Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa
File: 200cf835-7710-3227-a110-70619776c894.roa (raw, json)
Hash identifier: oaeIsdzp01rWS6gLAXZ0e/r3LdOlfw2Jjrfy+5kMS0Y=
Subject key identifier: D5:AC:07:AC:8A:38:2F:43:C5:73:5A:96:9C:C7:14:03:2A:22:EE:4D
Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial: 010D0C9F432858481F6531D6AA26907D58565980
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 19257
IP address blocks: 23.252.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:31:d6:aa:26:90:7d:58:56:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=561f34a2-6cf9-43a9-93d7-5184f6d221df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:05:28:1d:45:5d:f8:93:d7:23:e0:ce:29:
f4:2d:34:66:52:ef:56:85:d8:cb:b8:fd:9d:ad:f2:
66:7c:aa:86:43:85:a2:dd:59:21:41:c6:34:20:2f:
de:e9:66:8e:33:11:45:19:50:7d:2c:83:24:0a:5a:
fd:2a:5b:a1:73:f9:b1:98:e1:ca:8a:a4:80:99:48:
b2:82:3a:8b:0b:66:b2:f6:b8:0c:cf:cb:0b:a1:48:
f8:0d:71:f8:ca:8e:3f:c2:06:50:26:3f:98:29:90:
80:bb:92:69:01:af:64:6d:a1:8f:27:11:44:ec:31:
69:b5:9b:67:80:25:f1:e3:98:66:f3:ab:23:e2:e3:
77:29:d3:75:03:ed:69:82:b5:4a:3e:7d:56:a3:da:
c4:a9:f5:6f:ac:72:14:41:ef:5e:36:0e:84:13:bf:
b0:80:0c:aa:5f:a9:3d:55:0a:11:f0:d9:19:74:ce:
ab:32:a4:29:ba:c8:81:53:f8:c2:f1:c3:f3:19:80:
a7:19:69:ae:45:07:90:39:a4:44:fe:6e:23:e6:89:
f1:48:04:6d:f9:a4:b5:d6:ec:16:fe:78:62:56:30:
71:f8:a3:bc:05:69:ce:69:9d:8e:35:6e:c6:3e:8e:
4e:ea:5f:2a:bf:7f:14:0e:e6:b9:87:dc:8b:83:08:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:07:AC:8A:38:2F:43:C5:73:5A:96:9C:C7:14:03:2A:22:EE:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/200cf835-7710-3227-a110-70619776c894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
X509v3 Authority Key Identifier:
keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.252.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:bc:b5:0a:d8:df:21:c1:d5:35:c8:b3:53:54:d2:fa:52:e9:
d8:2f:7c:51:90:49:79:ea:d7:21:1e:be:b1:9c:96:8a:63:08:
40:39:ff:52:07:b1:14:26:b6:dd:dd:4e:dd:0a:7e:13:f2:b1:
07:db:d9:1a:1a:f3:d0:fa:89:20:2a:f6:8d:2d:fe:29:d5:87:
dc:a2:4f:45:5d:99:d9:64:db:06:62:ec:0e:c9:e7:7b:e1:2e:
4b:a3:b5:2b:35:33:78:9c:f8:87:3f:2c:f6:8a:81:b8:3a:5a:
23:e8:6d:11:76:88:40:95:99:dc:dd:f0:09:02:e3:9a:1f:7c:
d7:1c:42:68:30:92:f5:42:ed:37:15:b1:95:54:78:db:f7:c5:
e9:ce:08:9e:8a:c5:10:18:fa:4a:bf:2e:f8:8e:c7:a1:f3:f7:
a5:cc:5e:b8:e4:0e:8a:d7:cc:1e:99:15:1e:d6:5f:8d:c6:7c:
ca:2a:86:14:0d:ed:e9:91:d3:3f:81:95:25:0c:0a:46:82:d4:
38:eb:9c:ec:b2:1d:de:90:b5:b1:ba:07:07:b9:fb:01:6f:20:
6b:2a:72:c6:ae:10:f8:92:cf:d7:d0:bd:a4:18:ef:dc:3f:3e:
2d:60:78:ea:e7:37:8e:cd:0e:0c:7c:37:f5:4f:ff:63:0d:9f:
65:66:46:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:37 2025 by rpki-client