Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/1c051582-9bb7-3c4f-b4cf-425692f87662.roa
File: 1c051582-9bb7-3c4f-b4cf-425692f87662.roa (raw, json)
Hash identifier: qzrzWxoj3IC9jy6geS9005f386lIl3DCf+P3Sz3a9Zc=
Subject key identifier: 75:DA:BE:DB:65:AD:08:7E:42:35:67:08:6B:E8:52:3A:DF:39:F5:2D
Certificate issuer: /CN=467861ee-0aa8-4688-af94-7d540e2ddc56
Certificate serial: 010D0C9F432858486695BC777C3927B3225C0FC0
Authority key identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/1c051582-9bb7-3c4f-b4cf-425692f87662.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 400529
IP address blocks: 23.161.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:bc:77:7c:39:27:b3:22:5c:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467861ee-0aa8-4688-af94-7d540e2ddc56
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=648f1002-e77d-414c-baf6-1f313933c38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:f9:57:f9:af:83:4d:d6:39:7a:21:d4:cb:
90:40:92:8c:53:fa:9e:66:13:99:d8:4c:ca:df:f6:
e7:03:26:d0:69:4c:63:4a:55:ba:a7:a6:1f:fa:9b:
20:b7:8a:dd:e9:b9:17:25:b5:fc:22:16:a1:fd:c1:
97:9e:d9:c5:fc:52:5e:21:a5:29:7c:ab:40:3b:9d:
40:a5:4a:e7:35:4b:00:cb:13:3c:1f:3d:09:e0:45:
b4:4c:ef:d5:48:03:4d:b8:88:3e:5b:d8:3c:99:99:
aa:da:39:f8:6c:24:48:f7:1e:d7:79:ce:6c:9d:47:
56:33:19:a9:e3:52:58:0a:d8:b9:cf:3b:ed:24:be:
fe:05:83:ee:65:2a:10:ca:50:b3:fa:06:00:3f:6f:
82:8d:57:a7:c9:fe:f3:0f:37:ea:23:88:97:c3:22:
6e:50:78:33:03:41:12:5d:51:59:61:dc:2e:64:62:
47:22:7a:6e:b2:bb:5e:26:e1:c7:b9:61:26:6d:5d:
a6:c3:2f:74:d5:72:8b:fc:15:d9:8c:43:ef:a2:68:
6a:4e:b3:2d:a7:33:c9:86:c3:46:6b:00:ff:7a:02:
25:c5:c1:d6:2c:19:5f:6d:83:83:ae:1e:c2:51:0b:
8b:db:6a:70:ec:8c:58:e6:c2:c6:cf:b3:d5:8c:f6:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:BE:DB:65:AD:08:7E:42:35:67:08:6B:E8:52:3A:DF:39:F5:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/1c051582-9bb7-3c4f-b4cf-425692f87662.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl
X509v3 Authority Key Identifier:
keyid:13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:80:6f:82:0f:6d:94:73:46:63:a9:cf:43:c4:c7:a8:aa:f6:
ec:f4:4f:c4:73:28:10:24:60:01:b3:59:71:08:95:19:c7:23:
87:6d:28:0d:c2:a0:c9:17:64:95:ea:bb:ba:ec:f2:cc:d4:6e:
6a:27:cc:53:14:3c:65:2c:f0:5e:b4:d8:39:d1:e0:14:aa:3d:
5c:10:1a:47:31:cd:b8:1d:b0:94:24:43:d0:ff:f1:8e:bb:49:
dc:ef:6d:16:f2:9e:8f:78:b9:4a:2b:19:0a:9e:8a:78:14:7b:
9e:78:2b:b4:fd:af:37:89:da:ba:ac:80:20:60:d0:5a:c1:f2:
5f:90:fc:91:e6:5e:ce:d8:d4:40:13:70:04:94:e6:43:74:ed:
ab:a6:ac:49:5b:9a:b5:a8:5d:f0:76:c7:38:d0:5a:e0:d6:92:
97:69:84:f6:a8:ff:e6:d9:3d:0f:d8:88:61:06:65:0f:50:ef:
18:ef:df:e7:de:6a:da:7a:81:7f:d1:4d:cf:9a:29:fd:10:67:
67:ea:d3:5a:23:b3:c7:37:1a:2b:b6:62:33:de:c2:6e:87:05:
bd:18:70:23:28:be:f0:e6:fb:e2:5f:3c:fb:62:6b:4e:14:4a:
ca:28:9f:da:3e:74:20:3f:71:e8:1a:a7:a5:42:df:5b:9e:39:
dd:01:ca:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:26 2025 by rpki-client