Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa
File: 3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa (raw, json)
Hash identifier: qsp6CWu7uohfGn6dx7IixMI8gsMwle+DqwOwLoAQ1Jk=
Subject key identifier: 5B:10:F7:3C:77:B2:C7:67:54:BD:E1:66:CA:F8:02:DE:4B:7A:B2:09
Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial: 010D0C9F432858481F6531C6F8A2A7811ED35100
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 19257
IP address blocks: 23.252.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:31:c6:f8:a2:a7:81:1e:d3:51:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=8c3a9961-6fdd-4327-b2e7-5d8448bc3249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:67:e1:32:30:1e:fc:d0:45:0d:03:b2:45:a9:
ee:3f:63:a3:67:6f:59:6b:6c:fd:61:cb:ec:d4:40:
84:1e:7a:74:64:5c:eb:2b:f1:ea:3f:e7:cf:ce:12:
73:31:f6:7f:57:da:fa:3a:ad:c7:8c:34:b5:f7:89:
ec:7f:24:23:1a:30:5a:8f:b2:7f:78:73:b4:11:d3:
82:1b:27:3a:19:a9:66:aa:de:72:a5:ba:7b:cb:e7:
34:8a:ac:37:91:a6:3d:f2:72:1f:79:0f:0a:7a:df:
4b:ad:df:5f:f6:4d:fb:6f:5f:fa:12:33:29:f5:25:
e9:99:6b:99:0a:ab:22:cd:36:38:3b:8e:90:26:d0:
74:74:6b:0f:93:27:1d:3e:9d:64:00:e2:ed:65:d9:
f8:8f:4c:07:80:05:00:7a:a1:72:dd:f7:64:af:76:
bb:91:69:4a:9f:1b:9d:5e:fa:c4:49:19:77:4b:a0:
85:13:5f:b7:b7:aa:e4:c1:90:31:d5:3d:e9:76:04:
8a:a7:15:76:b3:44:67:bf:c8:a1:f2:c5:6f:13:75:
89:6d:13:fd:ba:7c:f3:b2:8b:0c:bc:35:e4:cf:84:
9f:ea:7b:bc:2e:5a:b0:09:8c:dc:03:21:e3:14:4b:
4a:92:b8:1d:d4:56:02:39:92:e4:47:87:aa:39:de:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:10:F7:3C:77:B2:C7:67:54:BD:E1:66:CA:F8:02:DE:4B:7A:B2:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/3f3a21cc-5883-3f1f-9a4a-7fc41c5343d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
X509v3 Authority Key Identifier:
keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.252.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:9f:5b:c5:41:e7:a5:20:4e:4c:c1:fc:22:89:b4:7d:1a:bb:
8f:60:ed:d0:c0:92:ba:cf:20:2d:8b:aa:10:60:07:c5:9c:63:
d3:99:e0:78:02:44:e5:f0:d5:7f:c5:e8:10:db:1f:08:d2:43:
68:74:63:ed:ca:ec:98:fc:0c:6d:a9:f9:6e:23:86:fe:c8:fe:
aa:15:8e:16:1e:a5:28:8f:79:01:7c:f2:47:09:9e:be:5d:d2:
c5:da:97:d5:e3:5c:a7:89:e3:d6:71:41:38:e1:bf:6a:a7:c5:
83:8a:c6:63:50:33:5e:3b:c8:03:70:1d:26:16:26:91:18:ca:
ad:a8:3c:fe:32:0b:5c:97:13:42:4e:36:38:da:f7:f0:76:44:
6c:df:9a:01:88:4c:c4:0b:a4:8b:fc:9b:c5:7f:b7:cb:d3:54:
8d:de:95:3f:1e:ca:04:b0:fe:45:09:0f:30:0a:6a:b2:e2:af:
c1:22:c7:2a:ec:8d:af:45:e7:67:ed:fa:f3:0d:04:a3:61:d9:
8c:96:d3:1c:52:14:38:d2:c4:4a:ab:31:71:a6:ec:b0:a1:fb:
12:19:91:cf:8c:a8:23:e6:53:44:58:fc:11:83:3f:fc:f9:2f:
1d:bf:5d:90:91:a2:48:1d:0e:99:b0:5d:5c:9f:5d:7e:5a:f3:
33:94:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:16 2025 by rpki-client