Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/0c6d5801-0b89-3e82-a647-5a9119149950.roa
File: 0c6d5801-0b89-3e82-a647-5a9119149950.roa (raw, json)
Hash identifier: bsZ8Zxbe+5DUBY9RhgFe2RIr6neL+0KJRMPrFeVBFEw=
Subject key identifier: BC:55:C6:3C:9B:45:99:62:E9:70:D0:E0:EE:E3:AC:63:3E:BF:6B:EC
Certificate issuer: /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial: 010D0C9F4328584861004DED18DE98BD8C0F4D80
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/0c6d5801-0b89-3e82-a647-5a9119149950.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 395512
IP address blocks: 23.161.0.0/24 maxlen: 24
23.161.1.0/24 maxlen: 24
23.161.2.0/24 maxlen: 24
74.114.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:4d:ed:18:de:98:bd:8c:0f:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=cbdf00a9-1651-410f-9baa-6e17cae162b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:11:8b:0a:ea:ca:a1:f0:3c:81:99:98:63:60:
39:1d:4b:82:50:a0:b5:81:3f:9f:1f:9e:75:ab:ad:
20:f5:d9:81:0e:d5:6e:59:a1:10:91:01:f5:02:82:
e5:3b:60:ba:47:a0:dd:7a:9b:ce:71:ad:0d:d7:0b:
81:cf:8d:55:97:2a:0d:28:63:91:1d:f5:0b:80:8d:
dd:9b:25:8a:9f:0d:68:d8:3f:d4:49:14:0e:a7:d7:
87:f5:28:1b:09:23:1c:0f:02:f3:02:87:ef:33:3a:
5f:b9:5d:a8:8d:a4:ce:35:4e:76:95:6d:49:c7:56:
12:c6:f3:49:88:28:e1:97:55:04:c4:f8:ff:d5:b7:
ec:41:53:ba:8a:4a:eb:d2:6b:26:0f:15:1f:d9:c2:
aa:4d:51:3f:ce:ca:10:ea:b7:7a:57:fb:6e:12:2f:
16:68:2d:97:27:6a:08:64:a3:3d:51:e8:5b:02:cc:
6f:a9:47:07:af:50:28:4c:e6:7d:94:35:54:bf:81:
bb:80:c7:0d:d5:3e:3a:f8:ea:0a:31:0d:3d:cb:e4:
57:4e:cf:c8:db:5f:88:7f:12:81:8c:12:ed:14:b5:
9c:9a:95:86:36:25:f6:c9:e1:19:ce:2e:db:b7:57:
d4:cf:8e:a0:b2:52:6f:5e:8d:33:38:f5:7f:ac:2c:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:C6:3C:9B:45:99:62:E9:70:D0:E0:EE:E3:AC:63:3E:BF:6B:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/0c6d5801-0b89-3e82-a647-5a9119149950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
X509v3 Authority Key Identifier:
keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.0.0-23.161.2.255
74.114.54.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:01:35:8c:f4:9a:fe:8f:b4:15:9e:c8:b1:57:56:a2:c4:77:
7c:95:15:1a:7c:eb:8a:55:8b:a7:1c:1f:03:61:46:39:8e:b7:
06:4d:27:2d:90:27:7a:ec:4a:55:05:3a:a7:da:ba:6f:d6:f4:
84:62:4e:b7:ec:5c:d4:5b:95:99:01:22:c8:94:35:79:b5:9b:
5f:50:31:e4:1d:3e:5e:df:06:a2:e0:3e:96:17:aa:4c:ff:ee:
dc:1b:c4:3b:74:18:f0:9a:5d:25:57:25:e3:84:da:c2:22:12:
c5:3d:12:a7:1c:19:51:2a:d7:27:06:8d:a1:ff:d2:94:f8:6b:
56:75:39:aa:08:f6:31:44:f2:4d:6b:b5:c5:31:ae:e3:17:fb:
03:48:51:b2:d2:67:e0:58:13:45:60:d4:29:86:81:9d:67:c0:
01:7b:81:06:b0:e4:3e:22:de:70:18:0a:0f:eb:dc:e9:32:ba:
91:c7:4f:5d:08:41:b9:06:12:5b:34:e2:00:16:11:7b:d1:35:
7f:5a:28:15:c5:98:1d:8e:51:55:c1:e9:bd:d5:74:08:7b:79:
6c:59:b1:9a:60:1c:b8:b9:ae:78:2a:29:ba:93:73:e9:71:4e:
4a:d4:4d:27:dd:33:f6:fb:b8:53:7d:06:eb:b9:f2:4f:3b:79:
f0:85:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:27:44 2025 by rpki-client