Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa
File: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (raw, json)
Hash identifier: nm93CAAereQmtdBD9kFEkFnCulv9SVeeGVb5pdzYWiM=
Subject key identifier: E0:9D:7C:B9:E9:E7:70:38:00:88:54:25:C4:D4:5C:0E:80:A9:6A:EC
Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial: 010D0C9F43285848239547F2435745CE5516A440
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 16584
IP address blocks: 23.140.98.0/24 maxlen: 24
172.111.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:47:f2:43:57:45:ce:55:16:a4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=33f03fcb-b684-4f0d-8d0f-0f1c7f273f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:e1:94:dd:eb:0e:f0:f2:d4:82:0d:00:e6:
2f:92:bf:de:42:90:3d:42:3f:f7:df:f4:74:2d:32:
3d:5b:56:98:78:7e:45:67:07:e7:32:d7:7d:b5:a0:
d1:99:59:3c:b9:fd:75:b5:28:fc:d0:a0:4e:75:3f:
68:1c:67:7a:a6:21:0c:96:49:a5:6c:37:73:c3:03:
55:e0:d0:3f:79:1d:d2:a2:9b:00:0b:06:24:08:d8:
cc:44:1f:34:aa:bf:d1:db:e7:0a:0f:b7:60:e8:eb:
f5:4e:42:ee:dc:f7:00:40:de:d0:bf:64:a0:25:ce:
a9:75:2f:40:d8:08:ee:d2:96:48:e8:e2:bb:c9:de:
34:87:8b:b7:d8:8f:7c:5c:e7:9c:df:53:00:87:4e:
8d:a5:ca:69:05:5c:e8:aa:25:f1:c2:e6:8e:1c:bf:
b7:70:af:52:a2:88:5e:ab:ac:e4:36:29:ad:f3:ba:
11:af:13:6a:46:52:c4:67:73:eb:ed:53:c5:3c:4f:
53:fa:5b:8e:d6:84:86:da:62:11:c2:dd:f7:50:b0:
4b:d8:3d:aa:b9:60:69:14:1d:4f:a8:6e:30:75:57:
20:f3:33:05:74:d0:27:a4:4e:4f:92:e6:51:9d:c5:
dc:90:4f:52:9b:32:96:f3:32:ca:e5:55:7e:49:76:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9D:7C:B9:E9:E7:70:38:00:88:54:25:C4:D4:5C:0E:80:A9:6A:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
X509v3 Authority Key Identifier:
keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.98.0/24
172.111.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:79:cc:22:26:e4:62:7b:84:a7:b3:7c:bb:bf:20:77:64:48:
56:ed:a0:65:de:8e:1c:21:41:02:ce:26:25:5d:4b:94:1c:73:
4c:d3:3d:1d:33:e0:10:0d:e6:a4:b4:2b:de:7e:b3:ed:97:70:
bf:ac:76:f8:50:12:c6:66:7b:31:1d:5f:b4:71:ac:53:10:f6:
18:60:ac:ff:a5:12:5b:f9:d1:e0:44:7c:53:9b:63:10:a5:5f:
0d:01:0c:df:ea:98:56:c1:9d:37:81:53:63:ae:8d:0b:d5:9d:
78:e6:98:2b:92:de:8b:47:9a:67:a6:7e:9a:7b:68:f7:bf:05:
ef:8c:9e:51:ad:94:0f:fc:c8:9f:24:36:26:6a:cb:e0:ab:7b:
e3:4a:e8:2c:2d:2e:ea:c3:74:8d:c7:85:d8:f0:36:03:cb:e9:
a9:d5:2d:db:9b:39:5c:3b:ad:e8:23:84:e1:e9:ae:67:cb:28:
f4:1a:50:bd:83:78:88:1b:7b:2a:2a:88:29:41:da:75:b1:88:
84:6e:e6:07:8e:92:c9:89:c1:24:7a:af:a5:f9:d9:e4:bb:78:
1b:e7:10:eb:7b:8e:81:cd:61:d2:1a:7d:aa:f3:f7:31:95:c1:
03:a4:a9:dc:55:de:91:a0:5d:aa:d6:f2:e8:f7:cb:7e:83:3e:
08:b0:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:50 2025 by rpki-client