Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa
File: ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa (raw, json)
Hash identifier: 2xAj3c2n4tHFGfrNlxu2Ug3uo4VTGyqF8ZYRX51ni1A=
Subject key identifier: 80:97:16:A9:8B:9F:AE:1F:EA:C6:3B:00:0C:9F:7B:99:37:EB:88:B6
Certificate issuer: /CN=9212b0db-bb73-4a6f-a5e7-4423f4889ee8
Certificate serial: 010D0C9F4328584834558456C7C437CF6AC2E180
Authority key identifier: AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 25948
IP address blocks: 23.172.208.0/24 maxlen: 24
172.110.129.0/24 maxlen: 24
198.135.236.0/24 maxlen: 24
199.212.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:84:56:c7:c4:37:cf:6a:c2:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9212b0db-bb73-4a6f-a5e7-4423f4889ee8
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=8a04dc32-9470-49ee-bf1c-d87735d6e9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:f7:27:09:bd:34:4f:fc:54:e8:cf:f6:a2:
74:dc:55:ec:71:a3:65:44:97:15:4a:24:b1:2c:24:
77:0b:f3:e8:28:d7:ae:99:37:24:df:cb:d7:f0:3a:
e8:7c:1c:21:f3:c3:12:b6:a5:97:b1:39:44:5e:39:
3f:c2:04:9a:47:b8:76:d9:61:c0:8e:c7:41:68:61:
f9:17:03:cc:12:94:4c:03:fa:9b:ac:d7:a7:4f:ce:
3c:0e:2f:83:a6:a4:39:7c:4d:a1:f0:7d:a6:b9:80:
9f:07:8b:fd:5c:60:95:85:af:ad:96:64:c1:98:ca:
e4:eb:8e:f4:be:5d:b3:c1:e8:8f:4a:f3:38:08:99:
e3:69:25:5a:69:c2:f3:98:a7:de:90:fd:c0:1f:a6:
32:8e:8a:f9:f5:3c:ad:70:bf:31:63:76:4f:70:25:
ae:28:2d:73:af:5a:39:24:d7:c5:a2:36:b7:f3:fa:
f2:17:ad:6c:28:f4:23:7a:6c:c3:9b:67:a5:c7:aa:
6a:4b:4b:3b:13:e1:be:5c:5d:28:ff:c4:d4:63:a1:
6a:f8:d1:1f:c9:5c:6a:e8:0e:a3:56:f8:4c:75:bf:
8b:57:60:d9:57:21:02:a3:e1:55:3c:c7:84:f8:57:
bf:5d:09:5a:f6:c1:7c:43:44:70:37:4a:1c:5d:64:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:97:16:A9:8B:9F:AE:1F:EA:C6:3B:00:0C:9F:7B:99:37:EB:88:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/ba044680-acfd-3da3-a6d9-a0f0c2911dbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.crl
X509v3 Authority Key Identifier:
keyid:AC:2A:F3:00:A0:97:DA:F9:0F:08:C0:F3:DB:A0:45:A9:9D:B5:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9212b0db-bb73-4a6f-a5e7-4423f4889ee8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.208.0/24
172.110.129.0/24
198.135.236.0/24
199.212.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:26:aa:58:41:cb:ea:a3:3f:cc:21:38:4a:93:0e:e1:63:20:
c1:34:22:3d:7f:fd:e9:0a:59:2c:51:59:36:b7:03:13:d3:b2:
a9:ac:a7:74:98:30:41:be:c4:3f:14:13:16:76:ea:ac:57:41:
fc:e0:20:2b:0d:fd:99:d2:88:8f:70:31:31:03:4b:69:18:0d:
5f:94:50:ef:e0:bc:4b:db:a2:bf:26:c9:e5:5c:a2:e8:13:41:
37:ca:15:2e:28:34:02:2d:e9:5b:81:3f:e8:65:6f:e2:e8:af:
77:fa:39:ff:5a:a6:51:7d:d8:55:08:81:ac:9a:63:7e:85:90:
17:92:5c:30:71:24:b7:9a:87:b5:8b:1b:b1:21:3f:07:e3:65:
29:e1:4a:64:d3:08:28:e7:1e:60:6b:5b:ba:98:8c:76:42:33:
8c:41:b4:3e:52:af:20:dd:42:04:d6:a7:83:9c:12:ea:ca:5d:
92:43:21:de:38:bf:7e:a6:3c:0c:b9:38:9a:f9:9c:a9:35:90:
04:88:14:c5:52:74:88:27:80:a1:c1:85:98:08:b2:ed:a3:34:
45:ec:77:89:29:a8:8b:f1:cf:70:9a:1a:34:14:37:9d:78:2a:
3b:24:42:26:eb:34:8c:1b:ce:93:5c:35:a4:56:52:37:f8:be:
77:75:15:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:41:47 2025 by rpki-client