Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf/9e215f8a-c80b-3e7b-be80-c93b2b972bdb.roa
File: 9e215f8a-c80b-3e7b-be80-c93b2b972bdb.roa (raw, json)
Hash identifier: ONZOowTfi8+vnLHia96vEf5K0zSPOwJEI52G5ETZACM=
Subject key identifier: 1F:26:3D:DD:AC:8E:FB:31:A6:2A:9B:8A:9B:3E:C6:48:2C:58:45:48
Certificate issuer: /CN=9fbd174a-7da2-48ec-9f86-d1e42adb15bf
Certificate serial: 010D0C9F43285848854B479D1725E0101FA14100
Authority key identifier: B3:5C:EE:5F:0B:D6:D1:3C:74:02:5E:36:2C:55:EA:7C:65:6B:BE:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf/9e215f8a-c80b-3e7b-be80-c93b2b972bdb.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 209242
IP address blocks: 23.178.112.0/24 maxlen: 24
64.112.117.0/24 maxlen: 24
2602:80a:6000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:47:9d:17:25:e0:10:1f:a1:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbd174a-7da2-48ec-9f86-d1e42adb15bf
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=a59f078c-10fa-4f6d-afb3-478e2c87ea8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:65:48:57:79:a8:bb:d6:42:09:3c:9d:bb:
de:7b:ad:cd:59:3a:da:70:ea:27:d4:39:c0:aa:e6:
9e:7a:95:87:9b:53:32:fb:2d:2d:f3:1f:c4:bc:3a:
7c:68:c4:0a:e9:56:5d:b8:3e:f3:0e:e8:4c:26:16:
9c:f1:5b:62:46:da:76:e2:39:1f:2a:cb:74:35:a5:
eb:56:be:7e:be:c1:04:a2:46:27:08:00:c4:a5:dc:
88:4f:33:42:f1:31:e8:00:c2:42:c3:a0:bb:c7:2e:
2d:ee:7a:9f:ff:2e:d9:84:9b:b1:ba:3e:4c:42:d5:
af:df:7c:f0:7a:84:99:bd:3c:f9:ab:1d:e3:45:c7:
f6:c8:e7:80:bd:7b:7e:d5:a4:30:52:b0:21:76:a7:
d2:06:05:39:7b:cf:14:cd:35:e9:04:e4:ad:27:86:
26:31:24:66:82:aa:72:59:e1:fd:a3:4e:89:bc:1c:
b0:65:6c:70:d8:7c:a1:04:8e:ac:49:2d:55:1a:33:
e6:89:97:49:90:d8:e4:0a:c4:1e:0b:43:c0:7c:d1:
f0:ac:4c:d3:6c:e5:53:e6:90:d6:71:f9:fa:70:5d:
c7:c6:2b:f2:b4:f0:08:1a:b9:2f:82:9d:72:ed:26:
17:e5:4d:1f:4f:c2:f4:64:9f:72:7c:19:dd:76:d6:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:26:3D:DD:AC:8E:FB:31:A6:2A:9B:8A:9B:3E:C6:48:2C:58:45:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf/9e215f8a-c80b-3e7b-be80-c93b2b972bdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf/9fbd174a-7da2-48ec-9f86-d1e42adb15bf.crl
X509v3 Authority Key Identifier:
keyid:B3:5C:EE:5F:0B:D6:D1:3C:74:02:5E:36:2C:55:EA:7C:65:6B:BE:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.178.112.0/24
64.112.117.0/24
IPv6:
2602:80a:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:3d:8c:ac:ff:12:83:20:27:bd:c1:cf:81:fd:95:7e:c1:d6:
18:14:14:cd:de:53:11:f2:e9:4e:15:65:a7:7b:65:59:0e:b8:
bf:f3:be:73:8e:84:01:20:f0:9a:f1:ed:82:e9:a4:e5:71:9c:
3f:8c:d5:8c:9d:68:2d:75:5b:57:f5:32:90:0b:00:bf:4a:9c:
c3:17:d8:45:f4:8b:dc:ea:6a:db:02:b1:56:8b:6b:d8:3a:69:
8e:b8:19:96:3c:f0:fb:f5:ed:82:9e:01:93:5b:d0:07:33:a4:
5d:60:1c:64:84:ff:20:e1:1d:33:7c:41:b4:7c:d3:1a:af:bb:
17:04:bf:81:5d:09:06:35:17:ad:1b:7c:42:53:ef:b2:67:5e:
97:b8:ca:63:18:78:8e:39:45:ae:74:2e:36:9d:c7:36:5f:77:
95:1e:22:f0:0d:56:30:4d:f3:2e:bd:78:8a:71:52:72:b8:f7:
44:c1:26:73:07:f6:d9:34:7f:9f:c7:44:96:41:29:3e:8a:82:
5f:ec:c7:90:c1:f6:70:d0:32:de:4c:f0:13:5a:75:83:f2:48:
6b:37:61:8b:b0:86:94:e5:4d:52:23:80:3d:62:15:c6:7f:a1:
e8:97:df:95:79:c3:bb:53:7d:fa:f8:f9:96:a7:66:04:de:a5:
a2:2f:f0:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:26:04 2025 by rpki-client