Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa
File: 1cee1fb9-f452-30a3-996d-1de632277883.roa (raw, json)
Hash identifier: Fzk5/e0IoHAIARCi8hxR+Jg34GXBBMB5r4bTV6NYfk8=
Subject key identifier: 8A:81:FA:E5:F4:B6:18:56:04:55:D3:AE:59:C8:CE:CA:22:5F:20:8D
Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial: 010D0C9F43285848748B1D387827EEB8E01FE780
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 396416
IP address blocks: 23.137.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1d:38:78:27:ee:b8:e0:1f:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=9743d2c3-285f-457f-aab1-649dfbd1283b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:e0:f4:59:51:02:f8:81:f0:31:1f:37:df:
58:98:e4:5e:91:a0:63:0d:99:4e:a9:44:dd:36:16:
26:ad:18:25:e7:48:ce:1d:d2:26:de:eb:3a:9e:5b:
ff:93:fe:57:8c:d3:16:30:6c:ac:8e:cf:d3:17:d6:
41:6a:52:b1:0a:79:30:1e:3e:f0:ba:3a:9f:29:2a:
d4:c2:8a:dc:eb:ec:bb:1c:a5:05:ac:60:cd:b9:a6:
b5:38:8a:b2:ac:d0:24:75:1d:01:9c:d8:ea:c7:12:
3b:d3:06:2c:b0:13:2a:55:0a:60:48:67:5f:0e:81:
ea:fc:9f:ba:48:10:97:3b:09:64:48:fd:88:61:26:
aa:a7:70:9f:ac:23:a9:42:ca:1c:5f:9a:75:55:fc:
a1:d9:cf:fa:d8:fd:b1:fa:4c:4a:d6:ae:91:8d:3b:
53:8d:de:68:05:d3:1f:6b:30:4a:d8:e9:f5:39:6a:
35:35:af:bc:27:28:db:88:a6:0f:c3:cb:49:6e:72:
98:8c:8a:02:ba:b0:3e:f1:bc:61:b6:56:6d:10:b7:
da:ba:54:6e:bc:2b:f3:51:7d:b8:50:e7:4c:3a:27:
54:17:46:80:57:32:82:0e:26:47:04:d7:64:59:77:
45:e1:8c:14:52:2c:3c:bb:c5:31:e7:76:22:37:1c:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:81:FA:E5:F4:B6:18:56:04:55:D3:AE:59:C8:CE:CA:22:5F:20:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/1cee1fb9-f452-30a3-996d-1de632277883.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
X509v3 Authority Key Identifier:
keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:35:20:57:ee:71:65:87:3a:de:fd:db:01:3b:32:9f:82:17:
4d:0d:c2:0f:50:98:30:77:37:d3:8c:55:36:b6:51:38:89:c4:
d3:ef:42:1e:c2:9c:bd:d4:fd:08:fc:52:7a:c0:35:45:92:41:
74:b2:01:74:45:98:0e:5b:07:8d:b8:f5:24:32:4a:fd:15:02:
24:16:9b:b8:c4:b0:1e:b8:7c:df:59:b7:9d:6f:44:3f:a2:4c:
c7:90:a6:08:49:12:d3:ec:f4:d5:34:5a:ef:b8:21:f2:60:f7:
aa:27:6f:e5:2f:9e:10:f2:a2:74:4c:d9:90:a2:a7:bd:36:29:
b6:01:21:fe:b7:db:d3:13:e5:34:c2:db:3f:1e:12:82:96:2a:
51:9b:f5:31:f9:e5:71:aa:f6:dc:88:81:2f:e0:d2:8d:f4:53:
07:6a:2d:15:69:28:c7:75:b2:bc:b9:b8:64:fc:89:3e:0d:7f:
13:2d:b7:f2:66:cb:c3:a4:89:7f:f0:7b:a1:47:05:8d:0d:11:
a2:70:82:a2:c5:d5:dc:d3:eb:fc:2a:e2:5d:e6:f7:df:87:c5:
af:2c:8c:70:97:f2:28:d9:2b:25:c4:d1:29:9e:48:cf:27:9f:
dc:89:e0:2c:6c:2e:56:77:48:fc:0e:96:7e:cf:05:b5:45:ee:
86:ef:d7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:36:25 2025 by rpki-client