Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa
File: c3ce66bf-4cb7-36f4-a357-e0e778927525.roa (raw, json)
Hash identifier: mlOsOPRwW9ZxiGADjd+BTF1NwtIqRmDNkyUbtDbO5lo=
Subject key identifier: 16:DD:F8:48:28:3E:92:D6:4C:7D:07:78:97:C2:96:36:97:F7:FC:3B
Certificate issuer: /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial: 010D0C9F432858481F652B2A822DAC16BC5B0D40
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 1239
IP address blocks: 23.239.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:2b:2a:82:2d:ac:16:bc:5b:0d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=05a03117-0c16-47c5-a299-73b08fb2e894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:4c:e3:4e:67:25:d9:a9:b1:f8:17:64:9b:
45:a8:bd:f0:33:2c:b0:0d:0f:27:7b:ff:2c:ba:f7:
79:e2:a9:e1:a2:d3:55:3e:8c:57:5f:76:0f:c9:07:
38:d7:be:bd:a3:40:a5:a3:c9:3d:2b:84:b6:b0:59:
2d:ce:1a:2d:a6:ec:05:93:15:d6:83:33:b7:0d:0e:
33:7a:b8:3e:be:c2:77:50:3a:ed:fc:3c:43:32:f0:
f7:ca:df:dc:bf:ac:9f:fb:8b:8c:52:46:68:58:71:
92:e8:1a:3f:79:b5:48:11:de:b2:66:d2:2e:42:07:
97:d8:c8:89:38:b8:b9:9c:cb:5c:35:4a:64:34:f0:
67:dd:8b:1b:d9:bf:aa:bc:4c:f9:9b:7a:30:5c:ba:
c0:42:f4:ce:8e:fe:38:ff:1d:73:a5:e9:e5:ed:1a:
97:8a:22:71:4b:9f:30:c7:c4:93:63:be:d9:57:f6:
66:d3:c7:67:84:6b:da:eb:d3:c2:dd:64:b4:5b:28:
b8:a5:2d:da:51:d3:63:c6:bc:fa:17:51:b0:b3:03:
34:ad:0c:ea:10:1e:37:5c:b0:16:5c:c6:3a:5c:15:
af:82:cf:a3:4c:d3:97:23:5e:59:bc:fc:dd:88:0e:
d6:06:cb:87:8b:ca:11:80:b5:16:66:e5:66:86:62:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DD:F8:48:28:3E:92:D6:4C:7D:07:78:97:C2:96:36:97:F7:FC:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/c3ce66bf-4cb7-36f4-a357-e0e778927525.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
X509v3 Authority Key Identifier:
keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
sbgp-ipAddrBlock: critical
IPv4:
23.239.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:d5:40:a0:57:b5:57:4f:89:a2:9a:63:7a:da:aa:ff:9b:df:
71:bd:75:67:59:b5:07:00:2c:2c:8e:7d:fb:40:44:41:6e:76:
64:a8:9a:ef:44:b5:18:1c:ac:55:07:05:e3:19:24:b6:c0:05:
d7:db:21:10:f3:69:fb:aa:5d:8b:d8:30:71:d8:99:d3:38:5a:
15:28:ae:80:e4:71:9f:e7:d7:c8:f8:1b:df:2d:0f:8a:24:06:
21:b9:a9:4e:67:0e:8a:e8:1a:f6:02:cf:25:07:bb:32:46:48:
9f:4f:8f:1f:f4:b0:b7:c9:7f:b0:62:74:63:a9:15:62:e0:89:
55:bf:ed:0a:f9:fc:ad:2c:88:6e:b5:77:6a:07:4d:96:74:cf:
70:45:4a:e6:46:91:1b:36:99:fa:bd:29:19:b9:d1:47:7a:54:
e1:11:a7:11:6e:83:92:d0:ac:29:c2:cf:4e:74:a2:5c:69:92:
cd:42:76:cd:dd:6a:18:09:06:85:c6:b7:8f:b6:f6:00:01:0a:
18:48:34:d5:db:d0:e8:9d:72:58:c3:bf:8a:d4:ec:ea:7b:cb:
54:89:d6:23:00:a4:b3:9d:8c:7f:20:c0:ad:bc:c2:97:f9:62:
30:ad:77:33:7f:b5:a2:a5:67:b4:83:dc:79:65:97:d0:88:fe:
a8:57:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:35:47 2025 by rpki-client