Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa
File: 8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa (raw, json)
Hash identifier: P+3fy5NlWU9aPr6KaBJiq3L+B21pXauJLY1ISsPM/g0=
Subject key identifier: 74:DB:98:0C:EC:FE:E5:28:5D:EB:27:CB:B7:DB:64:82:7B:2F:A7:C4
Certificate issuer: /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f
Certificate serial: 010D0C9F432858488AE0A51DBD056CAAC4DBEA00
Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 23470
IP address blocks: 23.147.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:a5:1d:bd:05:6c:aa:c4:db:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=a1ac6d3c-c67c-462c-9ea2-fdb544b92806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:c4:b3:d0:ce:95:a6:2f:68:15:98:33:78:
31:5f:5c:36:de:e3:47:0d:af:ed:d5:a4:5f:a5:13:
8e:d0:7f:c2:6f:88:19:14:73:8c:60:eb:98:71:6e:
e2:e1:75:8a:0a:63:b6:ca:02:2a:f2:c9:23:dc:0b:
9c:f2:7b:54:50:f3:43:90:c5:fd:ce:db:df:5d:bb:
1a:cf:ae:be:86:ae:38:da:a3:0c:20:20:38:bd:c2:
77:e7:4b:5c:67:fe:e1:77:dd:51:2b:fe:41:d0:dd:
04:80:9f:f9:aa:18:fe:d3:69:b7:c8:b2:b9:1a:e8:
39:34:41:56:59:02:14:85:20:8d:dc:b2:68:89:47:
bf:0a:f3:8c:4d:fe:a4:18:fc:21:1f:4a:8b:00:95:
37:66:b1:24:a3:41:f0:1a:31:69:72:d9:3b:6c:e7:
82:e0:95:7b:fb:26:cc:22:ff:2c:c1:f0:f4:75:77:
b1:c3:60:4c:b0:00:c6:48:1a:a1:9a:bd:15:62:b7:
99:70:ea:e3:34:18:c8:da:39:65:60:93:9d:73:5e:
1f:ff:4d:23:39:46:4b:9f:52:fe:4c:88:27:4b:2e:
1c:40:92:14:b0:93:31:ac:90:86:15:00:04:01:f6:
0a:52:5a:2f:d0:05:b6:03:97:24:54:c3:a2:34:5f:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DB:98:0C:EC:FE:E5:28:5D:EB:27:CB:B7:DB:64:82:7B:2F:A7:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl
X509v3 Authority Key Identifier:
keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:00:1e:aa:7c:b7:02:7d:23:2a:ca:83:e0:c0:26:de:e7:a7:
1f:e1:e1:5b:cc:0d:cd:1c:8b:52:c5:c2:57:59:5c:14:cd:95:
95:cf:41:52:19:c8:76:cd:97:8d:23:5c:1f:3b:22:06:43:74:
00:e3:88:60:64:c4:ad:ec:6e:5f:56:6d:f6:36:1b:5b:dd:aa:
27:99:86:32:e9:64:e8:8c:5a:5c:b6:ee:2d:c9:35:9e:7b:d5:
eb:70:aa:a5:00:47:b8:af:b5:a5:40:c8:2c:92:6c:49:4d:90:
fc:cc:fa:1b:be:31:e4:2f:d2:9b:5d:1e:62:df:41:28:10:66:
3d:1c:0a:1e:8e:e9:91:96:dc:cc:99:77:12:b5:dd:3e:71:23:
e9:5f:49:02:3b:b0:54:52:f9:e4:9d:77:da:ef:18:28:96:29:
45:51:7a:ca:00:2e:ea:4e:b2:c8:d3:b6:2c:95:d0:e2:f9:c3:
d7:68:64:f4:2b:08:d5:c1:99:9b:dd:b4:d1:26:24:78:a4:66:
2e:06:be:56:00:2f:aa:ba:b9:fd:09:02:bf:a4:20:23:1f:49:
92:ba:66:a7:08:47:c8:04:a9:fc:16:43:c7:6f:db:bb:72:6b:
ec:92:2b:50:c0:97:b8:fc:f5:4f:f9:78:22:c7:c3:d7:f9:1b:
fe:b9:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:14 2025 by rpki-client