Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa
File: f8dbe662-4178-3aea-90e2-4d5ab001b930.roa (raw, json)
Hash identifier: YUKmFgRmkFJqkbjkH/SFJ3TDQh1F3qST5Y5nZsL0gzU=
Subject key identifier: 06:6A:AC:E2:5C:81:D3:BF:A6:7E:D2:ED:DD:29:2E:66:1E:CE:3A:E8
Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial: 010D0C9F432858482A8FD6242A7B51CC9EF9DE00
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 50842
IP address blocks: 23.136.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:d6:24:2a:7b:51:cc:9e:f9:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=3865aa83-1510-4b9b-96a9-2b8dd1eeecf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:21:4a:78:3b:85:f6:84:e0:61:b1:54:43:
74:36:e4:ab:96:bf:c0:fc:35:1d:fa:08:51:67:76:
3b:de:b5:1d:90:c8:f5:16:ca:ca:34:d7:a4:63:71:
9d:57:73:a3:f0:fb:28:19:50:82:9d:7d:e5:ce:ec:
78:2d:f8:9b:d2:8c:9c:4b:03:0e:cf:90:70:f5:bf:
67:ec:97:a9:7c:92:5e:e5:f1:2a:94:59:e3:da:6b:
62:cd:17:43:15:80:76:33:6d:71:8d:85:45:bc:5c:
f5:0d:17:34:b2:80:2d:d7:8a:05:bc:12:5a:6e:9f:
5f:24:e6:af:2b:a9:c5:4d:40:ba:9e:fe:b5:bd:be:
0e:c3:6d:1b:7f:d6:35:ac:d8:94:74:b8:15:24:77:
b8:da:00:48:14:9e:90:f9:a0:e0:31:29:b4:15:18:
02:53:d1:92:38:62:42:f2:aa:c7:e0:e7:fa:f4:41:
1d:05:5e:f8:a1:b5:5e:b1:5c:a6:ba:e4:91:0a:13:
d9:b8:8b:9d:9f:ee:44:f9:8b:2c:c4:9a:e4:ed:74:
7c:01:01:f2:af:36:11:da:dc:1a:7e:ee:23:d1:49:
01:3e:ef:ea:4b:62:2b:8f:11:e5:57:23:c8:0a:dd:
c1:d3:ea:5f:dd:9e:40:ba:39:16:b6:56:cf:ff:c4:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6A:AC:E2:5C:81:D3:BF:A6:7E:D2:ED:DD:29:2E:66:1E:CE:3A:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f8dbe662-4178-3aea-90e2-4d5ab001b930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
X509v3 Authority Key Identifier:
keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:d8:39:60:ea:45:a4:86:37:9a:8d:2a:0a:78:44:a8:49:21:
59:83:9e:11:fd:06:30:c3:da:c0:ea:4f:d5:f5:e2:79:b0:89:
6c:51:4a:41:5b:2a:df:2e:f0:61:d6:f6:86:91:1e:98:3b:10:
96:5d:47:49:53:fb:dd:ce:f0:cb:13:19:df:c7:48:8d:0b:d1:
c1:d4:15:10:26:d1:2c:b1:07:59:24:c0:b8:d0:36:2a:13:f2:
68:52:ef:43:42:0d:4a:1b:14:c4:49:47:3e:01:8b:b6:8e:54:
f5:18:b3:15:ff:7e:31:df:eb:2b:72:0a:c1:21:81:b9:4b:c7:
28:2e:e9:7e:dc:03:34:fa:c0:e5:77:94:2a:a5:bb:01:24:39:
4f:39:4d:c5:b6:f9:4a:88:fa:4b:66:dc:89:fc:26:f4:56:06:
60:0c:95:46:c6:04:25:bc:76:30:72:bc:15:4d:e0:03:7e:f0:
d0:54:80:3c:42:5b:83:6c:01:07:f0:e1:d7:fc:e7:2a:4c:27:
1f:7f:20:9a:28:76:91:64:b2:ea:35:63:e5:b8:5c:a2:40:cd:
db:01:ca:29:06:6d:1b:a5:ff:4f:5d:9e:53:5f:b5:a0:13:be:
c7:9a:13:df:58:05:38:7a:85:3e:42:94:66:0c:ad:88:9a:bc:
64:fc:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:48 2025 by rpki-client