Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa
File: 73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa (raw, json)
Hash identifier: mIy/hDCvMyGRL3CZt31c4ZLDYGKudlEJ/5+oFNYxTxc=
Subject key identifier: E0:9A:62:3E:B6:21:F7:19:26:0C:BD:0A:66:DD:A7:C2:DC:FC:F6:BA
Certificate issuer: /CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
Certificate serial: 010D0C9F43285847FC7F9906DA054CE77CF33C00
Authority key identifier: 70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 394868
IP address blocks: 23.174.0.0/22 maxlen: 24
23.174.4.0/24 maxlen: 24
2606:e780::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:99:06:da:05:4c:e7:7c:f3:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8950c3d-3b43-45b8-93cb-fbf99568c311
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=8d8e5ff1-71cb-4b35-879c-304df57d9171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:a9:73:a9:92:72:ca:ea:f5:8e:26:88:64:
0a:05:84:1f:02:e0:5b:d4:6c:81:2b:fa:00:77:77:
2f:55:21:09:e9:fe:ff:bc:bb:8b:58:b1:e7:e6:dc:
ab:fc:8b:20:68:4a:98:c4:11:19:05:d3:98:95:76:
97:68:65:a3:a2:bd:a5:1f:b8:8a:e6:36:5a:0e:eb:
72:01:24:2b:b5:ee:17:c4:a1:16:61:3e:ca:53:48:
6d:68:c8:94:64:fc:d0:e0:4b:95:b9:77:12:68:36:
7f:a8:5f:02:e8:a3:b8:49:37:86:07:47:bd:0a:60:
5f:68:53:c5:01:56:8b:f3:af:cf:ed:66:67:0a:81:
5b:0a:c1:85:da:f1:60:43:50:a5:ab:9b:33:21:34:
a4:51:35:05:ba:32:47:77:72:b0:2b:33:1e:b6:f8:
62:86:db:28:be:28:78:61:89:31:48:72:b9:5e:18:
cb:b7:71:4c:38:44:7b:cd:a4:a6:6b:5b:34:3e:25:
a2:10:40:bb:fa:ea:3f:68:b8:c1:b1:73:b9:ee:cc:
a8:a0:46:47:ad:22:f8:2b:5f:86:24:4a:4d:58:5e:
33:d1:7c:ac:a5:4d:58:2e:24:ca:d7:4c:ff:a7:62:
c1:f9:97:2b:ce:9b:a6:73:f9:04:cf:ea:b1:fc:15:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:62:3E:B6:21:F7:19:26:0C:BD:0A:66:DD:A7:C2:DC:FC:F6:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/73d1d4e2-0cee-3a1e-9534-dcbf7e868732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311/e8950c3d-3b43-45b8-93cb-fbf99568c311.crl
X509v3 Authority Key Identifier:
keyid:70:85:48:33:B6:A6:96:F5:DD:B7:E0:F2:54:CA:8A:29:80:FF:49:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8950c3d-3b43-45b8-93cb-fbf99568c311.cer
sbgp-ipAddrBlock: critical
IPv4:
23.174.0.0-23.174.4.255
IPv6:
2606:e780::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:b3:ec:28:cb:db:f4:b4:da:ba:b9:58:64:ed:83:e8:cd:4d:
3d:54:85:39:c1:e7:67:28:de:fe:be:74:a2:e5:23:17:7c:49:
5b:c7:4e:f5:20:f1:88:81:d6:fd:7c:fc:12:5e:26:87:7f:b2:
7f:f5:95:0e:b9:db:8f:bb:06:95:79:c6:d9:b2:4f:17:2a:a6:
15:7c:48:a3:29:47:7a:75:c6:ef:b1:3e:8e:f8:60:29:5c:82:
c9:0b:92:da:67:9a:e7:16:4d:39:94:53:68:3f:4f:8f:1a:78:
f0:19:a4:8c:6f:3c:79:53:1c:13:7a:c2:e5:a9:c0:f4:e6:d5:
52:07:5a:cc:a3:9c:ab:38:d3:b9:dd:30:95:e5:14:b5:82:63:
3c:ee:41:09:d2:81:cc:64:9e:41:5e:ad:0e:0c:ff:ff:16:fb:
c8:2d:a0:e4:3e:ad:b8:e8:b1:b9:77:bc:40:5f:38:dd:ab:26:
b0:18:44:90:0b:31:6e:5c:4b:71:62:96:60:93:4a:97:72:4c:
c8:ac:61:92:ba:e3:43:46:a5:7e:4b:db:10:d1:f5:bc:a0:b3:
6c:51:a1:e3:60:98:6a:09:00:9c:b7:90:48:97:fc:ce:8e:04:
81:0d:c6:0b:79:07:c7:da:70:f0:62:20:0f:60:23:6f:da:9a:
ec:7b:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:16:44 2025 by rpki-client