Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa
File: e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa (raw, json)
Hash identifier: x08vcJYvRdg39QSAa1B3YwbwEb3t1jlCjBWhUMimfAQ=
Subject key identifier: B1:68:02:EB:40:1B:22:42:78:1B:F9:A4:3A:C1:A3:87:A3:C5:88:CE
Certificate issuer: /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial: 010D0C9F432858480BDA7A635C810ACD1DDC3700
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 19740
IP address blocks: 23.173.114.0/24 maxlen: 24
172.81.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:7a:63:5c:81:0a:cd:1d:dc:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=f559cb3e-ed4c-4ce3-923a-ed77b422da88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:e5:fd:ff:f0:91:c6:08:1d:6b:39:13:cf:
78:e1:e1:66:69:d5:cc:45:70:8c:20:30:96:fa:49:
59:bd:1d:5d:6b:f9:46:22:5c:1d:20:cd:59:28:92:
b5:60:f7:42:99:e1:33:e2:d0:13:98:b5:e6:be:6e:
a8:6d:82:7f:46:a7:6b:e0:e8:f1:8b:31:ad:53:b9:
33:b8:ef:54:38:b6:96:73:25:0c:9d:38:cf:12:c0:
47:04:be:ac:d0:86:8f:86:d3:f2:d4:30:51:d4:56:
a8:4d:74:2b:0e:89:5b:87:58:2c:a5:4e:4c:c6:5a:
c1:d3:12:b3:68:b7:9a:9a:2b:21:1d:90:75:30:15:
b3:b3:e3:ce:b1:21:00:66:73:74:88:e1:25:c9:5c:
bf:87:0a:bf:91:de:27:20:f6:6c:bd:ac:57:0b:07:
8a:31:65:56:21:0d:95:a8:eb:24:47:f9:27:90:29:
01:ad:04:d9:fb:61:5d:ce:f5:34:7e:d6:ca:ae:7c:
14:cd:1f:f2:70:24:65:3b:94:fa:e0:6c:99:5d:d7:
e7:86:48:79:46:72:55:da:01:e6:b4:8b:e2:15:f6:
b1:a7:1d:21:5f:06:c8:ef:16:d6:29:89:d5:80:1f:
3b:a1:50:78:77:15:de:22:b2:bb:1d:89:82:d7:60:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:68:02:EB:40:1B:22:42:78:1B:F9:A4:3A:C1:A3:87:A3:C5:88:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/e40247fb-ef5b-34d4-9838-7395b3a8ae81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
X509v3 Authority Key Identifier:
keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.114.0/24
172.81.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b0:ce:cf:c6:45:b4:fa:07:e1:9f:4e:5b:9b:0b:a8:f4:89:
b2:28:f2:c6:be:b9:5b:c4:a5:26:f5:8e:27:89:63:c6:5a:63:
bb:d2:98:23:47:e7:57:fa:aa:9a:f7:26:d9:bc:12:f0:60:e5:
04:34:86:d5:92:7f:53:ce:cf:8b:6d:69:31:09:1b:2f:49:50:
53:93:e6:ad:56:e7:5e:23:f3:5b:af:23:b1:6b:91:fd:60:ff:
8b:7e:5d:a1:04:26:eb:3c:bf:fb:b3:1b:d4:38:96:c5:52:a5:
19:74:94:e5:4d:96:58:47:1e:d4:04:31:78:f5:9e:61:60:e6:
14:b3:5b:8f:27:80:ab:b8:e6:28:13:c3:91:07:a0:3b:c6:08:
04:7f:20:c2:66:d0:be:79:17:3c:c2:f6:f7:d1:ac:3b:87:28:
35:20:b4:00:d1:ce:9b:c9:cf:5d:19:6b:73:03:3a:04:d6:0b:
79:c1:40:1a:de:66:dc:b3:43:d0:97:8b:aa:81:89:f7:14:a8:
08:53:83:65:d8:9c:f9:69:59:40:78:6f:1d:d3:4c:9b:c9:ef:
1d:18:48:13:b1:dd:06:a7:e6:c8:26:3b:95:d4:ef:74:57:71:
e6:df:27:c0:38:50:7a:a7:84:79:76:b5:4d:62:27:d7:61:ca:
fd:06:16:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:30:31 2025 by rpki-client