Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa
File: c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa (raw, json)
Hash identifier: xeVoCechyjdgvbwnDikhsHb/ueYfDmem22vT1ps2B1w=
Subject key identifier: 3E:2E:07:63:91:E5:2C:AF:56:28:4E:26:60:54:AA:7F:9D:52:26:7D
Certificate issuer: /CN=6d944863-bb4b-4403-99d8-bdd9488dc28b
Certificate serial: 010D0C9F432858487755E5D0D9DE6560E7E881C0
Authority key identifier: D8:C6:D8:E7:FB:B9:CD:70:02:7B:7B:3E:6A:DA:A5:DA:3E:65:8C:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 8796
IP address blocks: 23.165.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:e5:d0:d9:de:65:60:e7:e8:81:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d944863-bb4b-4403-99d8-bdd9488dc28b
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=6146b881-4366-49e5-b92a-d1a94f7a738d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:c2:d1:a4:af:4a:d1:b1:5c:00:d7:32:da:
15:29:46:b1:b4:d7:5d:84:bd:0e:a9:1c:8d:b5:4e:
39:6c:72:c0:fa:ae:18:a4:cb:a0:f6:f4:7a:48:34:
56:5c:fd:1d:08:e0:93:8b:4b:15:e2:bb:a4:c9:43:
2d:f5:1d:f4:eb:af:70:75:19:75:04:3d:b9:7e:78:
b0:2d:b1:03:cd:cc:49:36:a2:a4:4e:07:a8:64:bd:
22:0c:59:37:59:e9:1a:ce:39:3e:a4:74:a3:be:44:
84:8c:de:a5:33:70:59:34:5c:38:92:d1:c5:b4:98:
a5:da:b2:b3:f9:aa:42:fb:b8:ba:a9:ac:d9:1e:0d:
72:d6:f4:c0:dd:61:26:b4:74:b1:4d:ea:a8:f8:0a:
e7:bb:45:fe:ee:fd:20:9b:4d:24:79:a2:b3:6e:d4:
9e:29:ec:b9:09:17:b3:e4:ca:cc:37:83:2f:b2:40:
f4:3d:75:a5:ea:6d:8b:6a:d9:a5:9d:34:bc:4c:2e:
ed:c3:4f:52:1a:4d:08:f9:43:d6:2f:f1:29:c8:60:
21:ca:bd:fe:e8:db:88:a5:f2:83:87:4a:1c:21:aa:
45:0b:37:5e:33:03:58:53:94:7e:c2:b0:5e:51:93:
5e:41:9d:c7:55:57:4e:25:d8:42:65:5b:46:74:aa:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2E:07:63:91:E5:2C:AF:56:28:4E:26:60:54:AA:7F:9D:52:26:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/c7faa5b5-6e8c-3a80-8baf-bfd7aba1cea1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b/6d944863-bb4b-4403-99d8-bdd9488dc28b.crl
X509v3 Authority Key Identifier:
keyid:D8:C6:D8:E7:FB:B9:CD:70:02:7B:7B:3E:6A:DA:A5:DA:3E:65:8C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6d944863-bb4b-4403-99d8-bdd9488dc28b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:42:b6:90:c6:b1:d6:1a:4c:b0:e4:20:64:e9:59:ba:34:c1:
fb:3a:73:8b:b8:cd:bd:0b:9c:89:5f:7c:72:9a:13:b0:39:40:
e0:a6:03:ac:fc:da:90:77:87:8f:1f:e5:ca:19:fb:f3:7f:c4:
6f:bc:51:40:2d:48:70:39:74:a6:f8:8d:73:93:06:92:46:51:
9e:04:fb:a6:96:c1:f6:6b:20:18:e1:76:97:cb:09:c9:3b:74:
50:74:b2:bc:30:ae:c3:81:e8:e0:8f:d9:86:3a:6a:da:95:31:
6e:67:33:2b:66:29:46:27:fa:f1:c8:e1:d8:2d:cd:33:77:93:
80:f7:55:96:d4:b1:8a:e9:db:ca:a1:41:30:91:6e:df:00:27:
b7:95:f7:d5:5e:12:08:82:1b:53:05:d1:cc:46:91:81:54:a8:
6e:22:7d:74:fc:7a:8a:40:37:32:2e:1a:4e:93:5b:0c:6b:cf:
f8:87:e7:6d:cb:30:b8:88:8e:6b:fe:9d:b4:77:62:59:4b:a1:
56:9e:57:eb:e2:85:58:76:34:dd:e5:a3:df:7d:7d:d5:81:9f:
85:8d:56:23:d6:6e:21:40:be:31:33:a4:d2:43:47:db:8c:5b:
33:3b:4b:ff:a2:f8:66:2a:c5:90:b8:50:7a:ad:b6:5f:81:cd:
3e:54:2b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:22:47 2025 by rpki-client