Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/223fffd8-e55c-39f5-883b-add44fcafd45.roa
File: 223fffd8-e55c-39f5-883b-add44fcafd45.roa (raw, json)
Hash identifier: HvD0VRmG7B6d4o8sSAotfVPmRywSkEvGBfVRuhDzczU=
Subject key identifier: DC:FC:61:9B:4A:5C:79:34:94:03:4B:61:A2:E9:6D:2D:0C:ED:F9:8F
Certificate issuer: /CN=99b49bb6-2782-4a82-829c-d4b94eb646f1
Certificate serial: 010D0C9F4328584807AA71D0D2FF15907C63C760
Authority key identifier: D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/223fffd8-e55c-39f5-883b-add44fcafd45.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 133073
IP address blocks: 23.154.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:71:d0:d2:ff:15:90:7c:63:c7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b49bb6-2782-4a82-829c-d4b94eb646f1
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=c32e9fd8-1177-4943-a103-5949e8cfa2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:37:af:ee:8b:05:ab:04:1b:e1:81:26:29:
2b:7b:6c:6b:50:03:e5:ce:fe:c1:cd:a3:50:75:83:
db:e8:a9:f6:99:b2:29:3e:bc:5a:80:9e:73:71:d2:
d0:0b:b9:61:6e:84:3f:39:43:8a:0d:3f:c4:f3:41:
bf:db:8c:b2:5e:f4:94:cd:ac:71:e9:ed:d0:a1:9d:
e1:68:f6:68:f1:cc:22:22:d4:91:97:3e:82:15:a1:
87:5c:ca:c3:0e:48:7e:34:3b:bb:45:e0:11:3b:da:
bc:d3:91:6d:39:0d:a4:be:bc:3e:a4:74:c4:0e:ef:
4b:53:a2:5f:0d:68:7f:3c:ad:a4:07:73:08:36:58:
79:cf:07:c6:ec:80:28:7e:f2:a3:f5:fc:0a:0f:4c:
1e:ef:f3:cd:d5:1b:ca:58:79:2f:68:76:c0:ac:2a:
db:6a:02:06:99:5e:52:ec:66:4b:0b:de:43:59:39:
c9:11:3a:93:3f:b0:9c:b4:a6:9d:5a:05:a1:0d:dd:
3c:27:66:2c:d8:25:c2:be:11:4a:63:64:5f:cb:53:
7c:fe:35:a1:a8:68:3c:e7:62:3c:88:21:4b:c6:5b:
15:c0:b2:d4:de:46:70:c9:f5:a0:5f:20:36:94:40:
82:ec:a1:48:45:d1:8f:ec:f6:cf:04:67:5e:e2:a7:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:61:9B:4A:5C:79:34:94:03:4B:61:A2:E9:6D:2D:0C:ED:F9:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/223fffd8-e55c-39f5-883b-add44fcafd45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl
X509v3 Authority Key Identifier:
keyid:D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:ab:0f:63:ff:55:28:f6:70:0b:b1:3a:ee:5f:c6:ef:b7:42:
5c:d4:2e:34:b8:ca:ae:5d:ef:2f:1a:e1:65:29:a8:5d:5e:7d:
73:df:69:52:83:43:36:81:6a:b2:4d:22:6e:a2:37:54:3e:ba:
58:1f:06:91:1d:6c:37:c2:d3:f1:68:51:c2:51:18:5e:54:ab:
8e:3c:b1:1c:2d:7a:4f:48:ff:22:38:a9:3b:4c:b7:95:f9:2e:
0a:d3:86:e9:43:cd:bc:f0:8b:5c:05:1c:b4:b3:3f:5d:b2:34:
3d:89:33:8b:78:de:9f:70:3d:ee:53:d3:e7:a1:2a:3c:c5:2c:
cd:30:79:10:85:3e:70:50:bc:c9:63:8a:1f:47:8d:67:59:6e:
b5:be:24:9c:5a:aa:fe:1f:d4:cd:5e:b9:d8:fe:55:b0:2a:1d:
8b:f1:71:6d:0f:ec:8a:02:c5:be:65:72:fd:bd:07:b4:aa:d2:
28:f5:5b:34:32:60:34:f3:57:43:e8:5b:1e:1d:92:2b:75:14:
f4:78:a4:f8:10:aa:44:d9:94:51:a1:d7:87:80:87:53:54:7d:
cc:26:8d:61:c0:7f:ee:af:80:a3:df:47:a7:b6:5f:52:e0:5f:
3e:57:a8:0b:dc:7f:aa:dd:59:3f:4f:6e:db:8c:50:3c:6f:38:
bb:dd:54:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:09:33 2025 by rpki-client