Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa
File: 47c9278e-dc66-39c2-884a-deec4ee4f615.roa (raw, json)
Hash identifier: HgB4qkQhmecC7Sw49qpUYXJkX0if00RvczZB5KVWhPo=
Subject key identifier: 17:0E:56:0E:54:3E:CE:BE:9B:F0:89:D4:34:64:CB:3A:59:5E:5E:5F
Certificate issuer: /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
Certificate serial: 010D0C9F43285847DC64A8DBAD0A66480C0C0C00
Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 20473
IP address blocks: 23.158.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:a8:db:ad:0a:66:48:0c:0c:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=054c7ba5-cc11-4733-be18-6bbb7a1d78da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:90:ad:a5:49:80:1f:9c:a3:34:b4:b2:ff:83:
60:86:70:27:22:f7:d5:98:34:c3:60:6e:59:f9:ba:
ea:44:27:c7:52:a7:f7:31:5f:30:e8:5d:69:37:ea:
bd:44:2d:56:44:ca:e7:4c:aa:d5:e3:93:0d:70:6a:
cd:21:e4:71:b2:fe:11:3a:91:dd:d3:bb:a9:70:f3:
1f:b1:3f:dd:a6:28:ab:5e:c2:58:ad:92:79:b5:b4:
c7:27:1a:89:86:9c:c2:29:88:9b:79:e8:23:1d:25:
1b:4a:90:70:e7:77:36:d2:67:35:5e:24:e5:e2:bf:
a1:c6:9f:d1:35:f0:8f:a9:ac:73:51:07:6d:38:87:
9b:39:da:5d:38:65:58:d9:2c:63:73:e2:f4:6a:69:
d9:ec:07:86:a5:c2:7b:f7:c1:6b:3f:08:08:6d:b7:
f3:7a:ef:1b:f0:e9:e0:db:a3:f2:2c:10:58:30:e4:
d7:45:70:a8:3f:1a:dd:d6:60:ae:3d:5c:f6:88:3d:
cd:ae:15:a5:f2:ee:0f:81:30:db:98:d3:5b:cd:20:
7e:cf:21:8c:f1:3a:fd:08:e8:99:e0:9f:7e:3b:09:
0e:bc:78:d6:bd:c1:c5:1b:d3:b3:d8:13:82:a8:c9:
c5:0c:f7:26:79:f1:1b:1f:cf:a3:fa:d1:9c:8e:0e:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0E:56:0E:54:3E:CE:BE:9B:F0:89:D4:34:64:CB:3A:59:5E:5E:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl
X509v3 Authority Key Identifier:
keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:b8:98:24:f9:db:37:d8:98:8f:06:58:b3:aa:2d:86:ea:a9:
e6:53:7f:61:b3:4a:a4:4e:f3:72:80:70:b5:c3:f4:b1:f4:b3:
ec:92:58:db:94:5f:e2:59:95:3b:34:4d:30:86:73:c5:5f:08:
99:73:a2:01:20:7e:ab:b1:31:30:b2:10:fb:32:60:33:31:46:
a9:80:87:d0:12:c5:8d:d1:4f:61:9e:8f:61:78:13:e7:f9:25:
e4:de:7f:ea:6e:e0:8d:30:46:66:32:c6:d3:5d:1b:75:4e:a9:
cb:a7:a8:bd:93:33:09:72:15:3e:8a:41:8a:9d:13:d6:60:b6:
bd:61:09:c3:30:7d:bc:f3:1d:c5:47:e2:e8:40:04:f7:a4:67:
de:df:84:1d:12:f2:46:25:a6:cb:1a:56:68:f2:7c:a0:53:b2:
11:4f:03:e3:28:ac:ff:c2:19:9e:b6:06:78:99:5f:b2:0d:42:
29:70:a4:ea:cd:da:b0:b0:70:0e:bc:c9:58:f3:9e:33:88:15:
33:da:33:d9:6f:4d:d3:25:67:e3:ea:87:1e:43:4b:af:cc:24:
54:cf:48:58:eb:39:bc:68:da:9a:4d:1c:81:b6:ed:7a:e9:e2:
68:51:79:07:d1:55:ce:14:0e:e2:1f:7f:aa:76:eb:88:84:4b:
5e:d9:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:04:51 2025 by rpki-client