Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa
File: 38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa (raw, json)
Hash identifier: VoQ7h9SNPe8b/b8Q9CHWB9KY+JPUaeadr+hwRZQf36k=
Subject key identifier: B9:05:60:62:68:01:96:BB:E2:03:A3:F6:39:CF:C3:19:DD:15:F8:70
Certificate issuer: /CN=68de9da0-8f7e-4231-9340-c37abafc3714
Certificate serial: 010D0C9F4328584802150A553D87E6483B2F2B00
Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 1030
IP address blocks: 23.166.200.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0a:55:3d:87:e6:48:3b:2f:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=144e0bfc-8a8c-404d-a2ee-41978e27c0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4b:60:e4:e3:fe:be:65:7f:b6:c1:a2:b6:7d:
75:ea:19:0c:2b:5d:c6:cd:66:6b:e7:cc:09:3f:0f:
9a:b5:1d:bd:4d:52:f7:d4:b8:9f:4a:97:ae:dc:9a:
14:62:b9:e9:36:f4:b4:07:c6:8f:83:e3:79:44:08:
f8:c2:dc:d1:f9:5e:67:6f:b9:eb:87:e9:41:6f:38:
8f:49:7d:c2:1e:a0:99:bf:0d:f1:9c:8f:ec:b7:a0:
76:ae:f5:2e:1f:22:d1:f4:82:f0:3b:e5:6c:b8:89:
b9:61:a5:2d:19:95:4d:65:e5:d0:74:15:7f:6c:22:
ec:2f:64:b5:02:92:df:28:83:dc:a7:64:79:95:09:
2b:d3:59:36:18:c2:e7:a5:f3:65:37:16:ab:6e:cd:
f2:65:4d:cf:b9:a1:a5:2a:48:ee:b7:a6:9a:df:83:
78:18:5a:56:70:21:55:16:2a:47:de:20:62:59:a3:
36:44:03:da:5f:ff:ee:aa:e9:3f:63:64:e2:9c:05:
fd:59:27:4b:46:15:d4:72:8e:80:71:4d:16:ce:17:
d2:81:a3:99:ef:31:99:db:90:68:77:f9:1e:15:70:
f3:cb:59:ac:79:a2:2d:6f:8e:3c:ca:37:6c:fa:d9:
bf:db:af:33:85:ea:81:77:b6:03:0b:44:4d:2f:ba:
fc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:05:60:62:68:01:96:BB:E2:03:A3:F6:39:CF:C3:19:DD:15:F8:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl
X509v3 Authority Key Identifier:
keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:9a:73:07:4c:c4:98:f7:8e:5a:5a:3e:06:7b:6d:82:ee:4d:
53:67:99:84:68:c5:c9:33:31:cf:19:b8:39:bd:65:b7:1c:11:
fa:3a:c7:24:12:62:97:7d:ef:f5:db:9f:6a:e3:79:3a:57:79:
3e:0b:f7:d3:c9:76:9f:ca:99:ae:0e:6d:08:24:1d:3a:7b:33:
cc:3b:14:78:2d:1f:a3:90:3b:cf:fe:c8:8c:05:19:ae:ca:59:
e8:1c:4e:30:c1:58:85:8b:52:80:0d:d6:fa:e4:e7:36:68:f4:
17:04:ba:6c:5b:b3:c3:f2:d9:b1:c8:76:6d:26:e1:ee:ee:1b:
ad:97:d6:2a:26:a3:d8:d2:01:29:05:d2:90:08:8a:b1:e3:e9:
42:6d:66:01:2a:0a:6d:70:7a:71:d2:96:15:03:e0:d3:42:30:
89:ae:6f:60:eb:df:6d:f5:e1:86:04:b1:d8:80:ce:35:d5:a4:
a8:e4:35:b6:ed:e9:5d:d2:2e:76:3a:9f:b3:5b:d8:c8:c9:b0:
b7:53:cd:f5:a4:95:63:83:6a:4e:8f:c1:64:6b:ae:bc:3c:59:
a9:a2:bf:7e:ee:60:7a:6d:75:1e:e4:83:9b:f8:2a:c4:67:ac:
4c:19:8d:13:94:87:1c:40:3b:d2:78:53:79:49:43:51:58:fc:
0f:5f:ee:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:12:03 2025 by rpki-client