Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/c505d588-4c39-326a-8b02-29c7cdbd815b.roa
File: c505d588-4c39-326a-8b02-29c7cdbd815b.roa (raw, json)
Hash identifier: ZbXSH4y0tC0ysVje6sOi5olGkq+bxtEpaZRPCeatXHY=
Subject key identifier: 35:8C:2B:24:38:46:7B:4C:2F:3D:5B:87:97:E8:BC:19:9A:A5:59:67
Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Certificate serial: 010D0C9F4328584826FB2F43E5B2CC50BC3BD478
Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/c505d588-4c39-326a-8b02-29c7cdbd815b.roa
Signing time: Mon 09 Dec 2024 19:13:43 +0000
ROA not before: Mon 09 Dec 2024 19:13:43 +0000
ROA not after: Sun 09 Mar 2025 18:13:43 +0000
asID: 19814
IP address blocks: 23.189.120.0/24 maxlen: 24
2602:f805::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:fb:2f:43:e5:b2:cc:50:bc:3b:d4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Validity
Not Before: Dec 9 19:13:43 2024 GMT
Not After : Mar 9 18:13:43 2025 GMT
Subject: CN=c3c52598-3db5-44e5-b594-a69417a06bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b5:30:6e:c9:23:81:ca:ae:66:ee:6a:d8:37:
5e:5d:b0:55:1f:b1:a4:9e:cc:c1:3b:be:54:ee:02:
8d:5d:ec:62:49:91:87:a9:1d:7d:62:95:77:63:2a:
8e:e1:3c:52:3f:34:b7:c7:c2:c7:27:d3:0f:b9:89:
0f:ef:8f:a7:57:9a:1d:fc:d3:de:24:96:c3:b2:6c:
90:2a:d2:3f:ce:fb:78:bc:f2:12:8a:d0:fd:94:6c:
88:ee:d6:e5:08:cf:83:81:32:f8:57:ea:d8:99:3b:
db:29:b9:18:b6:0b:f8:c0:71:f8:fe:a5:37:8c:59:
d0:4d:7f:d0:a7:7b:95:d2:d9:f1:73:8c:a8:68:11:
b1:fc:1e:79:bb:9c:23:d7:1f:93:35:d0:5d:ab:10:
62:8b:d2:46:79:c3:fa:95:16:36:9c:5e:a6:b0:89:
64:2c:49:67:bb:2b:db:77:54:56:55:ac:22:ff:0c:
ff:fb:25:15:fa:2e:cb:9c:70:2f:fe:a4:5b:d6:9c:
9e:51:92:3e:9b:72:c7:94:92:16:12:05:7d:71:d5:
7a:32:68:ed:db:7d:fe:67:6b:b8:95:e4:21:b5:05:
5f:b2:5c:d4:9f:c4:79:e1:ed:00:2a:5b:53:5d:d9:
71:8a:f5:75:42:e8:07:5d:84:76:f5:28:74:02:1f:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8C:2B:24:38:46:7B:4C:2F:3D:5B:87:97:E8:BC:19:9A:A5:59:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/c505d588-4c39-326a-8b02-29c7cdbd815b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl
X509v3 Authority Key Identifier:
keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.120.0/24
IPv6:
2602:f805::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:94:09:25:52:b4:ca:d8:8b:7e:95:08:f4:1c:e7:25:e4:42:
20:34:77:a5:2d:49:18:4f:89:83:97:e6:96:c4:00:2a:97:f0:
cf:41:c5:23:3f:c4:32:aa:b9:e9:05:9a:f3:00:15:f0:4b:d1:
c7:4a:82:90:ec:50:ff:93:49:6c:fa:13:a9:92:42:27:67:4e:
73:e4:ee:11:51:a0:a1:f5:e1:69:c3:88:89:1e:7e:b0:ec:55:
99:11:b5:f8:23:51:26:96:00:47:c2:72:51:e5:ee:02:03:30:
cf:4f:a4:01:4f:36:d4:a9:a3:05:97:30:ab:de:0c:91:50:0e:
75:cb:e3:83:53:97:8f:87:75:c2:e5:9c:5b:db:23:ad:45:96:
2f:ee:be:cb:72:da:16:65:ab:8b:bb:ae:29:dd:5e:55:bd:6a:
0a:1c:f7:4f:61:d0:59:e1:76:89:4f:15:b8:57:9f:b9:69:bd:
f5:aa:39:40:7f:fe:9e:c6:1a:60:47:71:54:21:d6:ce:0d:d1:
6c:df:97:cd:2a:f8:5f:61:6f:28:68:72:0b:e4:92:e1:d9:c1:
30:42:98:98:f2:5b:c5:52:97:c4:7d:a0:1a:15:35:80:6d:13:
81:ab:7e:ae:6d:58:aa:ae:e6:f9:29:2f:b1:db:c5:8d:63:9c:
e3:f5:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:45 2025 by rpki-client