Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
File: 288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa (raw, json)
Hash identifier: FmbqKHUjH9zOKObkHOOTHsV8hpamdT/uyT61kWSVPRU=
Subject key identifier: FB:99:2F:06:19:5B:B9:4F:E9:B2:9F:47:7F:FB:0C:6A:E6:2A:80:AA
Certificate issuer: /CN=194b4d95-965d-467f-835c-6cdeececce61
Certificate serial: 010D0C9F432858486D9055B46EDFE0C103228F80
Authority key identifier: 2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 1062
IP address blocks: 23.166.216.0/24 maxlen: 24
104.166.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:55:b4:6e:df:e0:c1:03:22:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194b4d95-965d-467f-835c-6cdeececce61
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=b4a25d75-9ba6-42e2-b0a1-f25a349be239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:15:73:86:8f:cf:5a:87:ac:68:1c:ab:42:7f:
6a:48:83:37:d8:17:de:b4:ad:f5:c8:3d:8f:07:ed:
3b:1b:c5:84:1f:79:c4:7b:bb:61:6e:fc:4b:92:12:
af:a9:e2:d0:2d:b7:70:ac:65:fe:62:65:d2:47:dd:
62:bb:d9:ff:c5:3e:66:17:6f:da:cf:c7:70:87:54:
d9:1d:50:c1:88:e4:2c:c3:a1:9a:86:ea:a3:f8:c8:
35:d2:f1:fb:e8:12:6d:cb:63:e6:7c:4b:17:e9:b9:
94:06:17:9f:eb:6b:5a:1b:51:02:2c:49:67:c0:7c:
fd:26:f0:15:4e:c8:61:c9:4b:cf:87:45:e7:d6:3c:
26:b0:1a:fc:48:8d:e4:dd:de:3a:7a:27:fa:32:29:
35:a3:7d:6b:bb:9b:f0:e9:73:91:d2:d1:47:84:02:
1f:9c:ea:ae:1b:23:43:9d:25:11:a3:d3:6a:cd:14:
b1:39:46:d6:23:06:ef:db:64:86:87:0c:65:3c:f7:
77:ce:bf:6b:79:88:42:3b:a0:9e:0e:c3:35:55:2d:
b5:0d:e1:d1:d4:91:e3:fa:fa:db:e2:74:1f:5d:dd:
43:94:3f:9c:05:ce:00:9f:58:7b:1c:fc:6e:94:d2:
f4:e9:24:ba:12:26:51:de:08:95:26:1d:69:5b:73:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:2F:06:19:5B:B9:4F:E9:B2:9F:47:7F:FB:0C:6A:E6:2A:80:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/288c1377-d45c-3ce7-88c9-1ebbfa41e736.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61/194b4d95-965d-467f-835c-6cdeececce61.crl
X509v3 Authority Key Identifier:
keyid:2F:A3:C7:92:60:1D:0F:77:6B:A7:06:EE:E1:9E:D2:34:E7:F8:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/194b4d95-965d-467f-835c-6cdeececce61.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.216.0/24
104.166.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:f1:73:f0:08:64:36:11:22:68:6e:d9:36:7e:88:7d:d9:c9:
6b:c7:a4:20:cd:3a:44:e6:57:4e:9f:ef:1c:e5:e9:af:d2:49:
c5:ad:b1:52:f9:cf:15:0f:91:28:4f:74:61:3a:72:41:f6:b1:
a5:40:4c:2f:2a:e2:0e:f9:03:50:24:2a:03:60:d1:aa:79:b6:
d3:d1:81:91:20:48:ab:d4:50:07:79:0d:25:c4:86:38:f6:e9:
16:50:1d:a4:ba:26:f2:03:73:94:7e:3a:c6:09:27:1a:2f:3c:
c9:e4:f8:63:f3:39:e0:2a:8a:38:78:a2:1e:96:77:a8:03:a5:
36:18:ce:8e:aa:50:cf:29:3e:78:37:15:ef:fd:00:37:f9:39:
ca:32:84:12:67:ae:4e:ab:c9:76:d9:d9:83:49:c3:df:9b:eb:
fc:eb:57:69:f9:de:2f:e8:2e:64:63:d9:c3:e1:a6:b4:a1:97:
79:39:51:a7:fd:95:32:84:f2:e7:04:92:fd:26:91:73:cc:70:
0c:35:14:80:a7:92:01:df:b5:fd:5a:50:8e:3c:8c:a3:df:8d:
97:01:49:26:ce:df:e7:b0:e5:ec:bb:39:13:d8:6b:e2:e9:e9:
73:c6:b6:90:36:8d:4f:93:e6:92:af:f6:54:df:f7:2d:5f:1b:
5b:73:60:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:21:23 2025 by rpki-client