Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa
File: ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa (raw, json)
Hash identifier: g2UnOTFKN1diLl50rKQLZGWFwwdTm9S9IYN7b9bPqpc=
Subject key identifier: 47:15:35:81:AB:1C:D9:D2:BA:47:26:07:3D:3C:09:24:64:CB:15:D2
Certificate issuer: /CN=aa1697fd-d88f-4851-bbc3-2c19067535ee
Certificate serial: 010D0C9F432858480644F9ACA02999E8D2AF2E00
Authority key identifier: 4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 29802
IP address blocks: 23.133.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:f9:ac:a0:29:99:e8:d2:af:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1697fd-d88f-4851-bbc3-2c19067535ee
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=e071f528-8619-4323-a8f9-871625e899db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:47:85:96:47:91:bc:a6:df:c6:5a:be:2c:34:
45:d3:42:2d:17:40:62:1e:f9:cb:1d:22:58:9d:8d:
71:e8:4d:83:51:f7:ca:c5:c7:10:bb:89:e0:f0:79:
fd:36:14:27:cb:dc:86:95:9d:f7:5d:81:3f:1d:3d:
dd:30:b5:c2:ea:a6:8c:47:9d:ff:92:0d:5c:7c:3c:
4d:63:df:91:c2:84:31:44:02:71:eb:7c:11:7f:d7:
3c:b9:70:a4:52:04:26:50:17:74:62:75:27:db:a0:
82:8b:1f:4e:31:c0:84:82:a8:43:59:81:b6:dc:34:
08:77:9b:d9:ac:ba:9f:a6:65:6f:9c:01:96:a6:82:
2f:d9:43:42:68:a5:4f:d7:65:d2:87:c7:b6:7b:3d:
ed:b6:ba:80:94:d3:2f:98:18:69:bd:a8:8f:7e:34:
5f:2a:5f:8b:74:2b:11:c1:ab:06:fd:67:d7:ab:cb:
34:f9:77:ed:d7:bb:e9:e0:9b:9f:0f:e2:9e:76:d7:
61:e3:9a:4d:dc:87:39:ab:f2:b1:a6:9e:bf:76:56:
18:5d:86:30:89:a3:44:19:d9:45:34:65:2f:90:eb:
2b:b2:71:8e:3c:d1:29:48:05:bf:0d:1e:06:a0:89:
85:ac:52:2e:17:0b:06:72:7f:44:ba:e7:f2:25:55:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:15:35:81:AB:1C:D9:D2:BA:47:26:07:3D:3C:09:24:64:CB:15:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/ba52e8f3-4173-36c0-84cb-87aadf3975ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee/aa1697fd-d88f-4851-bbc3-2c19067535ee.crl
X509v3 Authority Key Identifier:
keyid:4A:AA:8F:DD:F6:00:A9:F3:52:CD:BC:87:BE:D5:E2:A1:C8:26:16:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa1697fd-d88f-4851-bbc3-2c19067535ee.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:31:f8:ab:44:fb:84:06:7a:6f:1e:2e:ec:8b:d3:2a:55:87:
af:8b:fb:55:cd:aa:67:21:21:4e:d9:b8:c1:49:4b:da:ba:38:
c0:ba:e0:d0:23:38:aa:22:12:14:1e:cb:2b:12:00:d8:7c:2a:
c0:73:53:57:dd:53:81:9f:26:01:cb:fa:38:10:43:bc:67:63:
3b:8a:4a:40:14:55:b8:94:d3:79:a2:98:01:4a:18:cd:4a:b6:
21:1c:61:fe:3b:4b:d9:a7:87:a3:5e:d4:28:1f:d3:63:ae:67:
e3:9c:a6:4b:10:cc:42:dd:2f:96:c7:00:a8:83:c7:91:93:8e:
77:1a:8c:cd:db:bc:80:a7:82:be:48:74:e9:4c:67:6f:16:85:
6f:22:68:e1:29:57:9a:2f:e6:65:9c:c9:8f:97:e9:51:90:d3:
c2:73:ed:65:08:5f:68:28:cf:76:a6:f3:90:cb:89:fd:aa:c1:
17:16:c9:8a:8d:01:23:db:2c:93:45:54:44:20:f8:2d:ea:0b:
80:ca:9b:39:0f:41:d4:cf:31:6d:ed:40:db:23:b8:33:21:4b:
64:f6:30:f2:38:a6:f9:e1:0f:99:e6:9a:a7:d7:7a:e8:26:2f:
da:e8:93:1c:bb:7e:2f:62:d6:cc:67:d9:ef:14:33:03:f8:48:
5a:6c:7d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:11:33 2025 by rpki-client