Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa
File: b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa (raw, json)
Hash identifier: oJXNARNk5bDUoWWjc1tKVttnQdFOyJkTCMKl5N9IBzY=
Subject key identifier: EC:D4:EB:4C:37:6E:6B:44:E9:77:5D:1B:C1:48:F1:52:53:7B:EE:49
Certificate issuer: /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Certificate serial: 010D0C9F43285848090FAA244E32C40C7F1C6840
Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 11831
IP address blocks: 23.111.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:aa:24:4e:32:c4:0c:7f:1c:68:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=c3b5c33c-c936-48ff-8d61-f78ba3a40956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:83:48:a6:9e:70:5f:16:09:58:6a:cf:e1:
95:65:3e:9d:c6:a0:f3:06:89:53:91:7e:33:e7:6c:
1b:6b:f0:be:e5:4b:c1:e9:77:83:30:b4:f0:db:fc:
10:1a:e2:8c:9d:c4:2a:91:49:9c:d9:b6:66:86:33:
6b:c4:68:a3:98:ae:65:67:56:f4:94:95:fc:4a:38:
7e:66:43:d3:2f:73:dc:e1:a2:71:fa:7b:4b:40:b2:
66:ed:44:27:07:98:97:1a:a2:d1:4e:e6:d7:60:66:
a1:b9:78:66:93:78:cf:0a:3b:a2:2d:66:1d:b8:36:
75:b1:5b:14:10:a3:32:fe:ac:73:8b:d3:57:a9:df:
a7:79:ad:45:0b:4e:5b:81:de:88:d6:c8:89:97:42:
39:e4:d1:75:93:75:75:a8:a7:93:b3:73:cc:1c:af:
a2:65:e5:14:bf:43:83:dd:a8:c8:2c:e8:7d:0e:5c:
88:b5:a9:88:c5:a4:b2:9c:84:3a:72:6c:1b:6c:a7:
3f:60:12:d2:7a:de:41:2a:11:2f:6a:02:db:d4:80:
5d:69:1a:5a:1b:45:bb:23:20:52:94:5c:dc:c7:4a:
71:53:5f:47:aa:71:d8:1c:e5:44:48:b6:93:9a:44:
07:31:f6:a7:ac:cc:3e:d9:cb:74:ff:73:f3:32:93:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D4:EB:4C:37:6E:6B:44:E9:77:5D:1B:C1:48:F1:52:53:7B:EE:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/b2a3d926-0f5a-3fc3-8fed-b7abf982077d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl
X509v3 Authority Key Identifier:
keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.111.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:41:5f:9c:17:0b:06:95:b4:42:be:7c:27:62:c8:51:79:c3:
88:fa:3d:40:59:d5:6c:ab:c5:1d:50:85:f6:18:10:18:bb:29:
24:06:a5:4b:ad:e6:c6:34:f0:b5:22:c1:b4:7d:33:d8:28:bc:
90:35:4a:bb:ea:5e:29:06:bb:b8:60:0a:38:d8:75:f1:8f:c0:
eb:55:5c:b1:63:84:8a:b5:78:dc:8d:cc:3a:a5:ea:19:3f:32:
01:d1:65:48:31:78:52:be:6a:97:82:a5:ed:68:69:c3:8b:53:
24:e8:64:be:53:96:7d:69:88:be:12:54:0b:a5:cd:ef:60:74:
cc:c0:86:93:d1:88:49:5e:92:c9:d6:14:c1:3a:87:64:d7:b5:
8e:26:b0:11:7e:1a:2b:db:cb:86:e0:74:54:14:1c:99:aa:82:
10:83:d0:cf:b6:a6:55:e0:1e:dc:88:0b:f3:52:d5:b9:18:44:
60:ce:a6:71:dd:83:a7:7e:a9:d9:2d:4c:86:eb:55:f8:cd:07:
af:d3:15:47:65:ee:9a:f9:4f:c2:7a:bc:c2:77:52:85:eb:94:
17:94:11:e9:d0:8f:82:52:8a:14:3d:df:63:57:45:f4:6d:9e:
0f:2f:da:1a:c2:a4:39:ee:78:92:75:66:d9:e9:4b:1d:7f:24:
e6:5f:1f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:14 2025 by rpki-client