Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa
File: a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa (raw, json)
Hash identifier: xEJsF7Z+3xkkhU+N0RxmaVapwT2Ris5GwFu/+ZZgv1g=
Subject key identifier: E2:E5:61:AF:45:54:FE:BE:DB:3C:13:83:F0:C5:64:84:06:AE:E4:6A
Certificate issuer: /CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071
Certificate serial: 010D0C9F432858483455615202297E7AD4CE2280
Authority key identifier: 07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 397939
IP address blocks: 23.145.112.0/24 maxlen: 24
2605:7340::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:61:52:02:29:7e:7a:d4:ce:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5f8ff8-77a0-47e9-ba79-ccaf147a2071
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=2eb0ace3-49b3-4cee-8ee8-a57ca234e994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:29:b8:07:ca:1a:f1:ce:8d:da:c4:2c:0c:
1b:3a:8a:f8:eb:f9:8b:44:71:46:af:6e:70:96:7b:
0f:7d:7c:21:e8:97:9c:57:57:1e:99:ef:ba:fa:2e:
2a:d4:a2:68:5b:b5:bf:c9:fc:72:8a:ec:7c:dd:6b:
98:aa:e6:1a:5f:19:a0:ad:ee:9c:5c:56:86:b0:fc:
48:4d:02:70:59:23:19:51:c2:fb:9f:f3:6b:19:21:
93:c7:e5:9a:da:a5:90:7f:ea:cc:b3:4b:26:a5:07:
4a:c4:39:95:29:8c:11:c3:97:f2:63:ce:e0:25:b5:
a1:48:c3:13:69:2b:a7:9d:7e:ba:a5:63:cf:fd:fd:
ab:93:0f:c9:02:02:7d:27:9c:b6:dd:b6:ab:1b:7b:
b2:b2:1b:5d:13:8e:e1:86:f2:3b:88:c7:f8:6e:84:
91:ea:e1:7d:a3:f6:8a:3a:7f:9d:c0:63:3a:88:f5:
d0:e4:0b:0f:41:93:3e:0c:79:96:ee:d6:ef:23:00:
33:c2:c6:e7:d5:70:45:67:02:70:8a:8f:11:0d:3a:
d0:fe:d7:10:39:fd:c1:05:fa:db:f3:cc:eb:5e:74:
58:1d:72:9d:ab:ec:cc:7d:6a:81:93:07:e1:05:3f:
cb:70:db:38:0f:55:b4:83:1a:db:0e:a2:05:aa:77:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E5:61:AF:45:54:FE:BE:DB:3C:13:83:F0:C5:64:84:06:AE:E4:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/a4e3b6e2-c7d0-3434-b7d2-cebca6c2eebb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.crl
X509v3 Authority Key Identifier:
keyid:07:9B:4F:44:5B:60:A0:FC:DB:28:42:37:22:6D:6D:18:B4:1C:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e5f8ff8-77a0-47e9-ba79-ccaf147a2071.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.112.0/24
IPv6:
2605:7340::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:12:17:6a:34:7c:be:74:1e:7e:d8:e9:0c:ef:50:5a:6d:df:
d4:c1:9c:74:e7:ad:f6:f8:78:a8:be:6c:5d:3b:9f:f3:71:1d:
cd:54:3d:82:9b:53:98:ae:a0:ca:6d:48:4e:1c:45:55:04:e6:
05:34:4a:5f:0e:15:6e:25:15:8d:ba:f2:ab:3e:d7:c4:51:51:
66:07:22:68:a2:75:ca:e9:21:1c:2b:7e:b2:a9:21:36:53:21:
9f:47:21:c5:5f:4a:32:c6:28:d6:58:96:86:86:67:56:87:51:
c4:2c:ab:6c:21:1f:1d:2d:43:be:db:c2:2a:86:10:e4:50:8b:
f8:30:50:fc:c8:17:c4:38:3e:53:74:eb:0b:6f:df:ed:20:ea:
ab:34:10:97:e4:22:cb:22:0b:c8:83:61:66:a4:88:4b:68:8d:
3f:39:75:4f:a9:f0:e5:89:cd:a4:5f:81:98:79:e0:6e:5a:b8:
22:6a:83:bc:6a:8d:6b:55:7a:12:15:c8:b8:a1:a1:14:fc:d2:
5e:a4:89:86:52:ef:28:87:ca:99:b8:43:e3:ba:24:09:e7:9e:
ce:7f:0d:f4:a4:4c:7d:44:dc:7f:20:2d:21:3c:ad:cf:1e:42:
ef:8e:5e:32:b8:09:89:91:af:92:30:1b:19:8b:8b:3a:ed:b7:
9a:1f:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:15:05 2025 by rpki-client