Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa
File: 2d0718a0-7c15-3300-af7e-f83127e2444a.roa (raw, json)
Hash identifier: JE0p86AgJNBJBWNLkoGvpVWtEqWv5IjzZzw7n6L1V+w=
Subject key identifier: 85:07:D8:A9:1E:CA:41:CE:82:E0:4B:5A:E4:E0:F0:59:9B:B6:AA:EB
Certificate issuer: /CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78
Certificate serial: 010D0C9F43285847F2BA3138C09BE92B35678220
Authority key identifier: 54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa
Signing time: Thu 21 Nov 2024 02:00:38 +0000
ROA not before: Thu 21 Nov 2024 02:00:38 +0000
ROA not after: Wed 19 Feb 2025 02:00:38 +0000
asID: 400893
IP address blocks: 23.153.0.0/24 maxlen: 24
172.82.8.0/22 maxlen: 24
2602:ff2a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:ba:31:38:c0:9b:e9:2b:35:67:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78
Validity
Not Before: Nov 21 02:00:38 2024 GMT
Not After : Feb 19 02:00:38 2025 GMT
Subject: CN=684cad5a-6509-47d9-b3f4-9acf5887dbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:9c:93:f5:b4:f0:86:fb:95:84:38:03:16:
93:1e:7c:83:ad:f7:54:85:98:7a:1c:e1:f1:e0:59:
6a:b1:39:29:5c:ef:9e:91:5e:97:7e:b2:ef:4b:e5:
08:13:6c:74:e4:da:09:bd:10:87:2b:6d:31:fd:94:
07:6a:0a:fa:a2:d0:e3:fa:8f:7f:dc:4a:5e:11:d0:
90:d4:77:dc:79:67:98:6c:b1:e8:b7:5b:c9:04:59:
ab:25:69:ca:67:a4:54:1b:3b:5f:47:13:bb:3b:47:
c7:d4:c6:ab:96:04:be:cc:1c:ec:d5:86:5a:e7:52:
fa:7b:01:fe:fc:ff:8d:5a:f4:87:17:9c:be:60:61:
81:5b:ec:1c:6d:64:f0:71:c1:c5:e6:2d:85:b9:94:
60:1d:51:12:33:18:54:51:47:2d:61:23:cf:68:b0:
c5:ad:38:a8:6c:f7:d4:e3:06:75:f6:ab:3c:69:07:
95:cc:9d:41:22:c7:27:c5:f2:0b:b6:75:53:94:34:
06:63:a6:ea:8b:2d:42:a3:b2:5d:6a:dc:6c:26:62:
bb:0a:c4:e6:36:b4:5e:f0:3e:06:66:a0:78:f7:be:
7e:30:e1:88:78:a1:8d:e3:d6:04:26:77:33:19:54:
88:dc:a5:ec:82:81:02:d9:61:ec:38:a9:8d:50:59:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:D8:A9:1E:CA:41:CE:82:E0:4B:5A:E4:E0:F0:59:9B:B6:AA:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl
X509v3 Authority Key Identifier:
keyid:54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.0.0/24
172.82.8.0/22
IPv6:
2602:ff2a::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:b3:d6:8b:aa:4a:c5:07:0b:db:29:61:34:ea:bd:e3:32:fa:
19:e6:c0:7a:cb:76:a8:43:3d:f9:af:c9:ba:60:58:f9:18:6e:
a5:fd:1e:60:35:dc:9f:5e:de:19:91:26:2e:0e:c1:72:89:12:
78:80:95:34:48:5e:ed:b6:5f:6e:89:b6:9f:0f:b1:2c:1f:1a:
fa:c3:8f:2d:9d:05:4a:0d:03:0f:ec:f7:a6:11:30:2a:7d:b6:
c6:a4:8f:24:bf:1f:9f:00:ad:0e:3d:60:a8:c2:87:82:c7:94:
c5:dd:08:61:f8:17:59:09:d7:d5:53:2c:85:30:35:1c:2d:ff:
54:05:05:ae:fb:93:7d:b8:4f:26:f5:dd:53:13:ba:23:fc:9f:
e2:5c:46:5c:a0:c6:74:77:6c:81:f7:5e:ff:07:55:fd:af:2d:
5f:d3:98:cf:8e:66:94:39:ea:e3:be:19:55:d9:f7:45:34:e2:
44:6a:38:2e:92:e7:a2:60:28:9b:4c:4d:33:02:6c:94:37:5d:
b7:c8:67:6b:af:1a:ae:65:b5:23:f4:61:1f:ea:4d:ad:c9:c8:
3a:d8:5d:4c:6d:ed:cd:0d:94:de:ac:df:9b:78:bc:73:9d:af:
e2:99:94:15:37:ca:50:94:ee:b9:11:85:55:7d:ed:88:28:55:
75:e8:e0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:36 2025 by rpki-client