Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa
File: da93378e-6d07-3a1e-98f7-6ec0063c7938.roa (raw, json)
Hash identifier: wwX424/NULXHrslDfGZhRf7nNCg0t+BpKccgDbMYBKs=
Subject key identifier: 1F:A8:61:5A:E7:B4:3B:1E:13:FA:05:FD:E3:99:A8:07:8A:86:CC:F8
Certificate issuer: /CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Certificate serial: 010D0C9F432858486C2B20BE5D87DD350127F380
Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 211392
IP address blocks: 23.145.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:20:be:5d:87:dd:35:01:27:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=ab0aac4d-77eb-41cf-b601-a6b19a0d9230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:c5:5b:d5:cb:c9:ae:c7:5a:07:c2:8d:74:
29:f5:0a:0f:05:86:c3:b0:f8:43:bb:bf:80:d1:23:
d0:ac:f4:e7:4c:49:fb:69:ee:63:c1:63:07:a2:49:
9a:66:b5:b6:d4:71:aa:c6:c8:7e:1d:cf:34:83:8d:
48:10:5e:ff:50:03:4e:45:ad:92:db:08:b5:b7:f6:
37:2b:41:78:9e:04:9c:b6:c3:65:44:2b:ff:c5:b3:
7d:c0:da:d6:74:da:06:c9:4e:73:a3:c3:cc:7f:23:
73:74:35:2e:ab:89:32:22:70:b6:17:0a:c4:0f:31:
ea:bf:5e:93:9a:3f:a7:7d:e0:58:ad:be:ce:7e:8d:
ca:67:5f:b3:88:7e:ac:97:21:39:63:8c:c1:8f:70:
50:0d:a6:ed:f4:cd:65:e3:c3:04:75:3f:13:6a:27:
89:4a:07:a0:c0:b9:04:4a:fe:97:e2:96:b3:d2:71:
2c:4d:11:39:89:92:d5:3a:a4:19:c7:82:e3:17:96:
a5:8a:62:b9:a7:5a:2a:a6:f5:39:32:eb:87:17:33:
4d:ba:25:a6:02:e8:76:00:4b:97:87:1f:ce:bd:f9:
46:6f:3b:05:5e:de:3e:15:ab:c7:0c:8e:a6:60:fc:
c1:82:d7:4b:f9:a0:4d:d7:45:7c:7e:b4:e8:07:bb:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:61:5A:E7:B4:3B:1E:13:FA:05:FD:E3:99:A8:07:8A:86:CC:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl
X509v3 Authority Key Identifier:
keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a2:89:0e:3b:41:93:67:ff:c0:4d:1b:b6:b4:78:d2:32:c6:
13:b1:b5:29:02:8f:8a:b0:f5:5a:3e:f4:bb:02:83:30:14:6a:
53:3d:9b:a3:ab:95:dc:01:d7:00:f7:19:e6:78:30:86:45:fc:
1f:1b:d9:8b:4c:a2:74:bf:59:77:ec:ea:37:75:53:05:42:e5:
c0:97:d7:34:61:d1:74:7e:dc:6a:32:7d:f3:bf:fb:a5:b2:fa:
1f:b7:c1:5e:e3:37:9f:b8:4f:85:f6:d5:05:a7:9f:ef:fe:91:
7c:6a:7b:d8:81:71:de:57:92:72:06:7b:54:ab:a0:6e:a2:33:
d3:f7:52:53:8a:1e:76:cc:1f:ed:e0:62:08:6c:1f:f3:46:41:
ed:d8:bc:b9:78:48:ff:0c:7f:55:55:dc:80:10:35:b9:5b:00:
a4:1a:10:7a:93:e2:dd:08:86:9f:ee:18:2d:38:66:07:bf:57:
d5:59:26:81:b7:f0:78:f3:7a:80:cc:6a:e4:39:62:98:c9:b1:
d7:27:56:64:f6:45:d0:09:2c:70:d4:40:53:f3:68:70:6e:34:
75:23:12:73:c4:61:2b:fd:2f:bf:c2:4e:27:28:d0:1b:b7:c6:
90:5d:d4:54:1c:1f:ec:b1:29:b6:83:62:0f:05:a3:c0:43:9e:
72:37:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:10 2025 by rpki-client