Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/6927569f-1cd0-36d3-87ba-73fdbd4472b2.roa
File: 6927569f-1cd0-36d3-87ba-73fdbd4472b2.roa (raw, json)
Hash identifier: TznaE4CwkNfffpLKwB4FR983P7CoMQRPmc0GVcSg7DI=
Subject key identifier: 8E:15:5F:0B:0F:39:E0:69:A4:BD:FF:14:84:1F:EA:7D:20:97:D0:78
Certificate issuer: /CN=fe38e0f9-f100-419a-915a-3e2451a50c5a
Certificate serial: 010D0C9F432858486960622A139B6D35BBE7AF80
Authority key identifier: 2B:B7:9F:5F:1E:21:45:E5:DF:E7:98:93:53:3E:A2:62:42:2D:16:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/6927569f-1cd0-36d3-87ba-73fdbd4472b2.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 398223
IP address blocks: 23.149.16.0/24 maxlen: 24
104.250.232.0/22 maxlen: 24
2602:803:4000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:62:2a:13:9b:6d:35:bb:e7:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe38e0f9-f100-419a-915a-3e2451a50c5a
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=ac2f3272-c54a-4080-a11d-b8f047c26af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:db:96:c7:74:28:25:ee:da:b1:89:67:02:
0f:dd:bd:1d:89:45:93:11:50:b0:f2:2c:57:2a:ea:
cd:77:e7:5d:b3:48:83:1b:cc:07:75:10:6f:b7:d4:
e1:bb:b2:b9:68:8a:cb:ff:ba:82:36:5e:3e:a9:16:
52:27:ad:6c:53:f5:84:8e:42:09:92:ac:99:10:c1:
7f:6a:07:ce:16:1f:ed:44:7d:94:ef:43:52:20:4b:
fb:79:db:42:8d:52:f8:71:30:fe:12:ef:a4:e1:29:
0d:7c:ef:86:52:86:60:48:ad:25:c8:bd:f4:67:2d:
1e:c0:74:2f:e0:5e:69:00:80:55:3a:b9:85:45:fe:
1a:88:ce:c1:2f:4e:06:74:6e:a8:41:66:93:35:03:
e0:89:d2:a3:c7:c0:13:46:63:6e:db:f8:a3:20:b7:
7f:af:02:88:1a:4d:2c:f5:63:79:49:fb:9c:f8:81:
c0:9f:2e:17:51:44:eb:00:a9:27:43:43:1e:5e:fa:
81:1c:71:91:07:c5:71:a0:a8:c7:df:7a:a2:c4:53:
16:c1:d6:2e:27:15:3d:6e:1b:00:31:81:f0:c4:65:
01:9e:bd:f9:69:f6:e2:fc:08:62:28:1b:71:6b:fe:
3c:30:7b:c3:6e:f4:cb:9d:af:3e:ef:79:cd:ac:90:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:15:5F:0B:0F:39:E0:69:A4:BD:FF:14:84:1F:EA:7D:20:97:D0:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/6927569f-1cd0-36d3-87ba-73fdbd4472b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/fe38e0f9-f100-419a-915a-3e2451a50c5a.crl
X509v3 Authority Key Identifier:
keyid:2B:B7:9F:5F:1E:21:45:E5:DF:E7:98:93:53:3E:A2:62:42:2D:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.16.0/24
104.250.232.0/22
IPv6:
2602:803:4000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:bb:5e:6e:ea:26:11:60:03:50:2b:7b:c1:d9:c0:a0:ba:e7:
a7:be:19:82:ba:56:6b:09:3c:de:87:41:b8:11:3a:0b:07:b4:
eb:e1:f0:93:d8:01:72:4f:06:58:ad:16:ef:de:39:21:22:a6:
ad:77:a2:9a:66:15:9c:09:48:12:76:2d:dc:b1:ee:01:a9:5b:
0b:f0:87:fa:ea:b4:dd:c7:e4:f5:28:f2:ee:a5:88:c4:9f:f6:
0b:af:c3:68:05:00:c6:d8:1b:aa:fd:df:4c:06:d7:c8:4e:e3:
88:0c:02:8a:f2:dc:95:5c:9e:9d:df:23:95:33:6d:30:93:02:
84:8c:2f:ac:05:96:2c:f5:ab:f3:47:b3:09:3a:39:0a:9a:33:
48:46:94:77:c6:ff:b7:91:48:bc:e7:b7:47:60:c3:c3:fb:b7:
3d:e5:5e:ab:4b:3d:b1:91:54:af:81:5f:77:34:17:03:d6:7c:
a6:b9:41:39:51:ac:7b:57:66:20:4a:e0:d5:aa:89:58:82:fb:
57:3f:e8:d1:66:0e:f0:96:0b:24:a4:0e:04:b5:27:1b:3a:60:
3f:1b:e4:fa:bd:cc:54:62:0e:4d:5d:83:71:d0:f6:42:87:bc:
cf:cc:11:e5:42:13:98:1c:0d:b8:29:09:73:eb:78:ba:fc:d7:
b2:74:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:33:59 2025 by rpki-client