Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/14f73e52-7825-3f57-b7ce-56bda9756aa4.roa
File: 14f73e52-7825-3f57-b7ce-56bda9756aa4.roa (raw, json)
Hash identifier: cBMDQEOGFmsgyJ0H+KODgrHJVybgjDX6ow4RmPUlF4c=
Subject key identifier: 89:C1:5A:F7:1A:91:F7:0A:FF:F8:C2:0E:AE:7B:C0:73:FF:69:95:00
Certificate issuer: /CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
Certificate serial: 010D0C9F432858489BA0AFBF67845664D26F9780
Authority key identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/14f73e52-7825-3f57-b7ce-56bda9756aa4.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 396279
IP address blocks: 23.173.128.0/24 maxlen: 24
2620:12f:100e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:af:bf:67:84:56:64:d2:6f:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=b53a0778-72d8-4a01-aad2-7a3ed46eea74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:3f:e0:15:21:45:ab:9a:61:f5:ae:75:ec:
81:e5:c3:e5:76:1e:07:33:e6:f2:83:43:ec:73:2f:
45:47:45:3c:02:c3:26:1b:18:93:10:41:03:9b:dd:
06:14:89:72:f6:e0:01:8c:9d:e8:fe:8d:00:ca:f7:
c7:3e:58:2f:1e:76:a3:94:55:4c:f7:55:5b:08:91:
c4:3e:88:a3:fb:bc:12:a1:e7:33:5e:37:64:f1:81:
2e:46:36:a1:e1:42:0f:40:0b:d3:c0:59:8d:8d:fd:
81:92:8c:80:23:af:33:9e:ed:16:78:1b:15:1a:57:
fa:fb:bc:b9:36:f0:92:5b:bb:f7:b0:29:ea:8e:4e:
0b:ce:b7:29:96:f2:87:ee:45:d5:84:70:4a:63:19:
a4:9a:64:1e:11:ed:98:e1:dd:7d:50:82:fd:ba:a6:
fb:64:78:2b:8f:6b:90:20:ae:94:43:48:86:70:63:
56:e2:70:92:fb:3e:f8:ef:02:13:ff:06:f8:d0:3f:
4c:70:36:2b:18:45:6a:a1:78:81:b6:28:6e:87:fe:
21:54:e5:80:08:69:25:e2:d4:79:59:fe:7c:65:61:
14:d7:ed:f2:d3:5c:1c:0e:87:ca:42:0d:87:2c:7e:
22:6f:70:42:00:2d:eb:76:5e:5a:2f:06:71:f5:bf:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:5A:F7:1A:91:F7:0A:FF:F8:C2:0E:AE:7B:C0:73:FF:69:95:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/14f73e52-7825-3f57-b7ce-56bda9756aa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl
X509v3 Authority Key Identifier:
keyid:A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.128.0/24
IPv6:
2620:12f:100e::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:67:54:51:7d:74:96:22:f6:d2:72:29:c0:6b:32:c5:52:c8:
17:ba:79:a7:2a:e8:da:52:c6:28:93:c0:fc:9d:7f:7d:c6:a7:
e9:31:b4:af:76:b9:2b:97:e2:68:bf:a3:ee:9f:1e:c5:50:01:
5d:a1:9f:f3:4f:9c:b2:71:5e:a5:d6:66:70:65:27:8d:1f:48:
fd:4d:0a:2a:a5:2f:78:b7:b9:ff:23:6c:bc:a3:6f:70:9e:a6:
86:81:c3:cf:d5:0c:2f:3a:a6:fb:db:73:60:f2:a6:d7:c5:9a:
56:43:0f:97:09:c6:3a:8a:7d:5f:8e:e8:9e:c1:83:61:31:3e:
87:13:44:a8:f7:40:30:13:82:6c:15:01:95:5f:fd:06:c5:02:
3c:eb:5c:67:18:9b:55:c5:f7:7a:26:63:43:e0:ca:27:57:39:
08:3b:63:13:7a:f2:26:fd:ce:01:16:b6:36:08:73:7d:f5:72:
92:69:27:d4:33:22:88:df:cd:7b:3f:2f:81:be:f0:75:c4:3a:
4e:48:46:59:27:1f:7e:7f:76:2c:84:94:a7:bd:b5:06:62:e3:
3d:0d:58:82:30:ac:14:02:ba:65:6d:97:ac:c2:30:bc:a7:e2:
fe:31:22:e5:80:74:89:39:f8:1b:21:2e:0c:66:0b:6a:9a:d1:
56:56:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:42:59 2025 by rpki-client