Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa
File: d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa (raw, json)
Hash identifier: MncFPQUL1c7Gu/+EyxYnKXwK6q9V3doegTfBDyowf/4=
Subject key identifier: 30:D2:3E:0A:01:C9:CF:93:D9:24:17:D9:3A:81:82:1B:69:E0:EB:8B
Certificate issuer: /CN=6ea4077d-c1f0-46d2-b575-7da368923370
Certificate serial: 010D0C9F4328584898D610209EDB35C3CCF4D740
Authority key identifier: 69:ED:46:13:6B:C9:9E:A9:F8:F1:2E:36:8C:B6:D8:0C:F1:AA:52:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 397427
IP address blocks: 23.145.224.0/24 maxlen: 24
23.145.225.0/24 maxlen: 24
66.245.160.0/22 maxlen: 24
142.202.206.0/23 maxlen: 24
2602:fe4c::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:10:20:9e:db:35:c3:cc:f4:d7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea4077d-c1f0-46d2-b575-7da368923370
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=fe58d6f7-81b3-4e12-9afe-2cf375a08a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d1:70:d6:42:b7:25:43:4a:2f:a5:a2:b6:b9:
46:46:47:75:6f:3a:99:de:96:d0:c9:0c:7d:5a:e4:
52:9f:fc:60:c1:f0:d5:88:f7:2d:90:9c:8c:b9:db:
c9:bf:3b:0e:fd:97:15:c2:be:cd:51:6e:44:68:1d:
d0:9a:13:fa:e0:d4:c1:2e:ad:a8:a4:11:31:1c:9c:
ae:97:f8:41:f5:32:39:da:99:e2:ab:51:e3:6a:cb:
3c:0a:08:89:53:1b:2b:f6:d9:a6:af:75:51:45:88:
2f:90:a1:11:1f:b8:bf:e9:a7:84:04:cf:50:e1:8b:
b8:c5:0d:82:4f:4a:1d:68:df:2e:d2:5f:ab:df:04:
49:f2:07:45:e7:1e:18:b8:71:a2:90:38:56:9d:d2:
87:76:18:b9:9e:ef:08:a6:cf:4f:fc:d9:14:4b:e4:
a9:6b:a2:51:7e:6c:38:a7:04:d1:80:c3:2d:bb:fc:
bb:04:ea:6a:32:a6:c4:76:23:9f:53:b4:b5:2c:54:
27:cc:ce:9d:5f:1e:89:dc:b7:4e:4e:bc:5b:6e:ee:
c6:df:62:42:5e:e4:ee:26:b7:a2:c7:e9:c5:4a:76:
c2:37:69:e2:68:50:64:ea:59:0f:b1:b3:77:e7:d8:
8c:ea:70:e1:e4:13:fb:73:d6:df:95:5b:aa:f4:f0:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D2:3E:0A:01:C9:CF:93:D9:24:17:D9:3A:81:82:1B:69:E0:EB:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/d5703d72-6825-3763-a8ee-6ec90a3df4bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370/6ea4077d-c1f0-46d2-b575-7da368923370.crl
X509v3 Authority Key Identifier:
keyid:69:ED:46:13:6B:C9:9E:A9:F8:F1:2E:36:8C:B6:D8:0C:F1:AA:52:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ea4077d-c1f0-46d2-b575-7da368923370.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.224.0/23
66.245.160.0/22
142.202.206.0/23
IPv6:
2602:fe4c::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:b7:53:6a:7c:e1:e4:d7:9b:8f:b7:3b:f4:f2:b4:4f:4a:37:
b4:a9:22:c5:ab:72:52:28:6f:f4:29:70:cd:47:31:dc:60:d4:
a6:b2:fc:f9:c1:77:76:e3:8b:c5:53:b4:97:62:3e:6f:93:a1:
96:2b:91:8b:e2:e1:f3:e3:c6:b2:b5:52:d0:12:62:c0:12:a7:
26:81:94:2b:e0:3e:05:0f:82:9f:94:3b:8f:56:5b:42:40:bb:
52:5e:7f:cf:13:3b:9c:ce:18:ae:79:a8:e3:3c:95:ee:f5:6f:
81:ef:e5:5c:ef:28:8a:93:7b:f3:e7:36:e2:61:03:1d:41:54:
a9:5b:c4:0d:62:30:c2:96:a3:e2:d9:38:b1:7f:fb:b0:cb:78:
bd:82:14:f5:1c:68:7e:65:c9:49:63:6f:a0:79:52:9a:0f:38:
d8:d6:ab:8d:d0:6a:07:50:6e:d7:07:b3:aa:1e:12:b9:fd:af:
cc:29:39:9f:a3:ef:60:56:89:28:00:de:20:fd:19:1e:f3:05:
45:ea:a5:35:cf:bb:79:cb:88:fb:f3:69:30:e1:79:dc:4b:78:
39:9d:41:1c:38:da:2a:82:e9:ae:f9:51:97:e1:6d:90:5b:18:
8e:b1:13:57:e7:e2:b7:cc:28:87:97:6f:c8:97:3c:94:e2:50:
9f:46:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:42:37 2025 by rpki-client