Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa
File: e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa (raw, json)
Hash identifier: 237J/+0FXfMhGdW96MRTFHi+muzWuiB2ho0/AuMvFJQ=
Subject key identifier: 9D:12:5D:68:21:8E:A2:2E:47:44:5A:F6:C3:C1:F0:E0:56:C7:5E:86
Certificate issuer: /CN=897be676-f6c1-4efc-8bef-a425edb4f479
Certificate serial: 010D0C9F4328584804982D395629AED25225B740
Authority key identifier: C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa
Signing time: Wed 27 Nov 2024 11:36:44 +0000
ROA not before: Wed 27 Nov 2024 11:36:44 +0000
ROA not after: Tue 25 Feb 2025 11:36:44 +0000
asID: 7018
IP address blocks: 23.129.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:04:98:2d:39:56:29:ae:d2:52:25:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897be676-f6c1-4efc-8bef-a425edb4f479
Validity
Not Before: Nov 27 11:36:44 2024 GMT
Not After : Feb 25 11:36:44 2025 GMT
Subject: CN=e99fe45f-26b1-407c-8830-d8d255ffdf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:31:cb:35:72:08:ab:9d:ec:d8:ff:17:32:
6c:d1:50:a6:70:32:4a:48:ef:3a:c5:6a:dd:93:64:
a3:8a:a8:36:1d:c6:b3:26:8f:53:93:f0:ca:94:b6:
73:61:54:fc:55:4a:ac:13:9e:08:f8:49:9b:2b:b6:
90:de:29:ae:2a:10:8a:fd:1f:7d:5e:19:50:63:ec:
49:e4:d3:69:f1:62:c2:9f:ac:91:48:ec:9d:e7:ef:
1b:0f:99:49:e3:2e:69:f9:fb:c4:b1:4a:b7:68:d9:
c5:14:99:c1:a2:11:e2:0c:3a:7d:db:2d:8f:29:06:
c7:b7:fa:31:53:9f:89:be:f6:b4:dc:44:9f:24:38:
ad:14:a9:a3:23:27:b1:0d:bd:75:b2:1d:ee:0d:db:
87:26:6b:cb:ea:24:a9:3d:99:98:9d:07:3c:27:de:
f9:b4:f7:b4:b8:e6:57:06:eb:5b:78:67:3b:df:3b:
6e:9d:a4:bf:74:a3:7f:82:5b:60:cd:4f:c1:90:db:
e6:52:0b:f2:f0:55:a4:34:30:8a:73:21:ea:08:d5:
49:a1:41:3b:63:5c:14:24:03:87:01:0a:59:e3:0b:
72:0f:2c:dd:5e:eb:63:73:b0:37:df:97:1b:cd:07:
00:66:bd:d7:f9:1f:33:27:51:59:ab:39:2b:62:44:
7d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:5D:68:21:8E:A2:2E:47:44:5A:F6:C3:C1:F0:E0:56:C7:5E:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/e3f8bda7-2eeb-3dcd-8242-3a497f478b8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479/897be676-f6c1-4efc-8bef-a425edb4f479.crl
X509v3 Authority Key Identifier:
keyid:C8:BA:3D:7B:FD:79:A2:67:06:5E:EB:F0:4E:03:A9:64:77:91:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/897be676-f6c1-4efc-8bef-a425edb4f479.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:df:44:d0:56:52:55:c7:8e:26:2e:f3:5d:06:8c:5c:c3:b4:
00:ac:9e:dc:f3:b0:17:5d:b9:1c:d2:0b:a0:bf:82:85:12:e7:
72:9c:10:e1:f8:57:d8:f7:68:ba:e5:70:ef:00:72:84:40:44:
e9:34:d2:e0:0a:64:57:0e:3d:d9:aa:ce:e6:30:b6:6e:2d:e9:
eb:01:fe:66:df:fe:95:c0:fd:34:59:03:67:61:72:05:98:9b:
cc:bd:df:5f:fd:c1:0a:23:78:8a:af:ee:88:43:c6:5f:fa:3b:
e9:cd:a7:9f:f3:28:76:21:70:c1:1d:e2:c4:4e:ec:7d:58:2b:
5c:60:32:48:c1:f4:9a:ea:31:d3:c4:45:79:71:b4:89:6a:37:
8f:68:4a:7d:10:ea:3f:8b:0c:bb:66:60:94:85:08:bf:3f:1b:
63:e6:9e:3f:78:88:24:bc:05:45:b3:c6:ab:0b:24:42:5b:18:
04:08:35:01:37:ac:c7:3d:af:99:96:2f:88:f3:12:9f:82:f0:
0a:e5:77:77:e5:7c:a1:b5:bc:85:4c:92:74:68:5e:91:e0:25:
85:e9:b2:58:07:4a:c8:6b:80:c3:91:d0:82:1c:a8:1b:32:f0:
e2:70:57:81:ea:a1:e0:09:f9:6a:63:b2:c1:17:78:94:f9:97:
7c:b8:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:05:31 2025 by rpki-client