Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa
File: a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa (raw, json)
Hash identifier: KDwlxQJySTUieqBCIBbKGcCUpLCYVhYQNy9Jo8S8D8I=
Subject key identifier: A8:3B:2B:67:9A:E7:5C:12:A4:35:0C:56:43:E8:29:F5:31:5B:DA:AE
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858486D904B91EBA83EA5CD8A7000
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 3356
IP address blocks: 8.23.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:4b:91:eb:a8:3e:a5:cd:8a:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=16bbc9c2-ad4c-40de-97a6-b72c159333e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:e5:5a:c6:2c:2a:1a:18:9f:8f:a1:0f:e2:
ff:9d:3d:28:cd:83:e9:c4:69:81:2f:eb:78:da:02:
73:d2:d5:98:52:b1:37:38:93:6a:0d:a0:07:3f:67:
2f:c7:90:f9:34:c1:06:f9:19:78:3a:a4:95:c1:42:
19:74:6b:de:d7:85:64:93:58:75:70:ec:1e:87:f7:
4a:aa:23:08:86:3c:b6:73:7d:80:f8:45:36:0a:9f:
93:19:a0:87:9f:b7:9e:b7:33:3e:8e:ae:67:88:41:
3e:ef:11:76:15:f3:bc:3e:14:ea:94:f8:3c:a3:70:
31:e4:d8:9a:64:a3:fd:1d:62:aa:50:0a:e0:d6:0a:
88:4e:dc:b7:6b:4e:11:a9:28:31:8c:3e:0e:ab:d0:
4d:34:c4:95:64:74:dc:fd:20:f1:5e:be:2b:ac:48:
02:0d:88:45:d3:90:57:6d:d8:8b:b3:03:37:ae:0f:
4f:16:c3:18:64:c8:12:78:5d:8b:ff:0b:95:48:33:
1a:91:3b:2a:88:8a:52:ca:e8:8c:0d:66:cf:a5:3e:
4c:13:13:1b:ab:d9:d8:a2:3b:74:be:46:14:44:6b:
9f:e3:f9:00:e4:a4:ba:e8:4f:67:3a:06:11:64:3d:
a9:fd:08:fb:3e:e8:a3:4c:e8:b1:68:13:d8:07:f7:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3B:2B:67:9A:E7:5C:12:A4:35:0C:56:43:E8:29:F5:31:5B:DA:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0776cea-a3cc-32f7-81d1-b9383f1f2597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.23.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:21:4d:9b:20:51:61:91:e6:2a:b2:5d:e7:19:33:23:19:3e:
82:7a:23:e2:bb:b8:12:b8:50:ff:78:15:75:fc:78:d9:a4:29:
00:a6:9a:bd:f9:c1:8b:05:16:14:a3:c0:de:30:82:6a:90:5b:
8f:5c:21:9e:06:b6:77:01:62:ee:54:95:6b:f0:00:90:34:44:
73:c5:6c:bf:5a:8d:f4:e1:33:3d:3e:09:1e:bc:28:80:44:a8:
6c:4e:17:e1:c0:37:07:07:29:45:e8:fd:d5:51:ee:88:dc:29:
35:d8:4a:bd:4e:94:8a:ff:c7:66:85:ac:fd:f4:a4:5e:4b:dc:
8b:57:96:4b:ae:6a:c3:3c:fb:23:e0:dd:fb:9d:bd:eb:37:6f:
d6:6e:9c:8e:d8:2f:39:32:58:86:02:09:9c:ca:a4:25:29:c5:
69:93:2f:33:de:15:2b:1f:2e:76:86:4b:c1:30:a4:9e:f8:27:
27:cd:8b:b1:6a:94:9c:2c:0d:b2:07:d3:b0:ae:70:36:dd:a9:
de:5e:8d:51:3f:19:28:40:a4:a1:2a:67:01:86:aa:30:8c:b0:
34:da:ef:d8:b3:7e:04:54:0b:12:52:51:8e:b7:3e:bb:5c:71:
90:0d:53:11:06:dc:65:cc:50:b3:a7:04:ae:c5:14:ac:97:5d:
af:6d:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:44 2025 by rpki-client