Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa
File: 856f6f8b-6115-3749-b368-928efb2b3cdb.roa (raw, json)
Hash identifier: Lbj5mta3j3GJlKSLNNQlVzQrd1B6lxjkNbiqk1UDlCI=
Subject key identifier: 30:76:61:C4:8B:5C:5E:17:D7:A7:87:A7:ED:11:0C:7D:F5:C8:5E:FE
Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63
Certificate serial: 010D0C9F432858482BF55B87C8C6F91A6A02EC00
Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa
Signing time: Wed 11 Dec 2024 14:00:52 +0000
ROA not before: Wed 11 Dec 2024 14:00:52 +0000
ROA not after: Tue 11 Mar 2025 13:00:52 +0000
asID: 21738
IP address blocks: 23.150.41.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2b:f5:5b:87:c8:c6:f9:1a:6a:02:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63
Validity
Not Before: Dec 11 14:00:52 2024 GMT
Not After : Mar 11 13:00:52 2025 GMT
Subject: CN=9d171840-809a-4dbc-9ee5-43dbb6e6be88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:b0:99:40:d0:d9:f2:9a:1b:7b:35:55:ce:
4f:85:8e:3f:ac:e0:9e:42:e2:d4:7d:d2:96:f8:f7:
a5:1b:df:e1:73:af:dc:ac:1d:7c:72:a7:90:58:1b:
b9:5b:b6:f4:e2:af:35:29:20:cc:82:d6:0a:4c:0a:
d6:87:7a:60:8e:8f:88:3d:51:d5:e7:89:0f:a5:5e:
3f:c8:a6:28:2a:94:82:cb:5e:8b:3e:97:6b:d2:71:
21:af:f0:17:d1:7f:1c:cb:f7:01:5e:35:f7:4e:08:
78:0f:8b:6d:96:08:1c:8c:0f:de:d0:bc:04:eb:fb:
15:74:b1:51:20:2d:9f:07:ff:6f:ea:cb:29:49:f3:
c7:94:53:e4:ae:fd:0c:85:64:bc:4d:5c:ce:6b:37:
1e:40:19:1d:5c:52:c1:cd:a6:92:0a:16:a8:60:62:
d6:f3:b6:8c:20:43:73:6b:bd:c8:0a:4c:4b:7b:1f:
90:ef:33:4c:70:a3:5b:ba:9c:58:d5:c0:ef:58:c5:
69:d6:a0:76:33:81:51:a9:8e:96:c7:d0:c0:31:41:
f0:49:df:3a:ad:47:6c:32:c7:94:5a:37:40:f3:77:
e3:ca:71:bf:6b:e1:37:fd:91:39:46:57:2d:eb:d7:
c0:1b:2e:a1:80:57:65:cd:13:d6:6c:76:1e:3d:9f:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:76:61:C4:8B:5C:5E:17:D7:A7:87:A7:ED:11:0C:7D:F5:C8:5E:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/856f6f8b-6115-3749-b368-928efb2b3cdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl
X509v3 Authority Key Identifier:
keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.41.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:15:bd:b5:b3:22:a4:0d:94:02:ca:ec:2e:6d:00:f6:01:0c:
8e:96:19:0e:c6:34:0a:c4:c3:54:98:87:9e:6d:a1:5d:66:9d:
c6:bc:01:b8:12:9d:32:b6:1e:46:cc:eb:e2:fe:77:53:c9:2f:
e7:cf:ac:32:f3:bf:7a:99:4e:ce:79:86:1f:90:d9:87:8e:2d:
80:ca:54:9d:3c:b8:9e:67:45:95:06:3f:a9:0b:fa:ba:39:ec:
61:7c:f9:0a:89:f6:bb:61:0d:99:d7:e3:95:68:de:18:90:8d:
33:46:b6:94:66:22:6d:ba:04:1c:f4:9c:64:6f:f2:37:fb:18:
1e:0d:61:ff:b8:9a:6f:0a:cc:55:74:dd:6f:4b:54:e9:87:09:
e9:4c:f1:a2:cf:76:7c:a1:38:7f:be:2c:ae:b4:6b:0c:d2:1f:
42:ad:9c:a2:3a:57:1c:10:8a:6c:1a:f7:60:1d:37:3e:4e:1a:
51:76:b2:0f:5c:1b:82:4e:f6:f2:e9:a2:6a:51:88:47:94:5e:
7e:de:c9:fc:89:40:e4:86:8f:a7:c6:39:29:c7:2f:ed:e9:67:
57:66:aa:95:9f:8d:78:9d:6a:92:2e:4b:6a:cb:14:6c:88:1d:
98:f9:86:91:39:f9:b5:ad:7b:bc:55:77:8f:8f:f9:3f:a7:85:
f7:51:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:51:45 2025 by rpki-client