Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa
File: cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa (raw, json)
Hash identifier: LBAjNY+LXshrhFZ5Y9AUme1wTKy8yr88jypCZ0l938M=
Subject key identifier: 31:84:F0:61:47:8D:C5:2A:68:9A:13:BB:02:72:B2:29:3B:EF:3D:32
Certificate issuer: /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial: 010D0C9F43285848222FCB45F30985A915645780
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 44324
IP address blocks: 23.149.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:cb:45:f3:09:85:a9:15:64:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=229d49cf-f248-47ce-b792-c3213fe8570a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:55:6e:50:11:88:5c:b1:93:a6:1b:5b:42:95:
46:96:d2:c2:16:4d:4b:f1:d9:0d:65:4b:39:fc:77:
b5:14:91:63:46:2c:c5:2a:ec:23:a0:86:f8:fc:1a:
18:af:59:ae:fc:38:d8:72:cd:c0:00:c0:97:89:58:
91:88:37:5b:fb:0e:ac:d2:0b:d3:99:eb:1a:a1:81:
ad:16:03:e7:eb:32:23:d2:9b:95:61:79:4f:66:e9:
4c:66:d4:67:2c:01:7b:89:a3:2f:3d:60:97:e2:f2:
24:eb:16:41:99:37:67:bd:09:fc:42:83:3e:6d:68:
34:18:a1:85:c3:67:d7:30:78:40:56:22:31:9c:f2:
a5:bd:45:96:37:70:01:ad:35:8e:e3:0a:41:96:fa:
a1:a2:0f:ad:44:db:cb:6e:e0:d8:95:38:84:95:74:
5c:79:22:ab:f5:4b:f0:a5:22:42:9b:20:9e:ec:ec:
00:15:45:cd:55:c0:eb:31:db:03:90:9e:07:f5:77:
5a:aa:cc:c1:35:1a:0f:c3:63:87:23:29:e8:2b:2b:
21:27:8f:93:54:c9:6e:56:1e:d8:de:19:a9:e3:e4:
0b:75:bf:ab:73:f3:56:5e:06:bb:ff:9d:2e:21:04:
3c:74:cb:d1:96:b9:b7:b3:4c:ea:af:37:20:b7:49:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:F0:61:47:8D:C5:2A:68:9A:13:BB:02:72:B2:29:3B:EF:3D:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/cb1ba6c9-8382-32b7-bb57-f9de734c926c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
X509v3 Authority Key Identifier:
keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8b:f2:f3:a3:fd:1b:00:33:7e:f8:aa:48:b5:c2:9f:3d:33:
29:96:b0:e5:4d:eb:10:d0:ba:43:ec:06:38:00:b5:54:1f:53:
68:52:c0:a4:66:f3:3b:e2:86:11:fe:f6:b8:0f:d2:65:58:de:
00:b0:2a:da:0a:a8:cd:9f:bd:81:67:b2:44:61:9b:33:53:88:
56:b3:0a:d9:b5:f7:67:0b:0e:03:6f:e5:be:d3:a1:bd:c4:f8:
85:fd:d2:30:e4:6a:d8:f2:b1:da:b2:91:50:d4:c9:68:51:4f:
d2:01:cb:33:4f:9f:b9:ea:60:eb:14:b3:cf:92:84:d8:b2:bb:
e5:c6:0c:64:22:3e:bd:36:d6:b7:09:ba:73:c9:86:5d:c2:6d:
13:7d:47:f2:c8:ad:fb:1a:2e:d0:67:c6:f6:57:9d:c9:03:42:
66:2b:5e:fa:87:d8:b7:f8:b3:2b:d9:c7:a2:6a:2f:42:d0:fa:
9b:62:d8:d8:69:74:d4:22:66:f7:c8:f0:7e:5c:2b:10:1e:09:
5f:55:99:68:29:15:95:14:36:9d:81:09:62:d1:6a:58:f4:fc:
9e:1f:92:b0:e0:b1:94:c1:0e:ca:43:f3:e4:e4:12:12:af:03:
7f:dd:5d:ea:a1:fc:ba:b3:94:a0:d0:78:ce:c7:65:96:06:1b:
d0:08:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:20:43 2025 by rpki-client