Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa
File: 1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa (raw, json)
Hash identifier: TJYW5T9g2UtyqpKylpjOzrrZTOFEbGVLy6hNgjYg1lo=
Subject key identifier: 68:25:25:75:CA:C3:AB:E4:C1:B6:9D:3D:D9:1B:27:98:61:70:38:D5
Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial: 010D0C9F432858484D758E5563247BBBDEBFE800
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 25645
IP address blocks: 23.249.96.0/21 maxlen: 21
23.249.104.0/21 maxlen: 21
23.249.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:8e:55:63:24:7b:bb:de:bf:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=35f910e3-d17a-40eb-81fb-a31bc64d56f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:79:d1:c6:fd:79:2d:5b:c9:d2:c9:f5:05:48:
ea:c8:0b:c3:e0:ef:7f:8e:f8:b4:4b:50:e2:77:02:
90:d1:bf:76:55:f0:9d:31:9e:ba:8f:a4:d1:58:4e:
75:84:46:04:72:d5:c8:f6:92:3a:f7:8e:40:5d:7a:
0d:91:39:e8:2b:33:0f:c7:63:ec:93:ac:63:cb:d1:
0e:a4:75:63:7d:d1:53:4d:24:41:32:55:97:46:05:
b7:8f:f4:a2:b4:38:2d:f8:a1:5e:29:ef:82:aa:61:
e7:d6:3d:b5:1c:66:6b:38:aa:94:a5:da:7e:66:48:
6a:4d:89:49:fa:57:34:ae:6f:34:02:6d:b6:c7:5b:
e5:e7:b4:0b:3c:29:66:24:1b:60:a5:5a:00:b8:8e:
f9:ff:9e:cf:f1:cd:c2:9a:cf:ac:35:13:b9:34:ca:
f3:d7:83:4f:5f:ad:44:66:6c:0e:68:48:89:1f:cc:
79:64:4a:a4:e5:9a:90:07:ce:97:41:f2:8b:40:6e:
f5:ba:93:91:66:09:48:fb:7a:a9:18:d5:d5:9c:5e:
d7:d0:ca:98:23:4e:4a:90:a4:9f:3a:0d:db:77:c8:
1f:5e:dc:e4:7e:0a:a2:5e:11:a4:30:de:c6:a3:0b:
b3:2b:57:46:72:4a:a1:20:c7:bd:22:3e:bb:9b:2d:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:25:25:75:CA:C3:AB:E4:C1:B6:9D:3D:D9:1B:27:98:61:70:38:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
X509v3 Authority Key Identifier:
keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:e4:7a:10:41:56:2e:96:5e:ba:50:c6:61:c3:07:60:cd:2b:
98:b2:d1:e1:d3:db:17:f9:b7:0a:c1:96:22:22:56:d5:52:f7:
75:a4:81:68:48:bc:93:11:0f:80:f0:62:33:9a:47:8f:e6:61:
ca:66:ae:48:04:f3:7c:13:3d:8f:d9:c7:3c:f2:04:3f:4b:1b:
8d:ea:e9:4c:46:12:90:be:13:59:14:b4:c2:32:54:92:f6:5e:
f7:e6:75:af:97:1d:aa:55:35:5b:c3:f3:4d:92:4d:69:23:17:
f7:33:18:71:40:f8:75:9d:3b:41:5c:e5:f5:ef:7b:c2:e8:4a:
fd:7a:da:d8:1e:e7:0b:be:80:ef:90:45:11:d6:da:58:0a:63:
fc:74:9a:3c:17:9c:48:bf:19:27:38:4c:1a:5b:03:be:38:4e:
1a:24:a5:67:f2:8e:31:61:d7:1e:b4:9f:38:bb:47:0e:aa:c9:
b9:e1:2d:35:53:65:05:b2:94:8c:4e:98:24:73:a6:ff:74:c8:
ef:ad:7c:9d:9d:45:49:27:53:35:f7:2e:81:9d:ba:90:d0:3e:
14:af:06:a4:65:35:5a:73:76:7d:99:6c:ee:91:a4:8f:d8:2b:
22:09:0a:23:f6:7a:a6:e0:45:63:06:42:c1:2b:34:9b:98:68:
9f:15:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:14:47 2025 by rpki-client