Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa
File: 77adbc7d-1a74-3f6a-936e-813416ad3582.roa (raw, json)
Hash identifier: lgp/WxHMG0UUaL0zCGqzVFYQVorPb7gwkwcldE7Rcg0=
Subject key identifier: 06:C5:5A:FF:91:AD:DB:0D:BB:85:D5:5E:1C:4E:52:E6:38:FC:FF:B8
Certificate issuer: /CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
Certificate serial: 010D0C9F432858483455634E85D6757349382680
Authority key identifier: F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 397142
IP address blocks: 23.163.32.0/24 maxlen: 24
192.251.149.0/24 maxlen: 24
198.99.80.0/22 maxlen: 22
204.107.184.0/24 maxlen: 24
2605:b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:63:4e:85:d6:75:73:49:38:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=87624b7e-59b6-4b1f-a1c9-d2a8eb978165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:c0:cc:04:c9:a8:5e:46:64:e4:5c:07:f6:
0e:e0:b4:50:51:d6:52:3d:d9:c8:87:f7:8a:fc:35:
c0:eb:53:29:46:7d:aa:c9:c7:56:d6:8f:c1:b2:8a:
c9:84:e3:c3:c9:b1:a4:2c:72:c7:c8:d6:d5:46:d1:
1b:43:17:0a:ab:fc:38:f0:1a:25:fb:dc:cf:d1:84:
77:a3:e4:d8:fb:1d:c9:85:ca:a1:5a:85:5b:62:cd:
da:9d:47:e7:43:ed:9e:d8:7d:87:56:34:10:9a:54:
ef:3d:d6:63:0b:fe:8b:30:49:e5:9c:62:40:69:25:
a1:c8:a2:dc:3e:95:9d:cc:3e:a4:91:7d:89:d9:57:
f0:8a:74:0a:2d:b0:be:62:bb:b4:3c:f2:f3:64:2b:
96:db:32:fb:c4:82:54:c2:4f:f0:0a:bb:a1:89:1c:
8f:20:36:3e:e9:dc:ed:fe:7e:c1:60:c1:1f:fd:c3:
99:17:2e:4e:d6:b2:63:a8:1a:79:5d:47:c3:9f:88:
8d:26:f0:40:b4:7b:2c:e0:40:5c:ab:ea:94:77:28:
45:b0:59:77:29:1d:f5:7e:5c:53:77:93:ef:a1:b2:
c7:4f:83:a8:a6:43:77:4c:c8:5b:5b:e7:c1:ef:8b:
3b:a9:03:f6:f4:eb:fb:9b:a6:79:7d:51:ac:1b:88:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C5:5A:FF:91:AD:DB:0D:BB:85:D5:5E:1C:4E:52:E6:38:FC:FF:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl
X509v3 Authority Key Identifier:
keyid:F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
sbgp-ipAddrBlock: critical
IPv4:
23.163.32.0/24
192.251.149.0/24
198.99.80.0/22
204.107.184.0/24
IPv6:
2605:b40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:df:e1:1c:0d:20:f5:b5:5b:5b:a0:7d:b2:4e:d1:8f:c5:ff:
23:15:ec:46:d8:90:76:48:9f:47:02:8e:3c:b8:8a:20:f3:35:
a4:2a:44:aa:65:3a:10:c3:78:2a:75:e0:f6:56:c5:b5:6c:b2:
db:60:e8:1c:e1:e2:71:dd:d5:2a:b5:9c:d3:ae:31:7c:18:f7:
35:e7:56:9d:fe:bc:65:bc:b6:16:aa:85:c2:36:d8:a7:9f:6e:
a4:95:f2:78:47:d9:68:98:c9:99:df:35:a6:50:0d:60:46:7f:
db:08:fc:eb:7b:b8:91:23:49:e7:1d:42:4f:6e:bc:c0:7a:07:
00:20:52:56:25:81:18:32:0e:b7:04:75:93:70:0c:7a:f8:34:
68:87:19:bb:da:ed:5c:9c:04:4b:24:a2:cc:f6:6e:ba:d7:1f:
41:ac:6d:d0:1c:e0:23:6d:3c:c3:c4:80:17:4e:c4:b7:c5:d3:
fb:76:4a:a8:84:61:c5:3a:75:12:df:f0:df:6b:f6:2c:3e:97:
6a:6a:a8:d1:cf:08:f5:77:75:c7:b3:09:ca:04:d5:52:5a:2e:
10:82:91:2b:24:37:a5:4c:01:d9:6c:04:7e:ea:02:6d:69:5a:
ac:4f:26:45:8c:7a:47:c0:e1:80:01:90:66:53:7f:8a:b4:70:
fe:16:f5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:47:32 2025 by rpki-client