Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa
File: ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa (raw, json)
Hash identifier: /1QSPwY3W7rPKpz/KPb1h9dUloOGgXymTDzSfhE8msc=
Subject key identifier: 26:76:EA:A3:DC:90:47:57:99:E8:63:EF:57:EE:42:8B:1F:FD:B1:85
Certificate issuer: /CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Certificate serial: 010D0C9F4328584888687B2BB481417F77A78800
Authority key identifier: 4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa
Signing time: Mon 13 Jan 2025 16:47:20 +0000
ROA not before: Mon 13 Jan 2025 16:47:20 +0000
ROA not after: Sun 13 Apr 2025 15:47:20 +0000
asID: 401598
IP address blocks: 23.132.52.0/24 maxlen: 24
2602:f73c::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:68:7b:2b:b4:81:41:7f:77:a7:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76dfbdf8-6f9c-4702-8da7-c6d5598c1126
Validity
Not Before: Jan 13 16:47:20 2025 GMT
Not After : Apr 13 15:47:20 2025 GMT
Subject: CN=d82ced88-c239-4cb3-bdc6-2274c31eb1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:ea:fa:91:11:e7:2d:bd:56:4e:87:52:80:
19:ca:62:c7:f5:37:a2:26:20:3b:cf:35:6b:46:b1:
20:0c:55:be:85:48:90:2c:66:53:37:03:6f:50:be:
f0:76:15:a5:d5:38:2e:33:6e:91:b0:aa:92:c2:dd:
37:29:a1:c8:1d:89:60:4b:f6:21:6d:6e:9e:be:34:
f6:6a:5a:78:2d:02:de:4d:b3:c6:6d:3e:7f:c8:a2:
1b:be:10:b8:52:fb:2c:54:c4:b8:9d:e2:d6:99:8e:
0e:50:38:ca:9c:77:19:4d:71:41:ca:66:58:26:cd:
56:4f:30:60:f2:7a:5f:6a:8d:c1:95:3e:15:5a:41:
b6:24:26:3d:65:45:9d:0a:48:52:31:20:f2:52:57:
de:25:9e:d4:60:7f:9e:c8:ab:61:84:cf:2e:85:d3:
47:7a:1e:d8:0e:78:c2:a0:e3:20:13:16:75:53:95:
25:85:5b:65:d5:44:56:08:cf:56:97:59:54:21:db:
d2:95:3a:62:01:4c:8b:30:59:82:07:ae:bf:8f:17:
2e:47:23:ca:91:7a:01:53:82:b5:4e:72:0d:c1:67:
6a:2a:39:bb:21:70:9e:41:15:7d:9a:e2:d8:b0:52:
fc:9e:44:9c:6f:00:92:e8:7f:13:4a:f4:cd:74:6c:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:76:EA:A3:DC:90:47:57:99:E8:63:EF:57:EE:42:8B:1F:FD:B1:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/ddc565b0-5f73-3856-83ae-eb5a5e40ec78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.crl
X509v3 Authority Key Identifier:
keyid:4E:7B:A2:59:20:66:94:5A:86:EA:37:F8:59:4A:86:3F:58:1A:D6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76dfbdf8-6f9c-4702-8da7-c6d5598c1126.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.52.0/24
IPv6:
2602:f73c::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:e8:9d:24:6e:63:86:47:c5:5a:07:39:2c:fc:29:7b:97:99:
05:24:41:6e:71:9f:3d:2d:34:d7:93:2e:60:06:03:d6:ce:5d:
a1:ad:5c:4b:83:8e:a6:1b:aa:92:1d:46:16:99:95:b5:f3:c0:
e3:7b:2a:32:94:15:b4:36:ea:45:ba:d4:25:1a:83:95:11:1f:
39:32:55:56:fe:7c:33:61:66:d6:ce:be:70:e0:7c:ba:f7:c9:
5c:01:c8:48:4b:2a:4f:61:83:cc:9b:f9:c5:2a:90:c2:c0:54:
e1:5b:0e:c3:c4:d5:6d:42:85:dc:34:2e:7a:ce:ce:eb:c5:7e:
3a:cb:f5:09:a4:0b:45:2c:2a:bf:42:5e:a0:23:08:a3:9b:41:
c2:0e:e4:d3:cb:f4:10:14:15:16:c5:14:ab:64:fd:08:36:3b:
0d:6e:3a:ce:eb:98:70:74:0c:2f:2a:33:13:27:45:6d:f5:f2:
5a:29:c9:ce:69:60:82:41:30:0d:ac:59:4d:c0:63:5a:df:f0:
b8:11:68:58:72:51:0b:1a:93:43:23:65:72:45:2b:b6:24:26:
97:1b:47:74:9e:a8:fa:3a:ee:d5:e0:be:98:8f:34:cf:85:7f:
04:f4:c8:e4:02:99:f4:2b:0c:9d:cd:bf:70:18:6e:c4:c7:92:
a2:b3:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:05:27 2025 by rpki-client