Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa
File: d79abeda-0936-3a13-9b49-693cf7dce834.roa (raw, json)
Hash identifier: Zh9sTxFVIFKxFOYmSpC8x6u5EHKj1FfeveeGbTgJTdo=
Subject key identifier: 1B:68:EC:C4:1D:0B:A7:8F:43:BA:69:3E:EE:0B:9B:D3:99:25:FE:8F
Certificate issuer: /CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5
Certificate serial: 010D0C9F4328584883E5C4EDB685B1615D599480
Authority key identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 22679
IP address blocks: 23.172.152.0/24 maxlen: 24
2602:f971::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c4:ed:b6:85:b1:61:5d:59:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=abb96f91-900f-490f-84e0-a3a04c05e9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:03:bc:b4:7d:59:34:55:35:e7:79:09:ca:
2f:d6:56:af:31:cc:ae:4d:38:ba:0c:9a:67:ad:a2:
28:8c:54:e7:6b:be:ff:f0:58:ef:63:ba:a1:d4:7f:
98:59:05:03:31:31:8f:99:88:8c:29:ca:f1:52:cb:
a5:46:55:a3:06:3d:08:24:3e:0b:6f:50:b8:c9:5a:
60:63:9c:4e:d0:48:cf:ea:b3:b0:b6:ec:17:c1:ee:
4f:3f:b4:fc:6e:08:90:fe:25:45:ab:c7:1a:cb:38:
40:f1:fe:44:9d:d5:78:2c:69:1d:4d:df:01:62:77:
43:98:da:a8:ce:af:59:27:e8:e1:48:2b:55:db:4e:
8c:a2:ed:21:d5:1a:62:57:9b:41:04:ae:33:d9:99:
8d:ea:8f:6f:46:a6:94:2e:8c:3e:fb:fa:3f:44:c3:
3e:fc:4d:36:e1:de:cb:56:b7:8f:a3:94:7a:9f:03:
b7:c2:6b:ad:1f:3a:a6:a3:36:82:6f:0d:c8:84:94:
e7:ad:b8:93:99:1f:eb:0a:84:b3:9d:b9:cc:06:bb:
32:19:c9:29:03:bd:94:10:33:82:80:29:70:52:92:
83:ea:18:f1:1d:9e:6c:d1:3e:88:4e:ae:da:76:92:
0e:94:f9:03:31:a9:6f:12:42:d3:5f:c2:b3:c8:49:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:68:EC:C4:1D:0B:A7:8F:43:BA:69:3E:EE:0B:9B:D3:99:25:FE:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.crl
X509v3 Authority Key Identifier:
keyid:DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.152.0/24
IPv6:
2602:f971::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:f1:7f:6a:4d:73:a5:c5:55:ea:f2:b9:90:72:5a:3d:3e:e9:
7e:98:53:10:5a:d0:56:db:dc:ef:34:d1:1a:6f:73:8e:50:3b:
e0:19:96:a0:70:17:ec:1d:01:94:97:27:12:b7:a2:67:bb:77:
01:4a:6d:ec:c4:0b:8b:24:88:ab:f6:3f:fd:4a:09:ee:3c:b3:
ff:bb:bc:cc:90:17:c6:53:ed:44:7b:67:4a:0c:dd:1f:c5:b0:
36:0e:c6:08:29:c9:76:95:ed:87:d7:b8:3d:e5:0d:1a:cc:dc:
69:2f:14:b4:2c:c2:49:68:23:62:35:67:f7:4e:e8:70:25:b8:
a4:0a:21:07:28:09:d5:21:98:95:bb:1c:72:10:e2:73:3f:04:
20:f7:bd:23:89:2b:04:c1:f7:4c:63:e4:b2:0b:fe:a7:70:81:
07:88:72:bc:cc:f7:0d:fb:e7:b3:3a:64:f7:8d:34:dd:f1:60:
7d:cb:0b:05:56:84:e0:19:c9:30:58:36:b6:8f:56:5a:5d:40:
0a:81:1a:74:cd:1f:a3:e3:26:61:0c:56:42:f3:dc:26:14:ef:
c8:d4:41:27:15:70:1a:ee:cf:48:90:10:7a:e9:e0:bf:69:fe:
1f:23:ae:cd:91:1e:fa:a8:97:54:9d:11:55:fe:98:68:3b:45:
32:86:6e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:19:55 2025 by rpki-client