Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/edce5252-1740-3c45-83d6-f6be110eccc7.roa
File: edce5252-1740-3c45-83d6-f6be110eccc7.roa (raw, json)
Hash identifier: AtuzAgrnU/S5awRUibf3gN2j0SNU0SOALJ6Iu7bEEX0=
Subject key identifier: E5:2D:FF:3D:5B:9B:D0:BE:1D:CB:DC:EE:BA:4C:EC:06:59:6F:7F:B3
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F432858484C1021E20FA30E8EC6617D60
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/edce5252-1740-3c45-83d6-f6be110eccc7.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 397373
IP address blocks: 192.154.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:21:e2:0f:a3:0e:8e:c6:61:7d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=17086704-a57e-4502-a2a3-52b2c9404549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:5b:70:8a:ad:d0:5e:c5:41:ea:37:db:99:
8d:3e:77:75:32:30:d5:ea:af:ce:f4:dc:ba:d9:ee:
0c:3b:e4:00:c0:9b:e1:50:67:84:c8:a4:06:55:43:
a6:b5:4e:61:8f:c5:3f:1d:0f:48:96:f0:31:b8:f7:
89:32:f0:11:f3:69:58:ba:e5:dc:71:6f:bb:76:20:
75:4d:17:af:a0:d1:ac:1f:e3:89:ce:5e:c3:d5:69:
79:67:53:f0:3b:ce:67:fb:71:79:25:58:64:f4:be:
cf:cf:d3:c3:33:78:90:db:bf:15:76:11:45:5e:84:
e3:a4:7b:ae:c6:9e:30:57:e3:d2:41:76:62:6d:f6:
7c:d7:dd:f6:2e:55:fc:f1:22:54:56:00:97:4f:a7:
e4:bf:f1:29:c8:fa:70:e5:5e:ac:07:63:ad:8d:61:
36:89:a7:97:3f:cc:e1:61:c0:90:d5:b5:c4:e2:a2:
1e:7b:c4:3b:75:25:6c:5d:24:1b:88:a3:bd:91:0c:
8e:47:75:67:60:1c:1f:d2:68:21:74:ac:15:1b:31:
73:a5:bf:49:82:29:bc:a2:28:10:0d:16:63:22:8e:
41:a1:0e:ca:41:42:f2:6f:3a:1c:0c:11:4c:27:b1:
28:d8:ab:19:ee:80:30:a6:88:f8:b5:3c:ae:03:ed:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2D:FF:3D:5B:9B:D0:BE:1D:CB:DC:EE:BA:4C:EC:06:59:6F:7F:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/edce5252-1740-3c45-83d6-f6be110eccc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:bd:24:2e:2d:29:6c:51:4b:64:cc:25:2c:fe:6c:c5:54:34:
29:be:7f:9c:1e:05:1b:f6:4b:9c:2c:5b:cb:c9:79:45:84:a0:
d6:1c:ed:99:1f:4d:c6:5f:d9:98:a7:a6:3b:5f:b3:64:53:cd:
46:4c:07:be:4a:c0:fa:b8:aa:99:a5:ef:3d:50:c4:d4:74:3c:
03:c2:f1:96:57:85:7e:a8:ba:cc:28:e7:93:f2:d6:0e:07:8c:
ea:56:9c:41:47:be:c3:ab:17:a8:73:29:54:69:a7:1e:72:ac:
5e:a4:73:18:b6:f3:b7:ec:bd:a4:e8:06:fe:a6:64:b2:8b:33:
a3:3f:5b:fc:62:d1:16:80:be:89:7e:95:bd:6b:c3:09:49:f5:
0c:bf:32:21:cd:4f:23:10:2e:93:3e:7a:38:8d:c3:a8:35:5a:
a7:48:60:e5:36:7a:e9:03:80:7e:e5:09:5d:ec:f5:db:86:e7:
e9:cf:42:ea:1a:5a:dc:fc:b4:2f:cc:ab:49:de:2a:a5:5b:41:
e2:67:52:26:97:20:6b:c2:58:f4:4d:c0:18:f7:f2:3d:5f:c7:
e7:7a:e6:27:ca:16:f0:e8:fd:60:f9:76:77:12:c4:ff:9d:0a:
9f:5c:62:41:5b:30:10:78:d6:fc:76:aa:67:2f:56:3c:29:69:
f3:4c:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:45 2025 by rpki-client