Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/f2a82324-0c03-3692-bfe0-a862152be9fd.roa
File: f2a82324-0c03-3692-bfe0-a862152be9fd.roa (raw, json)
Hash identifier: 3JjovePHs3YASb0ZVWxlusL8eE+4+/kftSdkkw/w4ZY=
Subject key identifier: EE:55:E9:A9:41:58:DC:61:FC:92:3C:05:6A:A3:97:1A:B9:D5:46:4B
Certificate issuer: /CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Certificate serial: 010D0C9F4328584883E5C61EE8E69D35FC232E40
Authority key identifier: EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/f2a82324-0c03-3692-bfe0-a862152be9fd.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 6461
IP address blocks: 23.172.184.0/24 maxlen: 24
2607:75c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c6:1e:e8:e6:9d:35:fc:23:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8ba34-ba4a-475e-9f98-6fd82aabc599
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=b0fb53cc-6685-4858-b6e3-00e29fd76a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:86:f3:bd:81:d8:31:03:5b:fd:66:fd:5b:
54:03:ed:be:f5:68:40:29:69:d9:ee:fe:e0:0f:9c:
3b:0e:cf:93:5a:65:fc:f0:69:55:fc:f0:5f:48:ab:
84:62:78:50:9a:b3:79:dc:89:ae:f4:73:1e:37:4c:
68:41:a3:fe:f2:23:e1:8b:c2:44:88:fc:1b:15:c7:
21:c0:b0:b9:f1:83:14:8c:e2:20:c9:46:67:99:30:
4f:e4:e7:c2:0f:32:07:25:ef:cd:f8:54:3f:f6:73:
81:2e:68:0e:24:6b:f0:0b:1e:6b:5e:86:7e:a1:7f:
22:1f:4c:96:29:8a:58:07:2c:37:13:ba:bb:9d:f8:
25:b5:f6:c8:1c:60:34:a6:dc:d4:da:f6:84:d1:9c:
50:8c:6a:a8:e1:3e:3f:d0:8f:3e:7c:d6:0a:7b:13:
19:c3:0d:77:63:28:ce:73:5b:c7:81:fd:fc:40:f3:
48:ec:76:97:9f:e4:6b:a7:17:87:17:a3:1c:44:53:
65:7e:1a:97:78:34:5f:61:d2:8a:e0:e0:33:93:33:
40:34:03:5d:a5:43:c1:8c:a9:32:fc:9d:e7:18:32:
bd:0b:d5:aa:34:fc:b4:81:11:87:7e:48:77:f2:60:
83:4b:db:54:f6:18:a7:5e:45:db:3b:d4:71:0e:6d:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:55:E9:A9:41:58:DC:61:FC:92:3C:05:6A:A3:97:1A:B9:D5:46:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/f2a82324-0c03-3692-bfe0-a862152be9fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.crl
X509v3 Authority Key Identifier:
keyid:EA:00:6E:F9:15:E0:68:74:E9:40:41:BA:35:41:15:44:0E:F2:AA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5e8ba34-ba4a-475e-9f98-6fd82aabc599.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.184.0/24
IPv6:
2607:75c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:f7:41:d1:34:29:d3:80:93:23:86:8f:5a:f4:d7:17:13:e2:
50:7b:8c:47:40:48:cb:cd:5a:a1:f0:d2:ba:0d:f0:4f:6b:bf:
b5:2c:1d:74:d9:91:04:06:9b:a0:97:21:e1:84:73:be:6a:ee:
10:ec:ab:03:94:1b:ff:db:0a:e2:80:6e:e7:4a:8c:14:1d:66:
04:42:df:e0:21:c3:04:1e:8c:93:7b:11:38:33:c7:12:2c:87:
88:ad:bd:44:c8:01:d0:4f:dc:e6:89:19:fb:d0:66:18:d2:bd:
9c:92:cc:28:33:e1:ba:c1:a8:c8:33:83:2d:24:15:af:61:17:
d8:de:fd:69:f6:d5:56:4e:81:25:b9:eb:88:db:5c:60:d5:bd:
51:b8:73:ab:2d:ac:8d:3b:0d:80:22:6a:ed:90:0c:2a:10:f3:
b9:f1:20:a3:e5:2e:7b:a4:4b:ab:ab:d6:53:70:f8:0e:61:e0:
ed:b8:61:c1:3a:b5:63:0f:23:fc:34:c6:98:36:55:5e:1c:00:
f6:d0:5a:1f:9b:09:dd:6b:72:63:88:8a:73:ab:39:09:62:75:
c8:35:bc:58:c1:d7:d7:13:be:da:83:dc:ab:38:32:17:06:fe:
e8:ec:cf:9b:c0:49:cd:e3:f7:f1:3a:c9:f3:d7:2d:13:13:a7:
5e:ed:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:52:59 2025 by rpki-client