Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa
File: df024027-651f-3384-b085-499c67c8e5f5.roa (raw, json)
Hash identifier: wlK+dai2hUZXR0ytVNQBkGmJcpJ1FpQTHGJCHMXsHag=
Subject key identifier: A8:B0:65:70:DC:30:AA:91:8E:24:90:34:74:88:AE:33:88:77:66:C1
Certificate issuer: /CN=0a846bda-a477-4fe0-8f13-997253568b7e
Certificate serial: 010D0C9F4328584812D537C11120983A55656500
Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 14570
IP address blocks: 23.139.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:37:c1:11:20:98:3a:55:65:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=980c0307-7cf1-4de3-bfc8-abc6852cbf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:ff:2f:cc:5e:5e:5c:66:38:20:e0:4b:b5:
1f:96:c8:44:c3:7e:e8:e9:aa:14:70:ef:00:05:a2:
18:39:04:49:73:a0:2f:f7:cd:5d:fe:dc:d4:fb:3c:
77:03:93:a5:94:ad:e8:f9:94:5f:84:f8:8b:df:57:
bd:56:c7:82:a3:dd:f1:af:16:6e:fb:24:56:eb:c3:
ea:c7:61:ce:3a:20:f8:4f:c1:29:60:fe:13:18:0f:
28:3c:1a:d3:f2:6c:9c:06:5e:2b:26:83:be:8f:48:
4c:c3:bc:b2:f5:58:b0:16:cd:cd:02:9a:1d:2d:dc:
9e:1a:6d:69:2a:5d:e0:38:a2:0b:24:49:c3:f2:62:
18:f6:fe:96:31:cb:a5:f8:8e:f3:15:81:31:6d:20:
88:89:1c:99:a5:3f:bd:09:15:8a:fc:51:6d:6e:d7:
9b:f0:29:78:74:02:ca:e4:a7:35:1a:6a:90:d7:51:
21:ba:23:e5:95:42:66:2c:20:40:35:55:76:fc:f5:
45:fd:f3:29:b2:f2:10:71:f4:4e:25:50:12:dc:e8:
9b:03:c7:94:40:06:e7:42:7a:3c:92:da:c4:7f:5f:
31:83:20:77:9d:1d:8a:f8:a6:62:5c:10:82:bb:60:
ff:b7:6b:49:34:6e:bb:6f:f9:b2:b8:33:bc:3b:4c:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:65:70:DC:30:AA:91:8E:24:90:34:74:88:AE:33:88:77:66:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl
X509v3 Authority Key Identifier:
keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:ad:88:3a:9a:b3:e5:08:62:16:cd:bf:78:c6:8c:39:07:5e:
23:7b:e3:4e:36:9d:09:37:3c:1f:45:bb:19:0e:f1:32:f7:3e:
cd:a1:23:35:89:03:5c:21:66:84:08:9d:97:f5:d6:35:ea:d5:
2b:da:7d:c0:2e:35:40:43:aa:ac:15:08:d9:9e:96:89:de:25:
e9:07:22:cb:67:da:75:57:a5:73:c4:ae:4a:98:dc:89:1c:e7:
c2:e7:93:02:43:b8:75:c6:7c:ba:76:55:11:f3:36:94:d6:bf:
ab:41:0d:6d:38:13:d0:5d:9f:46:52:85:9a:08:2d:14:a8:d2:
95:4b:08:8f:24:e1:b6:68:36:56:2b:54:3d:6b:5c:f9:5b:b2:
ea:14:2f:0d:87:b3:36:a7:8f:31:e9:5f:07:3d:b2:b2:bd:52:
8d:c8:4f:bf:b2:66:b4:cf:ce:26:d4:d3:54:4d:69:b7:07:90:
1c:20:a5:51:25:a6:03:70:97:bc:73:a6:5c:9d:ac:54:ee:40:
13:7f:93:46:25:f4:03:e0:93:47:c9:f5:fe:f6:03:c1:d2:ac:
c0:0b:5e:be:9e:90:55:71:cf:1c:3a:bb:33:c6:fa:af:ae:f2:
53:00:4c:fd:aa:e9:8e:4f:0a:ca:4e:97:bd:e0:61:86:58:d5:
06:d2:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:20:04 2025 by rpki-client