Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa
File: bd2f992d-6e4a-3230-8636-0526743d0a78.roa (raw, json)
Hash identifier: Kt7zQqkH5ymCQUTRsyhkPizn3Kf4kZQCXi/RcKmWInY=
Subject key identifier: 5D:5D:97:B4:B6:1E:8E:51:BF:F0:62:4A:DB:F7:8D:BD:6F:46:5C:74
Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Certificate serial: 010D0C9F432858483F803ADA509F24E2497A9A00
Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 399646
IP address blocks: 23.165.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3a:da:50:9f:24:e2:49:7a:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=3ae6989d-87c5-4124-b3ea-a08dd9c51bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:aa:6d:69:1c:0f:42:de:a4:10:a1:27:ee:
ae:62:20:aa:43:f2:03:84:e2:66:43:1c:02:e0:7c:
c9:0a:ec:ad:f7:0d:d9:e1:f6:33:5a:01:3d:b5:ff:
20:25:c4:3e:fb:c7:a4:31:60:05:55:73:91:c6:72:
5c:b0:b5:26:e7:27:8b:57:59:c3:03:cb:ee:cd:eb:
28:f6:9b:e5:82:61:b9:94:36:7a:0d:aa:74:33:bc:
73:c7:86:9b:ab:04:47:49:a2:61:bf:eb:f8:d5:42:
99:a3:cc:3f:d2:e1:58:19:01:49:3c:21:21:81:0a:
1a:d1:de:c2:2f:a3:9f:09:92:f7:00:d6:63:42:01:
ae:01:59:fc:b9:9f:53:e4:c9:36:b6:21:00:2d:82:
65:13:fd:a4:08:0c:f0:c1:90:d4:2c:c2:6a:ad:d0:
6a:7a:81:63:c0:02:df:a2:ce:dd:34:2a:e1:99:77:
25:3d:79:1a:2e:7a:bf:5a:cd:ec:9f:7b:88:87:be:
45:1c:74:45:0b:92:0d:37:76:5f:9f:30:e6:49:e4:
04:2b:b4:fd:3e:89:21:d4:0b:99:00:30:89:a3:da:
12:d9:ab:4a:9d:ba:a4:65:19:9d:4e:33:61:d5:33:
4f:b1:6e:b6:e8:11:23:1a:16:c0:c4:8e:2e:80:86:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5D:97:B4:B6:1E:8E:51:BF:F0:62:4A:DB:F7:8D:BD:6F:46:5C:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl
X509v3 Authority Key Identifier:
keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:07:cb:4e:26:77:b4:06:97:eb:b1:c7:82:f0:b6:31:7a:2d:
0e:04:a7:a8:5d:b8:3b:13:47:a6:bb:8d:3e:84:c7:cc:66:de:
f7:5d:74:ff:05:74:08:01:1d:70:1d:c8:da:d7:e1:6b:4a:44:
15:4e:1b:2c:34:e8:7a:30:16:73:db:ec:6c:4f:d9:9a:fb:e1:
7e:90:50:bc:44:31:96:4e:bf:e4:86:cc:8c:55:5c:6c:ab:74:
25:16:7d:5e:28:3a:6f:ca:d7:4c:0e:51:b4:c1:78:6b:d9:c2:
c2:e5:8b:9f:b0:43:71:0b:0f:a9:a7:9c:68:f8:1b:6c:53:85:
ac:e0:b8:24:79:35:5a:38:e4:8f:80:3c:3e:34:12:17:27:45:
1d:ae:c2:9d:7f:f6:99:9b:7c:38:3d:5b:a5:1a:df:17:10:ab:
7e:6e:5d:bb:dd:29:b1:4f:b5:d5:50:25:1c:f7:73:8b:37:b6:
b7:2b:4b:81:dd:8a:51:54:0b:9c:6a:c4:30:9c:43:06:fc:49:
f6:f9:cf:a8:93:4f:eb:3d:23:29:f9:31:4f:9b:f5:bd:49:b3:
78:79:cf:f3:e8:b8:1d:0f:e4:b3:04:24:68:88:66:f8:e1:64:
f0:35:59:cb:d9:25:b5:2b:da:d6:fc:43:27:ad:43:4a:4e:10:
0c:b5:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:59 2025 by rpki-client