Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/dca32146-dfdc-3078-86b5-f295935cc6e9.roa
File: dca32146-dfdc-3078-86b5-f295935cc6e9.roa (raw, json)
Hash identifier: +wdT8ycrwO0MM2obZVD4SODTtWq63uD9p0IDYRQyeI4=
Subject key identifier: 08:07:63:97:63:05:9E:B7:AA:FB:38:05:8A:A0:BE:80:94:AC:0D:51
Certificate issuer: /CN=cbb9348f-0e74-4fb3-9ea9-84626962cb22
Certificate serial: 010D0C9F43285848222FE39DEC0B70879A49F040
Authority key identifier: 44:2F:BF:B1:80:1F:E6:EB:A4:8F:A7:37:42:BA:68:31:1F:3B:47:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/dca32146-dfdc-3078-86b5-f295935cc6e9.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 53763
IP address blocks: 23.164.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:e3:9d:ec:0b:70:87:9a:49:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb9348f-0e74-4fb3-9ea9-84626962cb22
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=2754b6c0-9783-452e-b504-501fa5d8ab19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:74:08:70:13:a8:67:4d:d1:05:2f:c8:61:2d:
17:9b:3f:72:23:b9:71:b5:35:13:21:03:28:8c:93:
21:0e:60:ed:c0:64:f0:76:3e:02:a8:2f:ff:2c:96:
81:f8:31:ce:3d:3e:5c:7d:b3:cf:3d:62:ba:2d:da:
2c:86:31:bf:e2:9c:03:bf:8a:46:0a:87:5d:0c:c5:
04:7c:33:5c:99:4c:15:51:9a:c7:7c:39:37:09:47:
ec:6b:1c:5f:c5:78:3a:77:9f:c3:5d:47:9b:d6:1b:
aa:54:21:eb:dc:f5:0f:de:5f:54:a6:f9:8b:49:35:
ec:89:68:56:47:11:4e:59:d0:5b:ba:44:58:ea:3b:
d9:05:3e:fd:e8:88:fe:5a:f0:47:f7:9e:08:57:6b:
fe:14:a5:38:6f:eb:5a:66:a9:e0:22:2b:72:44:fa:
6e:65:40:5b:58:20:63:b8:8b:83:4b:03:2b:95:6b:
67:4b:fa:a6:78:2f:3f:50:01:7b:37:96:11:6a:8f:
30:52:94:b3:d5:8c:57:3a:22:b3:92:79:6e:82:37:
28:1d:f4:20:9f:f6:f2:16:27:5c:c9:7a:80:50:f0:
5f:c9:c1:bc:59:b1:b6:ef:bc:54:c4:39:83:34:e9:
0e:06:8c:f4:55:86:78:8d:e7:15:d5:c4:ab:2b:bf:
61:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:07:63:97:63:05:9E:B7:AA:FB:38:05:8A:A0:BE:80:94:AC:0D:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/dca32146-dfdc-3078-86b5-f295935cc6e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22/cbb9348f-0e74-4fb3-9ea9-84626962cb22.crl
X509v3 Authority Key Identifier:
keyid:44:2F:BF:B1:80:1F:E6:EB:A4:8F:A7:37:42:BA:68:31:1F:3B:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cbb9348f-0e74-4fb3-9ea9-84626962cb22.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:5d:90:eb:4c:bf:e8:cf:8a:6d:36:ee:38:41:24:93:36:50:
0b:67:50:a8:a6:0b:67:27:85:73:59:6d:3b:62:37:aa:92:f8:
e2:79:f4:d1:c2:95:ca:f3:f4:f3:29:d0:27:84:c5:a4:41:b3:
10:73:fe:f8:1e:b7:83:a9:70:08:de:a3:21:9d:ba:29:26:e7:
4e:01:7f:1b:d3:b9:97:ce:a5:ee:6c:b8:91:1b:6b:b6:d0:75:
53:f3:91:40:56:e3:b4:4a:b2:0f:76:0d:04:73:f4:eb:cc:32:
3e:3f:30:fd:65:13:78:a3:72:33:ed:f7:0a:fb:0d:0c:2c:8a:
9b:dd:92:2a:64:36:5e:dd:c2:50:1a:cb:49:e7:78:b9:6f:9f:
aa:b2:15:97:8b:3c:6b:87:75:b4:7c:85:e7:35:3e:b6:01:7b:
99:ea:af:70:2c:45:ed:1b:e9:57:d1:24:7d:5e:45:13:46:8d:
50:85:8f:ad:2a:de:4a:f5:16:eb:e1:2a:30:93:89:f3:49:b3:
ee:c1:ea:86:04:e2:78:4f:61:08:56:6d:2c:3d:6b:5d:c5:03:
0e:e0:20:21:f8:cb:74:9f:0c:88:84:15:80:bb:cb:a4:fc:44:
c6:20:34:55:74:24:c6:db:42:1d:01:52:8a:26:0a:00:44:65:
d9:67:da:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:31:09 2025 by rpki-client