Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cb3b5a70-df8d-3963-a739-28f2b078237e.roa
File: cb3b5a70-df8d-3963-a739-28f2b078237e.roa (raw, json)
Hash identifier: C95lcAdUlYIp0yADchCbadg/diryIxxS/NAeyzOXMzY=
Subject key identifier: F8:17:D9:2B:03:73:9C:6E:49:D0:BC:BB:F9:FF:DC:96:AE:91:C4:0B
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F432858485F9AE08AB3AC3B9481955E40
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cb3b5a70-df8d-3963-a739-28f2b078237e.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 3257
IP address blocks: 23.234.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:e0:8a:b3:ac:3b:94:81:95:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=8191c9de-cdb9-43ff-8f49-15a21e188733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:b5:7a:5e:1b:3e:7e:c2:7d:df:e3:1a:7d:
b4:82:61:38:b5:97:0d:6e:bb:28:0d:4a:be:64:19:
f4:d3:0e:ca:94:21:51:ff:d3:8f:70:a5:54:14:2d:
7f:15:f3:35:b9:ed:6d:f2:f3:ee:32:83:61:20:c5:
69:52:ef:3d:f2:d7:1a:94:7f:98:26:fc:81:c2:b2:
64:db:85:ca:5c:d8:34:e7:42:c7:7c:65:29:17:a4:
c4:e2:42:25:d7:10:29:2f:41:cd:0c:ac:ea:53:e3:
9e:8f:6a:8e:10:dd:eb:d4:84:04:21:58:29:97:26:
38:72:47:64:eb:aa:9a:46:db:2b:a5:4d:70:25:c8:
5a:9b:4e:ee:6a:ee:f6:e0:97:bb:6b:69:16:30:d5:
85:01:b1:34:6a:0b:9c:09:5d:b3:6c:1b:7a:dc:77:
6e:93:bb:e1:f2:42:11:e9:e2:40:d6:61:80:0b:a8:
f2:38:45:0b:fe:95:3f:11:93:fe:68:3e:fe:90:a7:
57:9f:91:74:7c:7c:71:39:49:17:9d:34:44:5e:88:
89:30:67:f5:99:87:af:6c:0d:b2:70:fc:23:d4:1e:
ec:66:13:c5:61:fe:97:62:d7:2b:b3:60:05:5e:ff:
11:f1:22:ed:76:e8:32:8a:8f:ef:cb:b3:19:48:20:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:17:D9:2B:03:73:9C:6E:49:D0:BC:BB:F9:FF:DC:96:AE:91:C4:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/cb3b5a70-df8d-3963-a739-28f2b078237e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.234.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:6b:03:c4:6f:49:2f:58:46:ef:a8:60:c7:4d:08:00:b8:15:
3c:8b:95:52:dd:b4:7c:f8:87:aa:cd:a7:e3:28:7d:98:80:93:
b5:23:98:9e:51:0b:c5:65:63:12:d5:e8:83:02:09:4b:2c:99:
02:a1:82:ae:84:dd:1d:74:a7:72:96:cc:b7:65:bb:40:5e:8f:
ca:52:d2:40:47:a5:16:1b:c1:2f:f0:10:ac:51:f9:4e:54:86:
3d:96:f2:f3:81:0f:ad:db:80:67:58:fe:9b:af:38:c7:16:cd:
56:dd:51:88:6f:91:9c:af:39:15:37:87:84:f3:a9:08:bd:d3:
3c:c4:40:3e:4b:6e:0a:25:c6:00:0e:f1:3d:f4:3a:cb:98:a4:
ca:07:55:45:4f:0f:0a:51:31:ae:a6:4b:da:a5:8e:8b:bc:62:
af:e9:69:ca:73:6b:b8:03:a3:81:3d:45:f6:f2:70:be:d9:88:
ec:8d:47:aa:ef:1a:69:2b:69:ed:ce:41:1c:7d:ab:87:f4:1f:
96:32:87:98:e6:f4:f5:01:54:28:be:3e:4d:7b:77:09:69:13:
82:8b:ae:bd:21:30:a1:0a:93:62:46:93:46:87:7f:45:f9:6e:
cf:1a:1d:8a:9a:18:32:e7:ec:b3:1d:5a:52:19:ff:03:b2:de:
cb:04:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:42 2025 by rpki-client