Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fda12545-969b-3429-ae1d-ab8004a8b046.roa
File: fda12545-969b-3429-ae1d-ab8004a8b046.roa (raw, json)
Hash identifier: 4MfPpa089mHNwH8Ioh9utARQdETkNnhwq7N8aXcjBtk=
Subject key identifier: 3C:67:B9:92:48:87:D3:E8:7A:63:B9:90:5F:61:D3:48:21:2C:92:75
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285848388548EC8D31FD9B0883B480
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fda12545-969b-3429-ae1d-ab8004a8b046.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 20473
IP address blocks: 8.9.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:48:ec:8d:31:fd:9b:08:83:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=f01ebdbe-0dfe-4335-97ce-7ffaf68b70ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:38:d6:7a:7a:31:d9:85:69:bf:04:16:0d:66:
b2:bc:8a:79:4e:4a:d6:16:aa:ac:e0:34:b5:06:a8:
05:1a:e6:c7:c0:b2:c5:5a:f1:eb:89:31:03:c4:ce:
ad:b5:5c:f0:9c:07:bc:08:8e:8e:0c:0a:63:28:da:
35:ac:1f:ff:c6:fa:99:c9:d4:df:ab:e0:95:1f:52:
90:08:1c:4b:74:c5:47:af:c1:7c:7f:c7:bf:6b:43:
e5:c9:59:fa:c6:7f:d0:ed:a8:34:bb:97:ab:dd:f3:
27:a2:11:03:b7:e9:87:ca:27:58:2c:52:4c:f6:85:
28:cd:fe:ac:86:d7:d8:42:c9:04:dc:b5:e0:1e:61:
d3:1c:58:ae:a2:2a:ca:09:c0:6c:ee:84:20:e3:b4:
4e:c6:67:61:6c:26:17:43:ea:69:51:aa:ff:1b:9c:
cd:89:db:bb:f2:e2:3a:a4:a7:fc:c2:d9:c8:0a:7c:
d1:27:9f:b6:49:52:23:d3:b7:df:61:7a:bc:f1:05:
cc:c5:12:55:e8:34:03:8e:d2:f6:96:c9:07:15:f2:
38:30:6f:cd:0c:fc:36:5a:11:88:38:fd:54:a0:e4:
c0:af:57:7d:54:b8:86:5e:d6:b1:d0:a9:83:75:21:
7d:f8:3b:ad:06:55:39:c3:5f:70:6a:e0:f6:41:cd:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:B9:92:48:87:D3:E8:7A:63:B9:90:5F:61:D3:48:21:2C:92:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fda12545-969b-3429-ae1d-ab8004a8b046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.9.6.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:39:24:35:c4:2d:ec:b4:2a:13:94:f2:7b:85:38:d9:e7:09:
11:0e:c3:44:9f:3c:55:92:ae:6b:73:47:e7:3e:7f:10:21:b2:
7b:67:d0:ae:31:49:87:0f:c8:1d:68:cc:c0:94:ae:7d:d7:6c:
83:29:4e:16:96:00:21:27:4f:3b:af:5b:c4:44:b3:2d:af:3b:
a7:80:c5:74:5f:ad:59:82:3d:2f:20:07:18:8e:eb:3b:3e:f7:
a2:78:a6:b5:6d:21:2d:ca:c5:13:15:16:bd:8f:cf:21:15:fc:
99:3e:92:ad:7f:93:d9:37:94:72:57:a6:d5:40:d1:94:d1:31:
ce:88:fd:af:f9:2e:26:e5:a0:9c:87:b3:c8:c5:ad:75:9f:94:
80:67:6a:b4:7f:0a:00:1f:46:17:27:a0:eb:7a:58:63:4a:99:
83:a5:c8:81:9e:75:c5:20:87:cc:22:12:29:e7:85:c1:7a:75:
e7:06:ed:6d:8e:2a:8f:95:4f:2f:9f:95:00:48:e1:20:ca:35:
98:ba:af:d7:c4:05:29:e3:21:2c:28:95:12:4e:c6:e9:02:ac:
88:38:d2:53:58:ee:80:6f:fa:53:be:d7:61:43:6c:3c:66:ba:
ed:84:b8:2b:93:98:15:8c:31:16:36:76:79:cf:20:ea:13:e1:
d7:99:97:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:09 2025 by rpki-client