Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/c9c9bd16-5db3-391e-9cb2-3837c1b11ab4.roa
File: c9c9bd16-5db3-391e-9cb2-3837c1b11ab4.roa (raw, json)
Hash identifier: hPecUSW2LEH4MDU2ooNns9wx8jnkSgT6KrN164ieYgo=
Subject key identifier: B0:B0:CF:C1:BF:A3:41:AC:54:06:35:AF:F5:46:18:C8:D6:4A:C8:B8
Certificate issuer: /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
Certificate serial: 010D0C9F432858487CEB3469248FBE2E5D3B5CC0
Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/c9c9bd16-5db3-391e-9cb2-3837c1b11ab4.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 30036
IP address blocks: 23.159.24.0/24 maxlen: 24
2602:fa53::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:34:69:24:8f:be:2e:5d:3b:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=d2845b2e-4020-4f25-9bdb-0d0b3bbf1c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:da:b8:d0:9c:f0:94:01:74:fe:22:5d:b3:2b:
58:31:4a:fd:6a:28:58:2b:b3:b2:82:7e:31:4c:a5:
11:89:34:a4:de:f0:61:c4:12:c9:3e:b2:68:ea:22:
e3:e5:af:34:53:16:a8:47:ff:c7:30:8b:f8:f9:af:
7b:3e:3f:57:f0:ac:a7:1c:a9:21:00:ce:4b:f4:a4:
1a:7d:3c:ff:51:33:e8:cc:ae:ee:5d:13:54:ee:35:
ec:b2:bc:95:34:c5:34:37:a6:47:1f:bd:f4:c0:c2:
3d:29:78:f8:cd:32:7e:67:49:f1:32:9a:50:21:02:
e9:21:1c:94:b5:e7:bb:d8:0d:27:47:32:ed:24:25:
06:9a:a7:6d:f4:a8:b8:9a:20:9b:96:a4:16:5a:67:
22:3a:7f:2c:f8:07:91:95:58:8d:d4:58:11:4d:6a:
26:18:ef:be:b7:11:7b:f8:ad:f5:d7:31:8b:c8:1c:
65:5b:07:0a:23:4b:bf:2b:55:ef:5c:07:c3:eb:7a:
63:1a:ea:96:36:9e:23:59:bb:98:ce:0b:df:2e:41:
0b:a3:68:85:13:a9:44:73:09:a8:de:66:4a:13:7b:
76:9c:0a:69:83:98:bb:bc:d9:09:f0:02:8e:63:cb:
60:88:10:3b:68:9d:71:d2:49:b7:3b:a0:27:b8:4f:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B0:CF:C1:BF:A3:41:AC:54:06:35:AF:F5:46:18:C8:D6:4A:C8:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/c9c9bd16-5db3-391e-9cb2-3837c1b11ab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl
X509v3 Authority Key Identifier:
keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.24.0/24
IPv6:
2602:fa53::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:52:c4:ea:a5:06:52:6e:c5:b6:7d:99:19:92:32:2a:40:2c:
07:ca:79:6c:7e:9e:b8:a9:ae:96:7f:93:10:0a:4d:23:05:17:
4c:40:a8:69:00:57:68:62:95:b7:c7:d8:da:ad:2c:d0:13:dc:
c4:65:20:6b:08:1c:62:0a:09:fa:d7:38:d8:93:46:7d:44:ed:
62:dc:8e:96:c4:09:88:d7:64:9a:42:8e:b2:6c:4f:65:84:b0:
7f:9f:8f:ba:40:34:13:1a:3e:41:74:27:64:9d:03:3c:f8:3f:
d6:93:bb:b8:3d:f0:a6:6d:46:69:cd:15:09:02:2f:26:55:42:
25:fc:73:ee:4f:b9:9f:6e:68:0c:df:b8:1d:ac:15:fc:08:c0:
95:53:8c:7d:f9:52:a9:0d:63:19:25:d8:c5:33:10:aa:ae:59:
92:0a:0e:e9:64:72:53:67:b8:ce:d5:8e:be:65:a5:8d:20:fd:
32:df:a1:58:66:20:b6:07:6d:85:87:53:3e:ca:3f:48:b5:7d:
f6:d3:e6:4c:e1:83:7e:ba:92:bd:e5:ec:08:8e:43:51:a9:bc:
02:cc:ff:5d:df:fd:f7:ea:91:cf:0e:bc:3f:25:60:87:36:28:
d7:08:b9:e3:65:ca:32:e9:0c:80:aa:17:68:f4:a2:d5:05:26:
74:45:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:34 2025 by rpki-client