Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a57ffb59-99ca-3789-b96f-0fcdd42ce2cc.roa
File: a57ffb59-99ca-3789-b96f-0fcdd42ce2cc.roa (raw, json)
Hash identifier: 7aF1K31cT1ZttXVjYWVOJfZXcIb7xf7oxeXMVOuBiBI=
Subject key identifier: AB:99:F7:83:A1:F0:21:4D:1B:6A:8C:CC:3C:10:7A:DC:25:EF:8F:2D
Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Certificate serial: 010D0C9F43285848037A4C05EA031933D0BDD800
Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a57ffb59-99ca-3789-b96f-0fcdd42ce2cc.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 23.141.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:4c:05:ea:03:19:33:d0:bd:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=42eebe37-d365-4dd0-9a1c-9db7d7c815ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:6d:16:ab:49:d7:b1:76:a3:33:66:26:3f:
57:43:2a:50:65:3f:de:58:2f:3e:16:10:e9:ff:45:
a0:62:5e:f0:a2:22:d3:35:16:68:41:34:0a:39:8a:
db:43:50:12:60:cd:19:88:9b:6b:70:eb:05:0a:ab:
21:be:cf:b7:86:ed:bd:a4:4c:3c:e8:17:8f:af:65:
65:0f:62:6d:23:19:40:b2:a0:92:66:3f:ac:a1:54:
d2:f4:d2:5c:ea:04:f4:fd:29:c1:1c:d3:a0:51:27:
d4:9d:a5:66:89:82:05:8f:ba:e2:a5:93:db:07:7a:
b3:c3:f2:e7:e7:a5:97:f7:b9:12:f9:ee:c0:62:f1:
63:c5:d5:f9:92:f8:f4:52:85:1d:46:9e:7c:19:4c:
da:48:29:6e:55:43:2d:e6:de:e7:1b:cb:c8:8a:02:
6d:1f:d3:1e:23:f4:67:e7:76:db:0c:0b:62:34:2e:
fc:40:39:3b:24:71:fb:5d:76:82:59:6b:64:45:72:
7e:9d:46:40:4d:c0:48:20:f5:05:02:6b:06:76:cf:
8c:1b:59:6b:a9:bf:1c:f8:3b:24:a7:49:bc:28:7c:
d9:15:a7:0a:de:de:4d:a4:b5:a3:7c:ae:9f:3c:46:
e7:c8:d6:d5:dd:2b:8f:22:b0:20:a1:a8:91:5a:e6:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:99:F7:83:A1:F0:21:4D:1B:6A:8C:CC:3C:10:7A:DC:25:EF:8F:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/a57ffb59-99ca-3789-b96f-0fcdd42ce2cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl
X509v3 Authority Key Identifier:
keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:a8:12:34:2c:b2:a2:f4:fe:6f:5b:b1:9c:0d:18:ce:dd:a7:
5e:c3:aa:5c:81:86:0c:6e:f8:8c:a5:4e:5a:a5:01:c2:a7:0b:
6b:1e:ef:3d:d6:29:65:dd:90:e7:5b:11:e1:f1:de:95:cd:ad:
76:2a:a6:22:de:0f:48:ab:fd:e3:da:5e:66:e8:f2:81:59:6f:
46:53:52:09:fa:97:c7:bf:7d:c6:ec:34:7d:66:6a:bf:e7:29:
ea:17:de:5e:07:9d:5d:43:dc:93:5e:a7:be:1c:0a:fd:3f:4a:
c5:e4:66:62:82:f4:77:e4:de:48:08:ff:d1:ea:fa:ba:59:a8:
f5:f9:7d:26:43:39:5d:ef:ce:07:33:a0:69:68:2f:78:94:8d:
a0:b3:c3:7e:6a:71:ef:40:cc:31:a8:01:88:62:51:e1:8b:bc:
d7:3b:3f:1f:ce:35:de:d8:89:b4:3a:ee:e7:c3:6d:63:df:ff:
eb:93:3e:47:0b:61:77:ac:15:fe:80:ee:fa:f1:14:da:18:42:
97:34:d3:87:fb:ae:ef:2f:6f:9c:06:e0:72:63:3a:dd:be:d6:
96:0c:20:be:92:d8:5e:1d:24:ce:02:82:29:6e:aa:d6:b9:00:
3e:93:b7:b3:4b:13:90:f0:79:d7:ad:ff:6c:cf:32:fe:fb:59:
10:67:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:03 2025 by rpki-client