Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa
File: d1c12072-6c1b-3b2a-b15f-9a20316659df.roa (raw, json)
Hash identifier: nd9eM/nPDy7WoEST7yIkZtDbFD497W0vKSnmcvgmoWk=
Subject key identifier: E8:90:38:C9:75:D0:46:70:5F:A5:4F:76:F0:0C:A9:D0:75:F3:BB:86
Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial: 010D0C9F4328584832F028781983B5EE89A34180
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 20454
IP address blocks: 23.235.244.0/24 maxlen: 32
23.235.245.0/24 maxlen: 32
23.235.246.0/24 maxlen: 32
23.235.249.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:28:78:19:83:b5:ee:89:a3:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=8103d424-d50b-4077-b6a1-55b4585f216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:37:fd:29:5e:e7:32:45:d6:d4:af:ed:12:
35:18:1e:fb:2b:45:39:3f:44:a4:76:85:4a:2c:df:
d2:68:68:18:9e:2d:35:8d:c8:57:70:32:a4:eb:10:
1b:73:56:4e:9e:12:ca:d5:2b:1b:0a:fd:50:3b:65:
2f:d1:8d:69:a0:08:12:d7:c7:25:b0:89:70:96:cf:
c2:07:3e:b2:03:4a:91:c1:2a:62:09:b6:5a:d4:cf:
50:99:50:dc:2a:1d:e4:3f:69:4e:0f:cf:bd:75:fe:
b7:9f:95:85:03:f0:a8:c9:c0:8f:e7:09:fe:5e:9c:
f2:2b:e3:0c:24:0b:6e:54:e0:3b:e9:36:e5:cd:07:
f7:fd:f9:5b:1d:2d:6a:26:e9:85:63:7b:2d:3b:de:
ab:97:82:36:93:d6:f1:90:b0:00:ea:2f:37:95:81:
a1:9e:bf:f8:9d:8b:c1:0a:f5:e7:cd:4d:f0:1c:6b:
4a:ca:9f:4d:25:76:7a:82:51:e7:d3:91:74:35:97:
99:ea:a2:3a:23:5a:e3:a5:65:f5:0c:91:70:a4:a2:
9c:9f:71:91:20:55:5d:37:6c:c8:ea:ed:17:db:ca:
8c:2b:d6:58:81:ae:9f:2e:52:94:8f:52:5f:d6:7f:
64:f1:a7:a0:7a:45:e7:42:5f:32:7f:18:f4:8e:a2:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:90:38:C9:75:D0:46:70:5F:A5:4F:76:F0:0C:A9:D0:75:F3:BB:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
X509v3 Authority Key Identifier:
keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.244.0-23.235.246.255
23.235.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:69:ce:e3:e5:7c:b1:c6:30:d5:44:8e:79:c0:ad:53:35:e6:
33:92:2c:7e:40:78:3d:c2:9c:14:71:09:5d:95:96:3e:dc:df:
5a:3d:2c:26:02:15:04:53:23:a8:fc:ac:b6:0a:69:32:d7:2a:
5e:20:a2:35:ad:ed:ee:8c:3e:06:7d:fd:24:da:83:ea:8f:47:
00:ff:3c:58:f9:a0:b7:b9:4e:63:a6:a8:bb:64:92:cb:fc:8a:
ec:ef:ca:c0:c5:c9:6d:4f:5c:d6:8d:38:d7:8a:a1:e5:2e:ec:
23:51:a7:4f:bd:d2:cd:ce:a3:c1:70:7f:19:ef:54:ac:6d:73:
84:46:ab:86:38:9e:43:f1:72:fe:c5:63:40:c6:60:64:4b:37:
3e:86:b5:2e:d7:8c:98:70:99:df:73:bc:68:98:fd:44:74:c8:
be:30:22:06:99:7d:94:ae:5e:09:45:7d:c7:33:04:49:8a:19:
d7:f2:43:8d:cb:01:11:74:73:8e:11:d7:5d:d6:68:c6:99:38:
c6:9d:85:b3:62:f9:05:65:18:c4:7c:5b:49:75:4b:ed:b3:0f:
c0:91:db:7b:f7:12:fb:34:e0:e2:d8:35:74:43:93:62:6e:f6:
54:7a:a0:b8:35:a2:ea:41:d8:5f:ed:23:ed:af:63:01:79:fc:
6a:78:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:56:11 2025 by rpki-client