Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/27425216-be67-30e5-9322-17c3838b73ab.roa
File: 27425216-be67-30e5-9322-17c3838b73ab.roa (raw, json)
Hash identifier: GTYKbHB1JHHXAqphOXzPNZy9yfq3OaYrRvcMgRcBHGU=
Subject key identifier: A3:8E:E6:BD:7D:83:C2:CD:B4:74:30:D9:25:8F:F2:F7:DE:B2:E6:F6
Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial: 010D0C9F4328584869606B297C8428C7EF0F3080
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/27425216-be67-30e5-9322-17c3838b73ab.roa
Signing time: Thu 02 Jan 2025 14:00:52 +0000
ROA not before: Thu 02 Jan 2025 14:00:52 +0000
ROA not after: Wed 02 Apr 2025 13:00:52 +0000
asID: 11870
IP address blocks: 167.23.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:69:60:6b:29:7c:84:28:c7:ef:0f:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
Validity
Not Before: Jan 2 14:00:52 2025 GMT
Not After : Apr 2 13:00:52 2025 GMT
Subject: CN=17a544c6-6ba2-4b49-bcdf-c6fd75bc3683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3b:dc:6a:c1:41:45:8e:48:0b:72:c4:21:c4:
b8:14:c3:b8:08:01:e8:ac:41:fc:38:12:c0:5c:94:
74:de:0e:21:ca:f3:5b:71:cc:be:58:88:0e:d2:91:
5b:ba:07:ba:63:31:03:67:89:d9:90:97:9d:ff:75:
e0:dc:bc:11:31:f1:bb:a6:1e:43:0b:0f:35:3f:20:
13:8e:d9:eb:d2:cb:76:f9:8d:17:55:3c:bd:d8:7c:
3f:91:ea:72:3d:c7:ac:14:32:d5:d2:a7:c5:b3:12:
18:d5:56:b4:89:92:ff:8d:a8:ae:c2:98:85:53:79:
46:f1:ec:22:4c:71:19:99:26:43:d2:b7:6f:b3:ca:
00:ae:83:ed:a7:63:91:c5:1e:4e:70:aa:92:88:28:
55:1f:cf:38:d9:1d:6d:ae:22:fa:56:43:f7:7e:07:
c0:f6:a8:15:41:3d:1b:be:8f:1b:a3:6c:ff:ad:f7:
d5:d2:27:e9:3e:df:77:2e:df:98:11:01:b7:93:57:
5e:67:75:a5:64:16:97:01:bb:40:98:ec:7f:08:53:
a7:1c:bb:a7:2a:94:64:65:86:26:50:67:9e:4c:b2:
31:c8:fc:d8:39:16:94:fc:b2:1a:86:83:d1:5a:d0:
78:0e:6a:44:30:54:c6:46:56:08:d2:17:10:00:ac:
e3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:E6:BD:7D:83:C2:CD:B4:74:30:D9:25:8F:F2:F7:DE:B2:E6:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/27425216-be67-30e5-9322-17c3838b73ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
X509v3 Authority Key Identifier:
keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
sbgp-ipAddrBlock: critical
IPv4:
167.23.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:71:84:fc:8e:e1:8f:ba:be:92:ae:ca:d0:d8:bb:cc:a3:ad:
25:48:c3:af:d9:a8:29:09:25:73:e6:bf:34:ed:dc:52:cb:bc:
8b:37:8f:d8:17:79:88:1f:46:73:b8:92:31:48:a5:ef:3e:55:
8d:83:bf:7b:a5:39:73:d9:9f:0a:b4:be:fe:97:aa:99:a3:e4:
c6:3a:60:f3:e8:92:95:08:c5:b8:eb:92:cf:90:91:7c:7d:26:
04:c2:30:62:e0:d8:33:1a:64:f9:bd:e9:ce:d5:48:68:f7:58:
0b:26:3b:32:24:d8:09:8d:7d:81:56:18:8d:90:b6:95:12:1a:
dd:b0:46:17:08:ed:0d:b2:d2:53:4b:64:62:53:fb:15:41:2d:
05:ca:8f:5a:32:ed:7e:84:1c:bd:d5:4b:86:b3:7f:1b:50:77:
90:cc:b2:59:89:91:d4:37:59:9b:a5:d5:ca:a9:89:e8:7f:77:
25:89:99:d6:11:03:bd:e2:f9:02:9c:da:a9:dc:0e:a8:5c:d9:
b8:ad:09:12:89:46:78:e3:e2:09:db:38:94:ff:a4:33:88:ee:
e8:15:1e:02:ba:f0:07:c0:17:0a:a9:7c:96:6b:2a:a4:b8:d2:
4e:07:c3:d0:09:0a:46:d6:b9:b6:89:b9:7d:20:bc:21:18:35:
76:91:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:53:25 2025 by rpki-client