Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/e1e68fa4-9ac2-3855-aa5b-b0b04b89abaa.roa
File: e1e68fa4-9ac2-3855-aa5b-b0b04b89abaa.roa (raw, json)
Hash identifier: 9XsKmdKyped6e0nNLydEZ2Js5DgIXF9uFbqqam+yljA=
Subject key identifier: 3C:77:5C:8A:97:6A:BA:CE:17:48:1F:AD:2F:B4:C7:9B:33:37:86:8A
Certificate issuer: /CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
Certificate serial: 010D0C9F43285848494560E116E3C269D40FE0C0
Authority key identifier: 6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/e1e68fa4-9ac2-3855-aa5b-b0b04b89abaa.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 393610
IP address blocks: 23.190.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:60:e1:16:e3:c2:69:d4:0f:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=2be22bae-ec58-4850-a26c-05f493b18db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:16:35:df:44:2c:fc:6d:17:0b:08:dc:26:
a7:54:81:d7:a2:02:16:bb:4e:d0:c6:22:fd:cf:76:
a0:cf:d6:91:ca:c4:fe:2c:4d:ce:71:df:4e:82:14:
55:ae:30:1b:5a:f8:71:43:0a:81:40:33:f2:97:68:
22:cb:87:49:55:22:50:69:da:2d:b4:58:f2:cd:7d:
8f:08:28:0c:cc:24:14:a9:17:0f:aa:e0:ea:6c:57:
c1:86:df:eb:c3:2c:c1:ad:35:7f:13:0b:62:ab:35:
84:75:e6:42:fd:47:8d:da:64:16:ad:35:53:e5:ed:
78:b0:d0:31:9d:94:25:03:c4:40:ff:31:53:10:28:
54:7c:60:8f:1b:ef:a3:fc:f2:4f:ba:97:28:71:52:
56:23:13:0c:e6:b6:d9:3a:ba:4b:86:1f:6e:f6:db:
77:72:b4:55:2b:a2:67:44:28:36:06:a6:e3:ea:6e:
f0:49:4e:9a:de:e5:db:b0:bc:7e:66:d9:36:0c:20:
80:15:e3:90:ae:de:87:34:1a:c7:ab:11:d8:8f:74:
46:bb:d4:a9:b2:e5:21:9f:ae:b5:da:1e:62:27:36:
ea:fe:61:15:df:21:47:aa:6a:f5:8f:b1:9c:90:a6:
f0:3f:71:2a:17:96:e2:27:d9:3a:30:f3:58:aa:32:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:77:5C:8A:97:6A:BA:CE:17:48:1F:AD:2F:B4:C7:9B:33:37:86:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/e1e68fa4-9ac2-3855-aa5b-b0b04b89abaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl
X509v3 Authority Key Identifier:
keyid:6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
sbgp-ipAddrBlock: critical
IPv4:
23.190.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:22:56:f6:08:ca:ff:a6:12:f1:08:24:0c:1d:f5:43:be:d5:
08:bb:c1:3f:57:e5:7a:21:0a:c8:cb:21:8a:41:11:8a:a4:88:
cc:eb:ad:8f:b8:b7:ee:7f:0e:47:b3:7a:07:2f:2d:a8:68:64:
bf:38:a5:14:a7:b1:8d:43:74:c0:53:53:8a:0f:3e:c0:dd:a9:
fd:e5:6e:76:9e:d1:f3:5e:68:0f:b0:82:b2:aa:34:b3:d5:9d:
70:d7:7a:1d:22:a1:ba:93:d7:0f:8b:c5:34:57:b4:1d:f6:b2:
a7:e4:c6:5f:2d:55:7a:ef:f3:0e:d3:9b:1c:74:f8:5f:c9:52:
0b:68:dc:61:e9:44:3d:96:cc:56:e2:be:fd:ab:b9:6f:f7:89:
a9:bd:6f:87:02:45:27:a2:e0:df:d2:a3:b3:89:2a:43:06:c9:
fd:55:26:b2:7c:f4:80:f2:98:9c:0e:4d:ef:ad:e4:38:11:58:
11:b3:d9:6c:69:3a:5b:60:35:31:18:d0:bc:18:61:d6:57:e7:
a9:8d:ee:8f:75:a7:a4:04:fa:3c:c3:9e:e8:c5:6c:d5:be:30:
d2:d5:f9:f8:bf:66:e1:23:9c:ef:59:11:24:52:7a:59:04:98:
c3:1f:86:9a:3d:ac:fa:8c:04:54:34:37:73:01:74:ac:5a:b0:
c5:fd:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:44:05 2025 by rpki-client