Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa
File: af16373c-3287-341a-a7b4-1cec1a5c9f48.roa (raw, json)
Hash identifier: NahseQ2TATjw71e5vRlfiLr1CfrumTFH2SvHBo0yPxc=
Subject key identifier: A8:EA:38:2C:63:16:8E:79:A6:A9:5B:D8:F0:EB:CA:00:B9:0B:1C:21
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584832F02CD108FDBA0C82A7DA00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 19437
IP address blocks: 23.235.224.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2c:d1:08:fd:ba:0c:82:a7:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=e61ef97d-1d51-476a-9d4f-a602c6a3581a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:06:69:b4:64:5a:6f:d0:b5:56:3b:af:3f:59:
78:53:d0:0c:9e:c9:6e:99:7a:56:65:ae:94:73:03:
36:38:d4:19:ec:09:2f:45:3a:0b:24:ce:b4:0b:81:
7f:40:96:05:ba:95:7d:80:d7:56:1e:e9:d3:a6:62:
89:4a:1b:2c:51:e0:9d:ae:93:47:a3:7c:d8:72:c9:
5e:f6:d3:04:88:67:8a:fc:4e:e3:8e:78:83:cf:b1:
a3:e5:a3:6b:71:3d:10:ec:05:0d:96:c1:aa:62:7a:
54:2f:f1:d7:41:3e:12:f2:d6:10:17:a9:19:df:8e:
38:d1:75:2d:a9:a4:bd:ea:0e:d8:94:e1:8f:61:20:
05:de:2f:cf:e5:18:dd:7f:33:33:e1:3d:b1:25:a5:
cb:52:55:49:d7:f4:85:db:71:c4:25:c3:75:cf:ad:
79:97:1c:9c:d3:cc:b8:b8:dd:fa:06:9b:3f:38:81:
94:0d:b3:36:c8:84:d7:f9:67:a5:a9:34:a8:4b:63:
81:9c:78:ca:a9:d4:f7:fc:1d:1b:c6:77:d2:8f:df:
05:1d:11:8a:87:00:14:23:43:11:1d:5a:77:ae:e6:
ce:86:ab:89:67:0f:c4:5b:32:bf:b1:4b:1c:c9:2c:
c5:5e:cb:9d:8b:46:6e:ab:6a:1d:a9:d9:e2:bd:15:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EA:38:2C:63:16:8E:79:A6:A9:5B:D8:F0:EB:CA:00:B9:0B:1C:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:1c:1e:44:40:93:c1:03:46:2c:03:59:bb:3c:e7:ab:88:55:
38:ba:19:de:f7:17:75:23:4a:9f:04:63:5f:54:c1:07:7c:77:
e7:16:2e:cc:1c:a5:4d:06:b9:20:91:b6:54:5c:0c:3c:19:69:
d6:93:be:20:75:2c:1e:79:4d:da:4a:cb:20:a7:1d:b9:b1:57:
38:9b:7f:75:e9:13:00:a1:48:b5:96:e8:0a:35:bb:21:94:34:
fa:e4:13:f5:fc:72:61:da:34:54:1e:e6:d1:0e:e4:a3:7e:45:
ac:8f:58:b7:95:97:18:5d:0a:aa:6d:e2:76:77:d1:cb:f8:3b:
aa:56:d8:f6:5e:06:ab:34:ce:0f:eb:91:32:55:9a:96:df:17:
9c:c9:df:b5:2f:ad:50:61:f6:c2:be:b4:ab:d9:56:5c:9d:7a:
35:99:a2:68:27:10:7d:29:f7:4e:59:10:e4:a9:e6:d1:d2:68:
76:78:7c:b5:06:46:af:25:2b:87:00:49:0b:33:ad:0b:1f:0e:
3f:4c:11:06:6a:76:77:51:22:b3:af:2c:73:aa:7c:66:b3:7d:
a0:06:68:90:7d:f7:a3:a0:48:28:1b:57:7e:c9:67:68:b5:4f:
09:07:e1:22:c4:7c:37:aa:58:2e:e1:46:9e:cf:23:64:71:77:
33:05:57:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:26 2025 by rpki-client