Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa
File: a4248d18-50bd-3de2-869d-110232135253.roa (raw, json)
Hash identifier: QcDUN/xHQDH12CrRWXCqtDVwfI1jkIyczgynRlfyqrw=
Subject key identifier: 95:C3:5D:E5:4A:82:BA:15:9B:97:60:0A:B2:9A:4F:95:AB:99:EE:7B
Certificate issuer: /CN=bfe6b5ce-b18b-4608-80c9-5651cde85219
Certificate serial: 010D0C9F432858481C9A9463002F1B1E141FDDF0
Authority key identifier: E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 396100
IP address blocks: 23.164.168.0/24 maxlen: 24
141.193.0.0/23 maxlen: 24
2607:7540::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:94:63:00:2f:1b:1e:14:1f:dd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6b5ce-b18b-4608-80c9-5651cde85219
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=7063c24d-43b8-4a6f-bd2d-97a93373ab71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:32:66:db:82:8c:44:a7:4c:71:c5:7d:a4:
13:e0:e0:06:1d:d0:4c:7a:c1:48:43:57:e7:27:9e:
cc:26:76:03:68:4f:7e:15:7b:35:76:15:39:98:7f:
27:f0:81:83:d6:42:67:ee:00:fd:61:38:a4:93:84:
dd:55:67:ab:0b:6c:64:f8:b3:05:4e:39:04:7d:be:
a8:bb:85:ff:53:1b:a3:5f:bb:96:43:bf:d4:b1:e7:
4e:cd:b3:df:5e:33:1f:a4:1e:f4:04:34:8a:20:7f:
49:af:b9:7d:42:a3:4d:d8:ec:fc:b0:b1:1d:f7:ff:
16:c2:77:6d:4c:12:ce:f8:a0:f8:bb:66:b1:31:0f:
88:51:a5:bc:8f:70:e8:8d:8e:f6:5a:e8:2b:1d:27:
5e:96:af:46:7d:d4:d9:92:7e:2d:a0:4d:be:68:e5:
b2:69:e5:44:cb:f3:d3:9d:4e:9f:2e:12:25:75:af:
43:dd:b8:5a:04:ee:7e:4d:58:0e:f1:51:2b:14:5a:
97:4a:91:8b:d6:8b:3d:a9:22:f6:5b:c6:f6:c9:0d:
8c:f7:5f:ed:51:34:b7:33:03:67:b5:fc:65:a5:e0:
07:64:0d:3b:45:27:6c:2a:cb:59:b8:86:b5:d3:b7:
7e:e0:06:45:1e:78:45:31:8f:a2:32:24:5e:a2:c1:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C3:5D:E5:4A:82:BA:15:9B:97:60:0A:B2:9A:4F:95:AB:99:EE:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/a4248d18-50bd-3de2-869d-110232135253.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.crl
X509v3 Authority Key Identifier:
keyid:E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.168.0/24
141.193.0.0/23
IPv6:
2607:7540::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:c8:be:a3:b5:79:81:65:96:f9:c7:42:79:26:a5:3d:03:87:
d6:76:a1:77:44:d7:a6:95:aa:3a:e3:3b:59:b4:69:c1:b1:f3:
a2:37:eb:a9:ad:86:38:6b:50:e2:10:38:18:55:93:f4:bc:de:
2d:1d:cd:e1:22:bc:ee:dd:7b:4f:d5:31:5e:e8:98:0b:2d:fe:
c7:57:8f:f3:ca:b2:60:d5:25:49:2c:4f:83:d3:89:54:53:f5:
48:20:33:0d:cc:ef:23:6b:3e:27:93:8e:d8:28:3e:00:dd:5d:
a6:15:f0:71:f2:67:ca:8a:de:97:a4:c3:73:2f:ad:02:ef:33:
99:89:77:64:e6:ca:65:5a:41:14:c9:91:99:45:b4:d5:df:06:
ff:a6:30:84:94:7c:17:d2:1a:02:d1:18:a0:63:fb:de:6d:8c:
0f:68:fd:d6:24:c0:26:4e:b6:06:9d:08:77:4d:92:3e:6c:75:
b3:e7:6c:7c:87:1d:1c:bb:92:07:c4:49:2f:f3:cd:c6:5d:44:
2d:ba:68:07:31:77:f3:59:19:86:08:d8:11:55:27:9e:cb:9f:
f9:d1:dd:60:7a:8e:43:4f:f2:df:ac:96:cf:0c:e3:38:88:2c:
80:75:ed:19:16:1b:de:24:a8:a0:04:0f:6d:27:fd:d7:72:4f:
6d:40:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:29:41 2025 by rpki-client