Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/aa6cd397-3397-351b-9861-6d6a1caaf743.roa
File: aa6cd397-3397-351b-9861-6d6a1caaf743.roa (raw, json)
Hash identifier: IbXVKePOkjYM03cWL30p1AUO/vhjX05jDgPtJ2iJFjo=
Subject key identifier: FA:19:FF:34:AD:58:C7:99:4A:7B:AF:1C:AF:29:38:14:33:F3:04:E0
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858480EA50DE8832C7259C423DEEC
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/aa6cd397-3397-351b-9861-6d6a1caaf743.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 26114
IP address blocks: 8.30.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0d:e8:83:2c:72:59:c4:23:de:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=3a902488-b016-455b-ad06-066df9ffdfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:3e:15:1f:ce:b3:50:27:50:36:e2:56:e8:
68:62:d2:97:b9:8e:26:a2:8a:ff:36:04:83:25:4f:
eb:37:3c:51:51:14:de:fe:14:79:b2:28:cf:a3:fa:
48:26:10:3b:f8:dc:36:d5:e3:c2:0b:db:41:f0:95:
03:e0:80:1e:0d:81:60:b0:df:7d:c1:74:c8:58:ca:
64:ac:1b:a1:38:1f:d5:f6:1d:1e:24:e3:e5:48:aa:
ab:34:4b:eb:82:01:3e:7c:c1:59:01:27:9e:b6:a4:
12:b1:b9:48:87:b2:1a:09:1a:5b:e2:44:bb:1c:63:
ad:a4:37:8c:0e:fb:db:ee:94:f9:24:c2:e1:52:12:
6a:82:62:81:3f:42:f4:92:07:06:24:b4:97:b7:f7:
18:1f:31:60:7f:57:7c:74:09:09:0b:9e:58:f1:07:
8c:79:9c:7b:d5:8d:08:bb:c9:28:83:ae:18:85:05:
7f:df:6b:87:3b:3c:86:32:76:43:35:06:4b:49:52:
e6:a3:24:4c:27:3d:63:66:35:71:45:a5:fc:f4:ee:
1d:eb:4c:de:da:da:af:31:78:c9:3f:58:8e:71:6d:
70:95:d0:d0:07:eb:54:68:d8:14:9c:e8:85:e6:5c:
4e:a6:be:89:2f:51:b3:53:b2:57:2a:4f:95:0e:21:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:19:FF:34:AD:58:C7:99:4A:7B:AF:1C:AF:29:38:14:33:F3:04:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/aa6cd397-3397-351b-9861-6d6a1caaf743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.30.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:02:77:cf:89:24:c2:bf:a9:4e:b4:ec:98:ac:10:32:45:87:
0b:70:4e:db:8c:ec:0a:a0:2f:c3:ea:14:fb:1b:0f:b5:38:7c:
db:9e:a3:3b:d9:1e:a7:d1:03:fd:3f:73:84:2f:42:5b:44:3f:
7d:10:7a:7a:4a:21:f1:15:52:fe:71:db:5f:a2:97:63:d3:54:
8d:74:32:0f:1d:ef:7d:13:bd:a9:4d:02:62:89:99:78:f1:ae:
25:79:4d:7a:0e:6a:e5:a2:4a:27:9b:41:b5:95:51:30:f4:92:
ec:e0:23:ac:4e:4e:8f:de:e1:c6:43:ab:f2:4c:d2:9e:4c:52:
f2:4a:99:70:91:ff:7c:ca:92:b3:1e:82:ac:56:f7:06:97:bf:
cf:9e:47:86:22:46:1e:ee:45:a7:1b:cd:92:17:60:a5:55:24:
b5:bb:f0:75:70:2a:17:71:ba:32:d9:c8:54:77:9b:08:75:85:
a3:f5:5f:43:a7:3d:e0:1d:4f:97:2b:2e:3a:3d:d2:b0:b4:23:
72:02:10:e4:d8:63:23:b7:50:24:75:e3:a0:d6:4a:3d:5f:cb:
fb:c1:a9:d7:53:a2:1c:c5:63:a4:31:a0:e0:5a:bc:10:c9:02:
dd:a0:59:3a:b1:e6:fb:8d:e0:38:a2:7d:7f:52:5d:9c:5a:1d:
65:2c:e1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:20 2025 by rpki-client