Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa
File: 0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa (raw, json)
Hash identifier: bv8QtYoKWur+3IF8aIUxG9eRNXL37UPNEeAutrMgDXU=
Subject key identifier: AD:E3:5D:7B:1E:5C:C2:4F:12:03:34:93:39:79:87:91:12:46:F2:4C
Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial: 010D0C9F43285848037B6CE0D4354431F5724300
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 8075
IP address blocks: 23.141.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6c:e0:d4:35:44:31:f5:72:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=c61052b0-17d5-4341-af7c-e6de578a4820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:ce:9a:e6:99:94:d2:ee:b5:ae:b5:03:28:
12:d9:41:ed:e2:2a:71:1b:0f:3f:59:fc:15:04:90:
5a:61:1d:3b:b3:2b:44:44:2d:9a:e3:37:44:07:4b:
78:27:70:46:0f:d4:44:fb:ed:4b:be:9e:16:a3:2e:
7b:43:8f:3a:f2:4a:1c:07:a6:b5:0e:35:0b:45:71:
58:a9:97:f2:bb:79:a6:f7:06:e0:2d:c8:0d:d5:22:
94:f9:05:ff:1a:81:cf:0a:10:a8:9d:d6:35:10:78:
13:ff:ab:48:bc:1f:93:bd:98:27:b9:f9:f1:b0:52:
fd:ab:9a:25:40:05:3c:d1:01:09:68:94:eb:39:e4:
0b:9d:f9:c0:aa:c5:ef:72:39:99:a5:b6:45:bd:60:
78:d2:c0:7e:e3:a1:ba:8a:21:b4:c4:94:e5:13:06:
26:86:b9:af:7f:7c:90:d0:3b:04:cd:16:ac:0e:75:
30:e3:27:6f:61:8a:01:ba:00:88:7d:71:29:32:02:
29:eb:cd:24:81:7c:86:38:21:1d:e1:06:f3:fe:ae:
5a:dd:5e:fe:31:a0:bc:e0:de:0e:91:35:bd:c1:77:
7a:dd:46:46:d2:b4:e3:0f:32:2e:19:71:47:ce:a2:
d3:28:8e:fd:a1:ad:b6:2a:4a:0e:36:2c:ea:12:bd:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E3:5D:7B:1E:5C:C2:4F:12:03:34:93:39:79:87:91:12:46:F2:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/0bbeed5d-cd52-328e-99b2-f65b7d3b43ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
X509v3 Authority Key Identifier:
keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:01:79:bc:3d:5b:0d:a6:19:40:fd:2e:48:c2:46:6a:16:98:
25:f2:b4:b5:8f:4e:bf:ed:de:f6:12:b9:56:d6:63:68:25:01:
a8:39:fb:69:6e:79:6c:0b:22:0d:eb:1c:18:65:3e:3e:23:c5:
0e:ab:83:85:d4:20:65:f7:4e:7e:32:de:d6:c6:f2:c2:b3:8e:
a8:39:75:21:df:34:b4:1c:29:41:cc:98:fc:9c:fa:98:39:04:
62:1d:e3:e8:a9:5b:b2:6f:6d:36:8a:3d:a6:4a:67:ae:73:27:
c7:95:ee:ab:30:16:94:47:5b:4e:1f:dd:8c:49:cc:25:84:f1:
60:aa:5c:8d:69:dd:04:16:aa:e9:cc:23:77:f7:3c:b4:af:8c:
9c:b7:a0:35:03:71:ef:f1:75:c9:f9:1d:77:fb:a0:87:b3:ed:
94:eb:bc:ff:24:88:e5:ff:e1:84:0f:e1:28:67:1e:b3:30:69:
b1:bf:19:52:c2:9f:e3:c4:91:df:2a:48:a4:8b:ae:4c:52:d7:
1a:3f:1d:84:b2:48:8a:c5:e4:99:e5:9d:86:63:22:10:f8:a8:
93:48:3a:3e:b5:d3:4f:49:ca:d6:8c:73:d5:36:c7:cb:c9:57:
c1:1d:8f:ab:45:13:a2:03:70:9b:7f:ce:57:6b:b3:db:d3:7d:
60:b1:43:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:29:47 2025 by rpki-client