Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa
File: 0b303bc2-150d-317d-a5b8-89981f88cbe7.roa (raw, json)
Hash identifier: we3O26CWzVWnl8boRipI3Af4fptX+w0OTX98t57xoJs=
Subject key identifier: AC:91:00:6A:81:A1:E2:66:0A:91:8D:BD:73:86:65:57:CE:EF:C5:5F
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285848116FBB7F82528F7B7F277A18
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa
Signing time: Mon 02 Dec 2024 02:00:40 +0000
ROA not before: Mon 02 Dec 2024 02:00:40 +0000
ROA not after: Sun 02 Mar 2025 02:00:40 +0000
asID: 6461
IP address blocks: 8.44.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:11:6f:bb:7f:82:52:8f:7b:7f:27:7a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Dec 2 02:00:40 2024 GMT
Not After : Mar 2 02:00:40 2025 GMT
Subject: CN=539b647b-cf23-473a-94b4-9ddca73fe78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:16:0d:36:9a:4b:7e:08:60:4e:6e:0f:00:a1:
b5:cd:5a:63:28:db:5f:87:0e:c7:d9:a1:05:9a:1d:
a2:ce:a2:e2:fa:cc:76:72:84:ba:20:0e:d1:25:bb:
96:51:af:c5:ee:ea:67:30:63:74:b2:4f:24:59:12:
be:7b:44:23:90:3f:42:40:58:97:95:ea:2c:8e:ff:
5a:1e:4c:e8:37:35:93:ea:cc:16:b4:a0:24:d7:8c:
67:49:86:ad:1a:d9:2b:5e:01:9a:b8:9c:12:bc:33:
31:e5:4c:5c:e8:9f:8f:20:c3:51:24:53:29:f6:6c:
57:d9:fb:9f:e2:07:81:49:67:95:54:47:80:d1:44:
18:a4:a1:a6:59:d1:7b:b6:f0:49:9b:e7:ef:40:1e:
6d:c5:de:e5:14:e1:21:48:1b:a6:f7:46:e2:ce:b7:
32:45:6b:cd:80:fa:a0:db:62:d4:c3:6d:57:3b:e2:
78:58:8b:42:37:ae:42:fa:9e:ad:e0:f0:8e:c9:1d:
7f:d9:0a:0c:dc:a9:af:a6:be:f5:75:9f:66:fa:4a:
7e:ce:d5:40:87:69:bd:1b:cb:4d:eb:a1:97:79:b3:
cc:12:66:3c:5f:ee:b7:3f:4b:32:d7:e9:dd:9e:13:
da:af:d8:00:27:d3:fc:e7:48:96:42:cc:d2:cb:f6:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:00:6A:81:A1:E2:66:0A:91:8D:BD:73:86:65:57:CE:EF:C5:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.44.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:c1:34:0b:da:bc:56:2c:7d:9f:3d:60:8e:fd:1e:ad:a1:a7:
43:da:21:e4:d9:87:6e:34:b2:d9:ac:ea:72:8b:ce:17:24:62:
a5:8a:74:4f:37:6b:30:2b:69:6e:e6:cf:ac:39:c1:0a:be:a4:
c8:bb:c5:6b:45:14:a2:3f:28:4c:c4:e0:c2:d2:d0:56:04:83:
14:d1:35:ff:d8:53:ef:e0:b4:c4:ae:fc:e1:45:e6:fb:a5:3d:
c7:2a:6e:9e:89:97:63:2d:d8:92:dc:69:2a:90:f7:27:15:76:
8d:65:51:73:16:b1:08:dd:0b:74:8e:a1:bf:40:8a:f7:a9:c7:
9c:46:3a:82:09:d1:fe:e1:79:c9:8c:81:a5:84:12:51:ce:32:
cb:a1:9c:9e:2b:f0:3d:32:8a:c1:a1:79:8b:16:6d:5d:0e:6a:
ed:56:81:cb:05:7d:7e:83:db:06:6b:4a:98:c4:b3:31:98:0f:
97:3b:9a:c9:cd:0a:e5:35:ae:c7:b7:4b:87:2a:2f:1b:80:de:
29:0f:b3:fa:b4:a0:14:d5:e9:b6:b8:2c:11:0f:87:71:82:ce:
cf:94:be:79:9b:50:5a:98:d8:6b:40:41:cd:30:07:24:e8:e9:
16:54:10:b6:34:eb:59:64:3f:95:cf:c5:42:1f:18:9e:64:ff:
ad:b4:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:03 2025 by rpki-client