Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa
File: c629930b-0b54-3c4b-99e5-12e0b43928ec.roa (raw, json)
Hash identifier: k5TO0NqxYvKrt9+/LRMNYsQHa3pcdLtLtAyoHkl9mWM=
Subject key identifier: 3B:17:14:96:BD:80:C2:22:D5:00:79:8D:68:86:C8:71:D6:08:BE:20
Certificate issuer: /CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d
Certificate serial: 010D0C9F4328584838854B59CA00089629F78820
Authority key identifier: C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 14618
IP address blocks: 23.191.48.0/24 maxlen: 24
2620:9d:6000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:4b:59:ca:00:08:96:29:f7:88:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=0a13cb17-af9f-44a7-bef3-ae932a5452a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:0b:c3:d9:e2:fc:b7:bc:25:9b:c3:f4:55:
de:ed:8f:e2:5f:5e:02:21:5d:16:42:ab:f0:b9:02:
a6:5e:d7:a9:60:c5:25:4a:dc:50:87:6d:92:73:8f:
c5:12:b9:4e:e6:4a:74:1e:03:85:84:08:d6:84:66:
7e:25:ac:1e:bb:ef:17:1f:f0:61:1e:41:c1:d1:8d:
a9:f8:1d:70:3d:f5:47:45:b9:ab:9d:03:9f:0b:e3:
9b:e0:ad:6b:12:85:14:12:87:95:19:9d:82:cc:46:
37:8f:54:5d:33:a8:dd:be:e3:00:3d:85:b8:51:26:
4a:71:87:95:66:90:58:87:ce:c3:07:f2:6b:64:8b:
88:7c:95:25:1c:f0:a2:ca:0f:90:29:80:52:e5:a2:
78:9b:f3:12:6d:93:4b:43:45:59:9e:19:d5:9b:b4:
4c:10:fb:7d:e1:23:57:8b:af:b9:13:05:f1:61:ff:
fa:df:b5:93:12:e8:38:98:0d:e2:a0:f8:1e:92:fa:
ef:6d:75:cd:9f:5a:26:df:92:2a:94:28:8d:fd:48:
d4:30:ca:f7:b5:38:69:57:9d:bd:82:18:c1:ef:05:
06:d5:cc:95:95:07:32:e4:db:ec:7b:2f:b7:e9:30:
2a:14:3c:96:ff:75:a6:a3:e2:36:78:0b:20:8c:84:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:17:14:96:BD:80:C2:22:D5:00:79:8D:68:86:C8:71:D6:08:BE:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/c629930b-0b54-3c4b-99e5-12e0b43928ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.crl
X509v3 Authority Key Identifier:
keyid:C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.48.0/24
IPv6:
2620:9d:6000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:f5:68:2f:6f:ab:4a:38:b9:e0:d9:1c:cc:6f:ba:c2:48:d4:
0c:a7:88:a6:c3:19:48:5b:ba:2d:70:41:5f:84:bc:85:d4:2d:
1b:34:ee:55:23:fd:c2:cf:58:38:af:cd:78:3a:c9:8b:fa:12:
9b:1c:ec:5b:6f:46:fa:97:92:f6:e7:5e:74:db:74:fc:e6:91:
26:32:04:0b:f1:c1:d0:08:de:9d:92:d1:9b:3b:21:a1:93:56:
0d:f0:4e:6e:6d:65:59:5c:4d:44:0d:d8:fb:9f:ef:9d:2d:56:
37:3a:c5:bf:91:9d:7d:50:88:a6:33:02:bb:f8:f0:38:23:21:
02:a3:02:63:90:5c:4e:f4:db:7a:27:b5:3d:a8:f8:38:81:ee:
2a:5a:85:37:19:6e:21:a7:1f:3d:40:cf:39:a9:55:22:4e:93:
7d:d6:6f:ef:09:a5:36:18:9c:69:4a:78:87:f3:97:0c:4b:e4:
bb:56:af:d3:39:c1:c2:38:d1:69:7d:d7:74:48:b9:1c:3e:11:
3a:10:3f:a1:85:aa:2b:05:f9:bf:cc:00:ed:2e:b0:17:6e:d7:
a5:73:21:57:3f:c6:b5:90:3d:4c:f2:dc:c9:8c:0a:5f:57:e8:
1d:3e:5c:43:fd:29:9f:92:38:04:5b:f7:b2:f9:53:ed:b7:e6:
b4:d6:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:03 2025 by rpki-client