Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa
File: be0dee30-c326-3427-9dce-49d70b8e6c8c.roa (raw, json)
Hash identifier: s7meNJSXqdbse1fxL7rZkml9fDBXjD47BPTERYXPq+I=
Subject key identifier: 24:4D:F3:74:0A:4A:DB:16:07:A3:A1:9A:9C:75:49:99:79:19:2A:90
Certificate issuer: /CN=b61fdb7f-6654-4226-b916-f915d5e335dc
Certificate serial: 010D0C9F4328584804DFBB3B884A16DA8F697540
Authority key identifier: 15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa
Signing time: Wed 27 Nov 2024 14:00:52 +0000
ROA not before: Wed 27 Nov 2024 14:00:52 +0000
ROA not after: Tue 25 Feb 2025 14:00:52 +0000
asID: 395842
IP address blocks: 23.144.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:04:df:bb:3b:88:4a:16:da:8f:69:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61fdb7f-6654-4226-b916-f915d5e335dc
Validity
Not Before: Nov 27 14:00:52 2024 GMT
Not After : Feb 25 14:00:52 2025 GMT
Subject: CN=cdb2fb12-3486-4705-91b5-f64371fd49b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:08:4a:8f:d4:10:11:1c:e4:db:5a:81:d9:4d:
7d:e1:7d:9a:ca:bb:94:54:44:d1:cc:1d:be:35:19:
81:d5:f5:fd:50:fe:8d:b7:69:89:ea:ce:53:d4:c0:
ee:f5:d9:67:f4:55:b1:0e:31:3f:cc:72:1d:0c:b5:
7c:24:cd:49:bb:31:b0:06:33:bb:e8:ce:b5:4e:c2:
60:1a:d4:f0:99:ee:77:92:45:32:92:b6:9f:a1:3a:
65:71:49:86:08:df:9b:54:bd:23:cb:8d:f4:3b:85:
59:55:e5:bd:12:54:e4:5b:e3:fb:57:81:ca:33:2d:
e8:54:af:45:98:5e:9d:5d:75:ea:b8:1a:af:ae:54:
c8:88:77:a2:2f:7b:ce:29:87:01:e9:8c:e1:d3:7b:
7d:9a:7e:d6:01:05:2e:4f:5f:15:59:0a:f9:7d:3b:
e4:14:f1:b4:2b:b8:fb:6a:34:a2:0b:98:ea:9b:af:
0a:aa:17:bf:84:c8:11:07:5b:06:c8:1b:34:82:94:
36:15:21:86:04:a8:61:03:fe:e1:69:df:3d:ae:c1:
55:80:e2:3d:de:0f:25:81:1c:dd:91:af:70:e7:55:
18:e4:e5:58:33:5d:67:4b:7f:64:a1:b4:ea:3b:da:
a8:4a:4b:84:de:1d:d2:59:4e:b6:6f:e8:5c:9c:40:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:F3:74:0A:4A:DB:16:07:A3:A1:9A:9C:75:49:99:79:19:2A:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/be0dee30-c326-3427-9dce-49d70b8e6c8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc/b61fdb7f-6654-4226-b916-f915d5e335dc.crl
X509v3 Authority Key Identifier:
keyid:15:99:A2:44:30:B5:80:14:66:AF:CC:2D:76:0C:27:40:A7:FA:00:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b61fdb7f-6654-4226-b916-f915d5e335dc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:98:a1:11:a7:f9:eb:58:80:c1:62:47:73:30:2a:d8:f1:05:
cf:5a:33:d1:61:84:9f:51:c6:9d:b4:d7:b1:93:03:b9:a1:bc:
c3:a2:74:d2:a4:23:f9:4b:17:21:12:58:f5:24:76:1e:1b:73:
db:0e:94:e9:84:09:9d:36:b0:d9:c7:a3:c8:6f:b6:92:fb:32:
c9:33:48:3b:f4:3d:87:98:2f:0f:cf:7a:b4:ff:d1:25:d0:0b:
9b:cd:e9:01:0c:a1:f6:a7:21:c9:a2:4e:57:d2:b4:73:a8:7b:
2f:24:58:1d:7f:e8:10:6a:43:70:aa:22:5b:d7:ff:98:ac:10:
b7:47:3c:ea:6a:6b:d5:d6:a0:62:66:00:9b:44:ab:01:7e:66:
65:41:4c:8a:88:3b:f6:0d:f6:2c:7d:44:70:69:34:f8:7a:6a:
93:4d:49:fb:bf:8a:e2:02:45:72:3f:78:13:d4:97:f6:46:b6:
36:d4:0a:3b:75:f3:a7:a8:0d:3b:e0:5c:6b:68:92:ea:60:73:
91:70:87:84:2d:9b:24:be:21:3a:aa:0c:38:aa:bf:71:41:b6:
ae:72:95:19:cb:23:1c:21:05:ac:2f:58:2f:a9:da:d4:82:a8:
54:22:aa:86:19:9b:47:73:8e:a6:1b:67:01:74:f1:d2:66:d1:
09:bb:00:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:43 2025 by rpki-client