Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa
File: 884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa (raw, json)
Hash identifier: BiHDn7kq58SibW4YLdoYRvipccitwG+2yZhUfLosTYI=
Subject key identifier: 23:74:D3:47:D8:35:20:26:C5:84:40:36:67:51:C5:79:7E:21:FE:74
Certificate issuer: /CN=1716e48f-a64c-4227-b984-34b75b5f7e97
Certificate serial: 010D0C9F43285848345563A39CF3C98935290580
Authority key identifier: 3D:CF:76:F3:2D:14:4F:11:86:F1:48:0A:2D:25:47:D1:06:2C:88:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 396480
IP address blocks: 23.131.64.0/24 maxlen: 24
23.131.65.0/24 maxlen: 24
139.60.72.0/22 maxlen: 22
2604:4ec0::/36 maxlen: 36
2604:4ec0:1000::/36 maxlen: 36
2604:4ec0:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:63:a3:9c:f3:c9:89:35:29:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1716e48f-a64c-4227-b984-34b75b5f7e97
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=39d928f4-4ac7-4d64-810c-a37a7358e673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:06:d5:40:db:56:f4:0c:21:de:41:41:78:1f:
18:a3:01:e5:c4:02:a0:3c:8f:48:57:ff:e1:2e:e9:
97:4b:55:9b:25:f4:e6:49:aa:1c:a2:93:ba:47:18:
61:38:42:e4:b1:44:b3:69:64:b7:ed:21:bb:61:71:
fa:4b:26:35:b1:9a:93:44:76:3c:d8:66:41:ee:4f:
61:fe:f5:12:e7:9a:cd:69:bd:1a:19:a3:00:89:85:
8c:6a:e8:21:bb:22:3b:f7:9d:90:ed:27:d5:f9:d7:
70:97:10:f4:9a:04:e8:91:59:2c:2e:7a:a4:4c:a6:
61:99:72:9b:22:1e:94:99:84:98:e3:95:98:c7:72:
b2:bf:82:55:3e:0a:01:03:ce:6e:0c:ef:61:4b:c1:
db:d8:dd:c7:43:f9:d2:b3:12:bf:44:5a:ab:4c:06:
68:7f:72:74:09:7e:2d:e8:79:f9:0f:32:45:60:a4:
2d:7e:4b:5b:36:9c:2a:00:be:4e:1f:d9:03:ea:14:
9d:97:70:75:e1:34:52:9c:6f:c4:ae:d7:3f:25:4c:
a9:25:28:d1:f0:ac:64:b9:54:2d:76:86:b0:42:b2:
9f:92:02:f0:ba:d8:ad:06:d1:00:3b:07:6a:92:61:
eb:0b:b6:ef:c8:50:45:05:b6:1b:01:36:be:53:48:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:74:D3:47:D8:35:20:26:C5:84:40:36:67:51:C5:79:7E:21:FE:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/884cfc0d-b009-31bc-8c67-5d772bdc73d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97/1716e48f-a64c-4227-b984-34b75b5f7e97.crl
X509v3 Authority Key Identifier:
keyid:3D:CF:76:F3:2D:14:4F:11:86:F1:48:0A:2D:25:47:D1:06:2C:88:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1716e48f-a64c-4227-b984-34b75b5f7e97.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.64.0/23
139.60.72.0/22
IPv6:
2604:4ec0::-2604:4ec0:2fff:ffff:ffff:ffff:ffff:ffff
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:db:ee:13:b6:20:79:66:bd:70:0b:c5:3c:eb:3e:8d:5a:d2:
de:47:cd:4c:d1:54:e4:13:0a:4e:85:20:5a:96:b9:ab:f7:1d:
3e:c7:34:77:dc:38:66:13:19:a7:a3:61:6c:17:3b:b5:c7:d4:
79:47:a3:8e:8a:47:f4:00:6f:72:8b:7b:00:70:b5:cb:b4:4e:
80:9c:ff:ec:e2:ee:b9:a1:f5:e2:cb:8f:44:d1:cb:72:23:ec:
82:47:60:9d:8c:5c:16:9b:10:a2:aa:1b:4b:23:9d:2d:14:d7:
7f:4e:89:75:96:9e:83:0e:39:31:2d:82:53:49:74:6a:6d:f7:
69:e1:46:92:e0:30:41:26:7c:a3:97:d1:ee:91:80:c7:a2:aa:
bc:2a:4f:14:88:a3:a6:24:f8:67:d0:05:6c:b3:7b:00:e8:1b:
30:2e:eb:80:b8:65:d1:c0:8d:a1:f8:c9:42:f6:ea:85:c1:9e:
d7:02:e4:9e:14:f4:71:b1:e3:a5:67:3b:94:43:a7:4c:34:7e:
80:f0:4e:4a:b0:38:c9:fa:e9:0a:6a:89:47:bf:d2:90:9a:34:
44:2a:cc:b2:e3:69:99:27:17:7d:be:e6:5a:5c:92:b1:c1:80:
d0:7f:41:3c:86:79:69:8d:7a:bf:d6:58:79:88:d5:e7:89:85:
86:cd:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:31:08 2025 by rpki-client