Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa
File: 67cd331c-0eea-3d40-96d5-7acc007b8867.roa (raw, json)
Hash identifier: x1yPXc+S+aUHxJFy6fckmkdLb3VttFTZulrzbE0y4LA=
Subject key identifier: 04:FE:19:D5:86:0F:54:A9:B6:DF:CB:C8:C4:7B:37:06:FB:CF:0A:EA
Certificate issuer: /CN=822f9974-af88-4d0b-a65f-065fdd26c645
Certificate serial: 010D0C9F432858484C103360EE32F40EE5CFA500
Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 58061
IP address blocks: 23.247.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:33:60:ee:32:f4:0e:e5:cf:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=30cd3a15-de4f-4f9c-a2a1-164ec2f7841e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:8e:b0:cc:92:18:36:e8:fc:5d:fb:a7:dc:
7d:91:3f:90:89:41:86:8b:09:88:e2:19:bf:c0:e1:
62:91:af:68:3c:83:3e:1f:e8:c4:42:61:f6:ce:6a:
82:29:b4:0d:f4:46:b8:26:59:b9:7d:f8:35:5c:8e:
00:da:6f:2c:a4:2b:8d:fc:75:c9:96:18:ba:5b:ab:
0e:8e:f1:24:14:7c:17:da:61:d0:ae:6b:cd:ee:35:
8c:14:2f:8a:c7:74:8b:c2:a3:ab:4b:7b:d2:78:80:
b0:ec:87:60:3e:d1:89:17:58:c5:95:9a:70:36:4f:
ad:83:f3:17:2a:51:0a:5d:1f:86:7e:12:77:36:fd:
a5:fd:cb:56:eb:ae:42:58:f2:e1:d0:69:7e:68:19:
05:34:b0:9d:2a:aa:9b:ec:e3:c2:d4:55:e2:34:e7:
0f:b9:58:56:0f:e0:5d:a5:aa:d3:08:64:85:18:0f:
06:82:9b:98:7a:a2:75:6e:cc:83:05:b6:dd:0a:77:
5b:b2:ff:80:e5:3f:06:82:57:00:66:63:29:66:bf:
11:70:1b:ad:19:54:45:14:72:3c:48:1f:ab:86:55:
88:22:68:ca:33:1b:e0:57:92:e3:17:f4:47:dd:dc:
7d:a4:d4:88:ed:28:60:fe:89:38:02:e0:68:2c:5b:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:19:D5:86:0F:54:A9:B6:DF:CB:C8:C4:7B:37:06:FB:CF:0A:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/67cd331c-0eea-3d40-96d5-7acc007b8867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl
X509v3 Authority Key Identifier:
keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:31:10:f1:fe:63:67:e8:ab:d6:04:2e:ba:7a:5f:49:bd:d2:
22:25:38:96:92:26:77:1b:cb:fc:af:02:6c:b3:07:d9:63:2d:
a9:93:6b:b4:52:4a:2d:95:fe:f2:f3:b0:43:22:80:6a:21:f8:
ef:07:1a:da:cb:94:90:c0:6d:33:26:d5:9d:f8:40:56:00:ff:
e9:0a:8e:d8:1d:c0:c2:68:48:18:b2:6a:a2:11:1b:2b:2a:71:
0e:7e:d7:43:54:e2:af:37:af:aa:17:24:b2:99:87:54:8f:b4:
b3:36:92:bd:44:3f:22:ac:c0:24:70:57:41:28:0d:cb:76:2c:
00:f7:7f:60:9f:20:f6:bd:74:fc:79:38:c3:a4:ee:d0:0b:eb:
fe:f7:f9:61:25:67:f5:30:09:e6:ad:5b:3b:e1:35:56:ca:03:
a9:3e:66:b7:ad:3c:30:23:76:ef:b2:cf:e4:b9:6e:11:94:2a:
23:eb:2c:89:db:fa:12:77:27:02:69:98:32:4e:fc:0c:a1:89:
91:a4:f0:d6:dd:bc:2b:bb:aa:ba:c9:1c:06:8b:b8:80:5b:be:
08:ca:b0:e9:c0:17:93:36:52:3a:61:89:d5:b9:a9:fc:1d:5d:
5c:b0:2c:77:06:13:c8:83:bc:5d:56:20:d9:42:c8:5a:63:cd:
b7:1e:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:55:32 2025 by rpki-client