Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa
File: 98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa (raw, json)
Hash identifier: 8gzwy6/dv7HnQsYRiFfU0OiJ/6JM4qv1I5KTiLJ/qMg=
Subject key identifier: 1C:1F:FF:5C:08:D4:44:9F:99:DA:31:D5:95:EF:B1:BE:56:25:11:F7
Certificate issuer: /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial: 010D0C9F432858481F6531E3B0A38746588AC780
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 19257
IP address blocks: 23.252.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:31:e3:b0:a3:87:46:58:8a:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=c7e8f4b7-1d9e-4100-b7f0-2ee77d8d060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:8c:e0:71:04:22:8e:46:4c:d8:6a:93:b8:
cc:fc:fd:15:0e:e8:bd:96:f8:cd:0f:ce:28:80:fa:
57:03:79:be:0c:a6:26:ea:43:78:3d:b4:84:1c:b5:
ea:8b:f0:7c:5a:40:95:35:7d:c8:39:1b:93:e1:9e:
b9:8a:23:4c:4b:3e:1a:1d:92:94:ef:eb:4e:de:4b:
b0:13:cd:69:07:73:af:e1:97:c1:a5:05:73:e0:d4:
91:52:78:7a:b3:8d:a8:56:6d:c9:36:c4:2a:d0:a9:
61:3c:33:bd:1b:81:e2:0e:78:ce:28:03:13:f4:91:
c7:fa:03:21:5e:c8:bb:ca:8e:01:24:3b:72:dd:dc:
db:ab:e7:bc:ae:8d:e4:c9:df:26:47:20:c6:46:ca:
bc:89:b0:30:8b:c4:54:91:bf:b6:21:0e:a6:ab:89:
50:48:f1:a8:36:30:17:cb:b0:b9:d1:2e:a9:27:a9:
99:27:6e:84:a2:ff:9e:3c:33:71:8f:28:ce:f2:26:
c2:88:d7:42:2b:84:be:8a:5f:a3:c2:1b:8d:6c:3a:
4d:42:d9:e0:59:91:fb:fd:d3:87:7d:df:9d:33:84:
cd:ac:3e:b0:55:c4:72:7b:66:dc:4c:16:9f:13:da:
c0:d8:b1:3a:8a:cd:96:a1:b8:27:02:ad:cf:b0:dd:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1F:FF:5C:08:D4:44:9F:99:DA:31:D5:95:EF:B1:BE:56:25:11:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/98d1af37-90d7-3548-8da8-c41f5ccf1a02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
X509v3 Authority Key Identifier:
keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.252.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:c4:8b:07:74:4e:b5:fd:bd:ed:e0:4c:5a:c6:f2:94:2d:a3:
1d:4b:2c:e7:96:1d:56:a7:9e:ee:b3:01:2c:1e:9e:00:90:28:
70:d4:40:e3:93:1b:c2:18:09:92:f3:15:b4:22:ff:49:0c:62:
c7:0c:cd:81:2d:b8:03:fb:5b:55:ea:08:27:9d:29:f5:d8:c8:
a4:e8:99:d0:42:34:d4:99:08:ef:13:d4:c6:94:95:c7:fa:70:
57:e3:fb:2b:25:f6:a5:4d:7c:f9:7c:b3:b4:af:d0:a5:37:c0:
0f:14:1d:32:24:f3:45:a6:f5:f9:fa:08:e6:09:24:38:7b:3e:
e3:42:30:30:2f:5a:5e:76:93:19:06:86:08:7e:a9:c9:30:a5:
cf:d6:fd:7f:79:e9:67:c6:51:c2:db:15:f7:25:b5:73:e9:d7:
5c:36:c9:3a:e8:56:3a:7b:9e:ec:30:13:d9:11:a6:b4:ba:1d:
a8:8a:44:1d:5c:7b:53:f3:20:6a:ae:d0:1e:2d:4e:eb:b2:6b:
00:41:28:65:ae:92:4a:39:d9:67:a4:8d:97:17:50:c7:e7:2a:
44:4a:ca:ff:4e:2f:c2:ac:48:46:f0:03:1b:73:f8:5f:62:6e:
d3:c5:ad:b8:4d:a9:fe:74:13:fc:eb:8f:0d:ae:e6:46:5c:64:
e8:fe:20:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:45:12 2025 by rpki-client