Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa
File: 97da6b9d-b639-35c4-87be-d3b486d7c07b.roa (raw, json)
Hash identifier: fMwDUPiwXZnCcTAXGeHuK2t56FeH76PRDncDdYtz64g=
Subject key identifier: A5:6F:50:B3:12:12:AE:1C:AA:36:DB:54:2B:BE:44:9C:69:5E:10:4C
Certificate issuer: /CN=a54e265f-d361-4245-843e-1e7cf61c9644
Certificate serial: 010D0C9F43285848812F5384DC88CE06A4344240
Authority key identifier: CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa
Signing time: Sat 11 Jan 2025 02:41:31 +0000
ROA not before: Sat 11 Jan 2025 02:41:31 +0000
ROA not after: Fri 11 Apr 2025 01:41:31 +0000
asID: 401580
IP address blocks: 23.132.36.0/24 maxlen: 24
2602:f740::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:2f:53:84:dc:88:ce:06:a4:34:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54e265f-d361-4245-843e-1e7cf61c9644
Validity
Not Before: Jan 11 02:41:31 2025 GMT
Not After : Apr 11 01:41:31 2025 GMT
Subject: CN=b7afa420-bd77-42e0-af36-65b9f10c5813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:44:70:98:6b:bd:a2:b3:4a:69:19:3b:11:
98:22:17:9e:bd:d9:7f:80:3b:dd:ac:c7:72:83:56:
f9:52:7b:f3:98:c3:28:4e:80:5f:96:c1:23:60:a8:
07:15:6c:42:c8:be:5c:06:5f:9f:25:5f:9e:87:a6:
dc:38:fd:9d:cd:0d:f5:46:f7:b3:78:9c:30:e4:8b:
ea:84:a4:d6:ce:5d:35:11:56:5d:b1:99:94:ea:c1:
45:53:24:88:75:f3:c3:b4:9f:d4:2f:31:59:19:81:
44:40:9c:70:1f:e7:7a:23:b6:ac:9c:23:20:63:18:
6a:12:61:af:41:0f:b3:f4:57:a2:60:b2:26:de:a6:
6d:18:21:54:3d:0e:49:41:57:e5:d7:d6:76:83:8b:
a3:c9:5b:82:f8:ff:9a:78:20:1f:42:00:86:67:44:
fb:28:a4:24:33:23:1f:89:2d:4a:22:ea:e5:20:87:
80:cd:08:20:a9:6c:ec:80:7f:eb:80:14:0f:bc:85:
3f:49:d2:8e:09:2d:b1:35:ed:1f:12:4d:b3:01:5b:
ab:21:91:84:ea:c1:28:05:e7:4e:18:93:e1:81:e7:
f7:ab:2f:3d:c1:63:65:ca:8e:47:18:30:b4:b4:5c:
30:6e:7f:a1:29:54:f1:ac:a7:21:db:b0:47:22:cb:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:50:B3:12:12:AE:1C:AA:36:DB:54:2B:BE:44:9C:69:5E:10:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.crl
X509v3 Authority Key Identifier:
keyid:CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.36.0/24
IPv6:
2602:f740::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:8f:fb:37:c5:1f:3c:ee:ef:a2:ab:89:fe:82:66:7d:67:7f:
c3:ba:48:ae:5c:f7:e6:b0:ef:cd:3c:4f:99:c2:e0:9b:b9:57:
5d:d7:e0:70:6d:86:4c:a1:c5:f5:da:eb:33:7f:01:89:99:4c:
9e:1f:27:0c:1b:a6:3d:81:92:74:d5:14:68:8d:8c:aa:20:da:
74:3c:c4:49:ad:2b:75:c7:54:32:db:e1:6e:f7:f8:19:d2:f8:
1d:1f:18:c0:ad:0d:15:52:60:71:80:d0:b0:c9:c9:cd:b8:51:
48:bb:3f:71:b9:dd:62:e7:ec:4b:b2:aa:ac:30:9a:89:d9:28:
01:47:1e:eb:ef:7a:d1:56:47:63:17:c4:00:13:78:ca:34:d7:
da:b1:f4:96:c2:50:7c:47:e5:e4:d8:47:21:ea:d7:15:4d:30:
e9:36:73:15:f7:32:60:a8:6f:1e:1a:5b:8d:5d:f5:27:f7:d6:
bf:af:7e:a1:b4:7e:e5:a9:29:34:30:04:6a:f9:5e:5e:9c:46:
4b:56:d5:9c:88:85:68:d1:8b:80:c3:e6:c6:63:a1:79:90:57:
d6:ce:00:7e:fa:4b:06:44:9b:96:1e:0d:18:e3:d6:19:db:07:
61:b5:8c:2b:1d:7c:98:d0:fd:64:b5:72:d7:73:86:af:29:d2:
bc:db:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:55:40 2025 by rpki-client