Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa
File: ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa (raw, json)
Hash identifier: +adcI7IPxk+r47PnwSh8QbUyjLi50CyRqK3pzS1oSII=
Subject key identifier: AB:9D:50:69:DE:68:7D:0A:AB:74:B3:BE:CE:9D:D1:33:2A:3D:2A:1A
Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec
Certificate serial: 010D0C9F43285848ADC61C785C911E30CAF07580
Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 36168
IP address blocks: 23.175.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:1c:78:5c:91:1e:30:ca:f0:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=7271ac2f-0620-45ac-b390-fba3c5efd477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:73:e8:d9:18:1a:89:d1:33:86:c1:6e:9a:
01:ed:79:7f:d9:3a:92:c3:ca:c7:67:60:26:7c:ef:
ad:8e:94:26:d9:4f:63:9d:c0:0f:5d:09:c9:84:c8:
f2:c9:a2:08:84:f9:2c:5a:c1:08:7f:ed:fb:48:9d:
66:f3:85:80:62:55:22:71:6b:3e:2b:7d:f2:4c:54:
ca:8e:03:a8:e6:fd:21:c3:d2:8e:42:e6:04:9b:cc:
67:90:85:9d:e3:99:62:c8:ac:b5:9f:de:21:4e:3f:
26:9e:36:ac:2b:f0:31:6b:f9:17:0b:ee:fd:16:99:
c5:5e:06:3a:71:6b:a3:a9:4c:dd:8f:26:ce:d3:a9:
ad:03:32:e2:88:4c:06:40:61:bb:77:56:a7:41:83:
e8:16:66:6b:48:4f:80:0f:30:94:77:b7:48:e7:1b:
07:3e:b6:f7:0e:2c:98:4d:97:8e:41:a1:4a:65:d3:
11:87:c7:e0:e3:f0:79:2e:69:a0:ac:7f:58:71:0a:
05:a1:07:11:a9:3f:a5:ef:cb:1f:8f:b3:7f:43:84:
7d:4a:56:d5:d2:be:89:59:04:57:3c:f9:db:d6:b5:
47:45:05:c7:1b:b2:f1:65:dc:b5:35:e5:20:b1:f7:
8b:91:57:17:e3:64:1d:d8:0f:71:98:b8:25:17:ae:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9D:50:69:DE:68:7D:0A:AB:74:B3:BE:CE:9D:D1:33:2A:3D:2A:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl
X509v3 Authority Key Identifier:
keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:5e:ab:72:c2:6d:e4:40:6a:70:52:78:2f:89:da:ef:86:ff:
68:43:cf:01:d8:3a:09:8f:b6:28:e2:bf:37:6b:69:85:73:dd:
e2:9a:3d:d5:24:85:7a:ca:87:3a:5a:d9:b7:5d:5a:93:c5:6b:
6c:f8:22:20:9c:ba:20:ca:64:b4:55:8a:de:49:29:68:d7:c9:
5b:24:97:25:52:0c:47:54:b7:cd:e0:ed:72:6f:38:29:7a:ea:
3f:2d:fa:f2:ba:c8:b3:ee:c6:29:3a:30:7d:60:cc:ec:5c:95:
26:4b:18:6d:3d:d7:b4:dd:f6:1e:9d:02:15:84:a4:99:b7:d0:
cb:e0:52:1b:ec:e2:f2:fc:9e:bb:8d:ce:c8:ab:82:9e:04:a8:
e5:b4:6d:66:6c:83:a0:bd:73:11:02:31:4c:55:12:0f:68:12:
22:88:27:66:14:07:2b:de:09:80:ff:53:3f:76:02:0a:12:d6:
52:43:1e:c7:40:48:ba:b6:a9:4b:b6:af:03:52:c6:e1:89:61:
69:2b:f0:a4:1e:a3:bc:bd:75:c1:e3:c1:d2:57:37:2d:69:52:
25:91:31:b3:4f:db:b0:0b:9e:7a:af:1c:fc:51:98:f8:b6:d3:
18:db:0c:38:16:b9:ca:f7:5e:38:15:8e:fd:0b:13:3b:0b:5e:
40:e6:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:40 2025 by rpki-client