Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa
File: 8459abed-f045-31a6-8fe6-16d82354e576.roa (raw, json)
Hash identifier: DZoiCKPnjV0HC/xNxY8j6tKtSMO7vD9tmX1WEum+C8s=
Subject key identifier: 19:3B:95:50:78:F1:E8:3A:84:37:56:4A:35:58:E9:FF:A2:9C:CE:3A
Certificate issuer: /CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
Certificate serial: 010D0C9F432858480EA50EFA4F4E5025EF1C7200
Authority key identifier: 42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 399976
IP address blocks: 23.153.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0e:fa:4f:4e:50:25:ef:1c:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65192f53-8b07-4c3f-a6b0-e9e42292d31c
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=fdfeab5a-60c6-412c-bbab-9e688f027481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:de:ce:58:e6:0d:35:2a:6b:0f:c4:8a:43:
a2:d9:64:ff:01:18:0e:12:ba:09:9c:6d:d3:4a:97:
ec:7a:44:ea:b7:55:4c:bb:1f:b8:15:79:e0:1e:a9:
d4:6f:3a:ff:55:cf:11:18:aa:ce:9a:87:49:6e:a9:
5e:43:ce:35:2e:59:a2:f2:ab:49:68:fc:1a:54:db:
6d:e5:1d:77:36:b3:83:74:65:ef:b9:d5:36:0b:c4:
7a:27:00:0d:40:2b:b9:0d:04:69:7f:66:c1:af:15:
55:40:9d:67:83:9e:29:64:01:63:f6:8c:d4:a2:8c:
f3:ad:7f:0f:0c:c3:2d:a3:4e:7d:e3:c6:c5:6f:51:
c0:60:23:79:18:11:6a:0b:cc:b9:34:c8:96:a5:e5:
30:50:f2:2a:ac:e6:22:22:e9:a1:20:6f:8c:b1:f7:
43:72:80:85:a8:f1:a5:e7:f9:a0:9f:7e:17:ff:bc:
99:cc:a9:5b:8c:a2:2a:f3:39:38:47:ca:cc:7c:9c:
cd:9d:f3:c3:0d:44:3e:6d:a1:2b:d5:13:cf:4a:8d:
a1:77:31:96:d9:bf:67:c7:e5:0d:cb:61:bc:64:78:
7e:81:d0:e6:26:d1:98:ea:ac:e2:25:c5:68:d6:e1:
21:4e:6c:2a:5b:2e:8c:10:0b:be:66:5e:91:43:bf:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3B:95:50:78:F1:E8:3A:84:37:56:4A:35:58:E9:FF:A2:9C:CE:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/8459abed-f045-31a6-8fe6-16d82354e576.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c/65192f53-8b07-4c3f-a6b0-e9e42292d31c.crl
X509v3 Authority Key Identifier:
keyid:42:5F:9D:FB:E3:9D:14:8D:07:C4:35:16:CE:E5:25:0D:38:F6:14:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/65192f53-8b07-4c3f-a6b0-e9e42292d31c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:cc:e9:f5:e3:9a:0c:cf:1a:b7:00:db:d7:72:54:a5:f1:47:
de:e8:ba:de:74:21:f6:ba:71:2d:34:c2:d4:ef:73:4b:56:a8:
19:0c:20:11:f6:8d:3d:52:0b:7e:17:59:ab:a2:ea:f7:d4:8d:
84:b1:72:f1:15:b7:60:92:e1:07:fe:8b:ce:2a:c3:57:38:fe:
4a:2c:0f:e9:cf:05:e6:8a:c1:56:7b:03:02:d5:24:2c:36:25:
49:e4:bd:8f:48:34:c0:ae:23:7b:6b:94:8a:d4:d6:db:a4:f6:
f3:a2:7d:25:eb:a3:66:5a:50:aa:8d:8d:67:60:c0:24:93:c0:
92:1b:ba:7a:80:d6:ff:e5:d8:5f:51:51:95:67:fa:b0:f3:28:
10:f4:91:e3:6f:bf:50:86:16:3b:46:ca:77:b7:41:bf:e3:eb:
85:03:d2:0f:91:8b:9f:5a:30:9a:34:3e:82:04:78:c2:e0:57:
65:53:64:1a:ea:6e:e7:4e:49:3d:bb:e5:46:54:42:da:d5:34:
67:66:08:da:5e:95:d5:ce:77:5c:cf:16:76:19:06:f1:22:43:
00:6b:c9:d5:06:89:b5:03:3d:6a:37:ce:31:b6:83:ee:60:ee:
4b:86:af:0b:8a:c1:e1:8f:42:da:91:1f:95:0d:ce:45:f3:67:
93:26:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:47:36 2025 by rpki-client