2d:
4a:19:f1:b3:af:82:9b:d1:eb:33:82:27:4f:33:3b:
e3:2b:a3:22:ac:03:4c:f9:ff:ae:f6:dd:2d:b3:ed:
22:49:04:65:39:72:46:fe:05:bb:49:7a:1a:34:6b:
b1:20:d2:4e:64:de:f5:7c:b6:c5:ac:20:59:79:62:
47:2b:44:ca:39:03:85:c7:6d:e0:72:ce:fc:b7:ea:
d6:39:0e:2a:a5:c6:bb:31:a4:f3:b9:25:de:a3:5a:
f6:20:8b:74:3f:1d:0e:48:cb:02:95:51:9f:ef:03:
53:8e:fd:c0:6a:76:ec:66:6f:4d:1a:92:d9:c2:fc:
68:5f:0c:a8:96:57:38:df:49:ee:34:05:0b:45:84:
09:af:af:d2:88:1f:44:b4:84:b0:6d:8a:59:24:a4:
dc:cf:69:9b:cc:3d:95:2b:e6:18:2b:d8:56:fc:20:
66:f1:a0:7d:a1:50:5d:63:19:c5:f6:e5:14:e9:fb:
68:54:c5:a0:f3:c1:43:3b:a0:5f:73:a4:40:07:9b:
4f:6e:2b:b7:f9:71:f2:a2:93:a1:56:34:b8:41:f0:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AF:62:62:B3:87:B4:7B:24:EA:DF:0F:F8:A4:53:EC:50:21:E1:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/874f5e4e-d452-3dfe-8e9b-dcf69204a170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:2a:3d:08:3f:14:1e:7a:e5:91:42:42:8d:9d:b0:70:3a:1d:
27:84:a0:4d:4e:2a:3e:b7:a8:3b:a6:a7:be:ef:3c:13:39:66:
22:b7:23:5b:91:a7:89:af:51:12:55:79:10:09:4e:47:30:f7:
a7:3f:28:67:08:36:27:a3:25:8e:63:fe:6e:73:c4:43:4a:d4:
f3:6f:0c:e8:61:04:bc:60:fd:d6:de:98:ca:8d:89:a7:a0:25:
95:36:76:66:aa:d0:f4:cb:bc:50:25:8b:62:aa:3c:1f:dd:08:
b5:2a:e3:31:bf:52:d7:69:38:83:54:65:1e:d9:a5:1b:3b:e5:
8f:2b:58:35:bf:99:2b:2a:02:61:fe:f3:60:11:c9:87:18:f8:
85:ad:8e:a0:96:5e:3e:9a:ac:18:06:ce:b3:b3:f3:64:65:9a:
89:b9:59:68:86:0f:bb:74:d7:63:ef:7c:88:ff:fb:16:ce:c1:
bf:1f:e1:5a:f4:bf:db:0b:21:80:87:c8:23:29:5b:96:5c:0d:
10:86:f1:2a:2a:f3:8e:2c:a5:88:5a:52:ec:e0:e8:30:7c:a1:
84:86:5a:a2:4e:b1:94:cd:bd:7f:37:e6:d5:0d:27:29:34:94:
86:92:31:34:e9:4e:04:55:23:c5:42:6a:32:5a:62:aa:89:19:
a0:51:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:31 2025 by rpki-client