Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa
File: 644ba320-53cb-3343-a8c8-84fea857ab0e.roa (raw, json)
Hash identifier: NN+EsF2O1jY8yU3Vld0LQGOqjqkVQYW992YK2K59lv0=
Subject key identifier: 48:FA:29:B5:65:5E:18:02:FF:5F:B3:2D:90:4A:3D:07:C7:31:BB:32
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584863CAFE33F9AFC31ECA288080
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 394161
IP address blocks: 8.21.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:ca:fe:33:f9:af:c3:1e:ca:28:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=533d52da-ca98-40a1-9c5f-571be7457a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:c4:3d:84:be:e2:22:f4:0f:03:24:26:9f:
8e:95:4c:fb:c9:df:2c:63:0b:89:2e:ed:f1:c4:e2:
e3:c0:1b:ac:45:3a:4c:9e:13:67:6b:72:6c:51:17:
8f:63:0c:dd:3c:6e:b1:a5:2a:a9:18:28:a5:d6:0f:
08:55:c0:54:5f:ae:aa:c3:5e:71:24:38:7e:83:1b:
71:67:9f:92:b5:8a:5e:1d:a4:b7:97:78:46:db:03:
4f:39:7d:2b:99:3f:57:4a:cd:9f:2a:8e:88:d5:de:
6f:90:0f:21:e7:58:20:b3:8d:e9:e5:67:12:7f:1f:
b9:30:43:10:66:14:b9:1b:bd:a0:11:09:38:bc:a5:
26:59:a7:a7:9a:54:e6:92:8b:23:e1:be:cb:f7:6a:
ef:f1:3a:18:27:51:ce:fc:d0:9b:c5:52:d4:5c:90:
bf:d5:90:69:0a:c9:1e:ce:e8:b4:5a:81:ce:83:66:
de:de:b2:f5:11:f6:3e:cc:94:3d:57:88:99:40:d4:
ed:e0:ad:19:c8:98:fc:82:47:e1:fd:96:71:5f:6f:
2b:95:96:c3:dd:01:24:3f:2f:cb:a7:cf:f4:9d:89:
95:a1:9b:1e:77:2b:9d:07:7e:a5:75:c3:77:61:50:
21:a6:b7:f9:38:fb:a4:cf:1a:64:0f:07:c2:f3:0c:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FA:29:B5:65:5E:18:02:FF:5F:B3:2D:90:4A:3D:07:C7:31:BB:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.21.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:bf:a5:47:55:5f:ab:ff:cd:91:06:2e:07:f8:3e:e1:12:b9:
15:8e:02:9f:d2:74:ee:51:e0:32:3a:32:e7:37:2a:cd:36:24:
f4:c5:4f:8b:c2:1c:04:3b:cd:d7:2d:9c:75:b0:9d:e0:fe:e4:
ce:e6:e6:a4:60:bc:0b:7a:74:48:04:e4:40:25:f5:54:e2:94:
b8:dd:69:2b:0f:59:27:a8:cc:42:5d:47:ae:41:31:ba:87:09:
0e:2f:c8:14:5e:d5:03:25:c4:d6:ac:d3:9d:2d:c8:64:79:bc:
1c:8b:a5:29:41:d3:75:d0:b9:0c:1b:c8:b0:c9:af:e9:bd:52:
86:f3:88:01:7c:66:0e:b8:19:b8:fa:2b:6f:ea:10:66:f9:dc:
c9:39:ef:64:3e:80:e0:1d:e9:21:bb:b6:9d:bc:12:43:1a:94:
70:63:ac:f7:4f:56:4a:ba:f5:7d:e9:31:bb:bb:1f:9e:52:32:
e6:28:ce:b3:71:fd:b5:63:e6:cf:b2:ed:77:3a:22:70:c9:fc:
38:65:f8:fe:34:8a:57:6b:a7:77:4b:8c:d9:53:a2:3a:81:e2:
87:71:a6:bb:fa:fe:63:52:14:2b:1e:01:ab:95:7d:32:2a:cc:
93:77:0a:94:57:82:b9:cd:1c:2d:09:75:9b:e4:f2:54:55:95:
a3:ed:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:11:12 2025 by rpki-client