Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa
File: 24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa (raw, json)
Hash identifier: rbPZuCdvTpdvQtebIvEU6sJeTz5r+Uh78Pw7eEi5fgM=
Subject key identifier: 53:D3:1F:F4:55:41:88:D3:3C:35:A2:DF:6D:DB:F6:7B:E3:FF:D4:99
Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial: 010D0C9F432858483F8018ABBD28A1884DEF8E00
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 396982
IP address blocks: 23.89.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:18:ab:bd:28:a1:88:4d:ef:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=1f61d40e-2e61-48c4-8195-08ead3f8103c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:c9:b3:06:5f:e2:cb:bb:17:6b:7b:0c:f1:
85:23:35:ee:08:fc:ac:8c:a8:8b:21:62:e4:b5:5d:
1e:ce:62:a2:09:93:77:1a:ef:f0:3e:8e:9c:7b:7b:
6c:12:ef:37:dd:1d:a2:c6:d9:ae:29:6f:09:e2:c3:
f0:c3:7e:3c:56:5c:c0:b3:64:0e:84:e5:72:4f:69:
ca:eb:ec:33:32:54:1d:12:68:7d:51:01:ea:14:34:
94:c8:67:df:52:2c:07:80:57:bd:76:40:8d:8f:7c:
a9:5c:ad:41:bd:d9:2f:d3:bd:61:e8:8d:6d:3f:f5:
fa:41:7e:cc:b1:14:e8:58:f4:f6:5b:91:d7:15:19:
b6:cd:d0:30:43:8f:a7:40:58:59:c6:20:03:a5:8b:
7e:83:34:dd:7e:b6:88:21:f2:60:da:57:27:20:92:
71:fd:f2:91:a4:e3:a4:a7:0b:5c:ea:83:e0:e0:9f:
63:07:f2:3a:06:51:81:4b:2d:4c:2f:29:3e:d1:48:
06:0d:23:a7:6d:1d:31:08:cb:17:6c:97:3e:c0:5a:
3e:df:e3:e9:04:2d:eb:d5:e1:36:f8:1b:b5:8a:e2:
59:8a:29:4f:f5:43:f9:9a:f4:4a:98:6c:71:e1:94:
db:42:bc:13:07:f8:5d:f3:33:74:29:78:b4:1e:ed:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:1F:F4:55:41:88:D3:3C:35:A2:DF:6D:DB:F6:7B:E3:FF:D4:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/24273933-cc5a-36c1-9bf9-cafed5e7a7e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
X509v3 Authority Key Identifier:
keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.89.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e6:43:3d:a8:af:d3:f0:64:33:40:6f:e7:e6:ae:ba:4d:57:27:
ac:58:7a:40:a4:7b:e9:7f:30:23:3c:6a:d5:5e:5a:65:30:3e:
d1:68:bb:03:61:98:27:ce:c4:da:46:ca:fa:a6:85:fb:03:0b:
cd:a7:5a:3e:1e:93:10:eb:df:b3:6c:85:db:b0:6a:c0:15:17:
6d:3d:76:84:59:cb:ca:c3:64:1c:68:22:1d:93:4f:50:eb:bd:
c8:6c:45:de:8b:62:c9:80:e9:99:4a:64:3e:a6:62:8d:eb:e1:
35:c4:3d:40:1a:45:0a:87:73:f5:08:fb:1a:93:52:c7:d6:8c:
a5:aa:23:4b:a6:76:1d:af:e2:1c:b9:85:2f:63:e1:ab:47:b2:
0f:e9:16:74:0f:3f:53:49:22:3b:ae:d8:70:97:b4:a8:04:cc:
73:b1:02:b9:cc:7f:72:d0:0c:e2:bb:b4:7b:94:11:3d:a0:ad:
86:e3:53:20:b4:60:0f:cf:71:7a:a3:91:bc:b1:9c:d9:40:dc:
72:ab:67:f5:fb:ae:86:f4:49:17:24:da:d7:2f:3f:ee:f5:a5:
97:c6:69:8f:a8:e4:4d:19:ee:fc:1f:f8:2d:f9:92:78:e8:70:
d6:1e:55:77:95:28:66:ea:04:09:92:cc:f9:5b:88:64:9f:06:
ab:fc:a8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:11 2025 by rpki-client