Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa
File: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (raw, json)
Hash identifier: JsxkqwdrNuBa98N63UiXifdxpl57Qt7xUiSbKZkif70=
Subject key identifier: 62:D5:A7:F4:F4:35:CC:F9:BB:0F:09:6C:EC:AE:46:1A:06:C5:6E:36
Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b
Certificate serial: 010D0C9F4328584800AF7DC36059DCF02EA1E200
Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 393524
IP address blocks: 23.134.16.0/24 maxlen: 24
23.134.17.0/24 maxlen: 24
23.135.18.0/24 maxlen: 24
104.192.96.0/22 maxlen: 22
104.245.136.0/22 maxlen: 22
2602:ff44::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:7d:c3:60:59:dc:f0:2e:a1:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=af33a96d-0385-4da9-a598-60a274df6dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:15:0b:65:c6:f5:1d:81:c6:5c:92:51:82:
ba:4f:34:44:a4:92:f3:6c:2b:3b:2d:25:aa:89:3c:
76:93:71:c4:de:a5:ef:53:ea:51:3f:5e:8a:a5:af:
a5:40:49:77:b9:cb:f8:2d:06:ef:a6:63:53:34:23:
11:23:83:6a:dd:c9:d6:c8:d2:0c:aa:c3:a6:c6:fb:
10:0c:b7:15:ac:7a:5d:bf:c9:7e:45:70:2b:89:c2:
48:dd:ed:2b:df:4d:80:3f:4d:34:60:d5:e9:45:92:
d4:1e:b2:cf:30:c0:39:b5:67:9d:89:7f:d6:ff:45:
a5:1d:f1:03:08:be:69:28:23:8a:70:4c:a2:fa:0b:
89:9d:f3:f5:f4:4e:8a:cb:33:24:20:96:96:7d:d0:
96:8e:c5:58:fb:63:2d:ff:1c:af:9e:66:c7:49:7f:
e5:db:19:f5:4f:a7:24:c5:e9:43:09:ec:1f:73:88:
e0:a1:ad:83:20:49:bb:bf:bb:6b:94:94:0e:a9:1b:
d5:99:9e:60:21:76:d7:80:c9:fc:e7:1b:2a:55:a9:
8a:98:26:07:a7:f2:4a:00:da:9b:8b:a3:bd:c9:e8:
0a:67:66:ff:e1:cd:aa:bb:38:b1:e3:11:90:72:fa:
5c:92:48:d2:a8:a8:20:84:35:95:56:76:da:de:3f:
c0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D5:A7:F4:F4:35:CC:F9:BB:0F:09:6C:EC:AE:46:1A:06:C5:6E:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl
X509v3 Authority Key Identifier:
keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.16.0/23
23.135.18.0/24
104.192.96.0/22
104.245.136.0/22
IPv6:
2602:ff44::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:74:45:e8:b2:d7:0b:fb:58:cf:ef:35:80:f1:57:26:b6:bd:
ee:47:06:47:9c:e8:89:e5:36:b2:8d:a8:d9:cc:35:a0:21:ca:
d9:21:f3:bc:d8:a2:db:07:95:70:b3:90:9b:f9:85:ef:d1:23:
ab:8e:ad:4e:d1:09:e7:75:cc:5b:ac:dc:e2:84:61:41:8e:6e:
78:8a:e4:0d:68:7b:8e:3e:ae:83:33:79:24:b9:ee:46:b7:35:
12:17:3d:17:c9:96:78:f2:63:10:1d:ab:0b:6e:f6:09:ba:d1:
f9:da:92:fd:49:43:7f:2f:be:d5:b5:23:90:f3:a7:97:20:e9:
71:2e:3c:91:6f:8f:fe:46:b4:c5:13:ed:e1:56:4d:f2:62:40:
4e:f1:b5:d1:54:1d:fc:a1:54:7a:29:25:32:9e:6a:2d:0a:6b:
63:31:54:b3:cd:7c:db:7d:8c:cb:f6:24:a1:2f:40:17:e5:ef:
51:ee:2e:80:6f:fd:e0:3f:d5:32:60:75:c4:61:dc:58:ba:fc:
bf:fc:36:ac:f0:fc:f7:09:18:e4:d7:ab:c1:8f:b9:d0:50:a3:
a2:a2:8d:e9:96:02:e0:2c:4c:bc:66:78:a1:30:4b:e1:a9:e0:
c3:c3:ca:cf:75:6d:35:32:4e:58:ad:84:af:be:af:6b:02:e8:
22:a5:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:20:23 2025 by rpki-client