Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
File: 853d2761-430f-3406-8353-e291e87c8b19.roa (raw, json)
Hash identifier: 8LtfZhK19U5TGWW8jGDuO4Ra2i4x+6pklNXUR6vPnyM=
Subject key identifier: 27:9E:35:2D:95:F1:65:FF:4B:38:2A:26:7F:83:35:79:C9:11:E7:67
Certificate issuer: /CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098
Certificate serial: 010D0C9F4328584802150D0EEB70A57FC6FAC7C0
Authority key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 399935
IP address blocks: 23.168.216.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:15:0d:0e:eb:70:a5:7f:c6:fa:c7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=8ed85bed-b6f1-45f2-a8f2-f7cdb0cb9274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:7e:93:9e:49:45:ee:cb:67:f5:2a:5e:17:
17:a4:8c:1f:fd:8d:8e:ff:67:48:d3:91:40:6d:2e:
0f:eb:84:93:ea:7f:ae:84:3f:e6:1d:3d:81:7a:20:
c8:53:79:c4:00:9c:11:28:0a:9c:68:69:89:ba:9d:
1f:4f:c8:11:ae:70:79:98:f4:ac:14:f5:ff:8b:02:
be:ff:2b:c4:65:33:b4:c0:71:67:c1:96:6f:2e:05:
a5:ed:54:75:8f:be:b5:37:4c:d8:a0:1c:9a:25:06:
0c:65:74:2a:d0:bf:6d:00:71:c7:47:ef:91:96:3c:
71:53:85:1b:f1:1e:b6:b2:bb:be:80:c4:be:7d:79:
a2:51:e0:33:c2:15:ec:1c:07:5a:48:ac:ba:91:45:
29:8b:62:38:db:22:d8:4b:28:ea:28:61:3f:ce:ca:
11:91:92:99:6d:ba:39:9c:ca:78:74:12:13:40:45:
e1:ed:49:dd:e8:d5:07:1f:0f:3a:3c:65:f4:67:2d:
4d:e1:01:3b:8f:f4:30:30:46:4a:f3:c2:f5:ce:29:
7d:63:1d:de:32:85:ab:ca:bd:b6:1c:01:df:f7:a7:
ea:1d:24:86:66:13:35:87:a6:e6:b4:62:2e:ff:3b:
7d:38:bc:9d:76:09:34:13:c3:c1:34:53:f8:5f:46:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9E:35:2D:95:F1:65:FF:4B:38:2A:26:7F:83:35:79:C9:11:E7:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl
X509v3 Authority Key Identifier:
keyid:10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:ff:87:ff:97:2e:c5:7b:5a:ff:33:22:64:07:b2:52:d4:6f:
03:f6:72:ee:fc:9e:2c:8a:fb:b0:a9:cf:3c:0e:ca:d3:7a:ca:
dc:fa:d2:c4:f8:6c:c3:28:d2:4d:cd:41:7a:32:74:8b:ef:19:
83:8f:75:ba:af:c0:a8:9d:30:b0:26:db:70:48:72:6b:23:fc:
ce:b5:a0:17:a9:d3:67:3d:75:a7:19:d6:10:cd:95:c4:5d:36:
42:f3:ad:a6:2f:55:db:73:08:9c:78:48:3c:de:95:24:36:92:
94:2c:e9:0d:58:37:76:2e:b7:94:97:13:0f:37:62:19:9c:9e:
14:02:1b:ab:dc:5c:d3:e1:07:29:4b:bd:7f:d5:9f:8d:8f:05:
82:d9:9b:64:6c:c1:4a:88:49:55:37:cd:ce:a7:06:5a:93:80:
bd:e2:49:04:bd:80:34:bf:11:c6:07:51:5b:2d:46:7d:d6:ce:
34:9f:6b:6d:15:66:61:d8:24:9b:bd:a6:f1:67:f8:fd:37:bb:
b2:2a:82:3c:d3:40:91:71:1a:de:06:8e:13:ea:1b:9a:fb:57:
ec:0e:b4:db:9f:c4:b3:8f:90:59:f3:35:8a:15:f4:28:99:46:
68:11:4d:40:e6:04:e8:c0:0f:3b:3d:12:45:ee:35:b0:b3:e4:
dc:fd:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:27 2025 by rpki-client