Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa
File: 2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa (raw, json)
Hash identifier: nMDpdaal+Z9WHDqP7EFhszLpEx/Fvpol4PMl8z6GmYM=
Subject key identifier: 43:1B:0F:FA:F7:AC:7E:B3:8A:B2:76:28:FC:7C:63:39:9A:A5:DF:33
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486C2B16DD77749F59F0BBD480
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 394285
IP address blocks: 23.88.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:16:dd:77:74:9f:59:f0:bb:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=1ed15da5-06a8-4e71-95d2-3d02cda04a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:70:ad:f5:b8:35:94:6d:19:aa:79:3c:50:
91:db:ea:9c:b3:8f:27:ee:96:b2:f3:ea:47:94:e4:
03:5b:58:5b:18:48:2a:6a:2f:a1:23:1c:b3:7c:3d:
aa:4a:43:01:57:ed:21:8f:15:8e:4b:52:4b:8a:d6:
6a:0b:82:26:fe:05:c5:15:07:1c:00:22:c3:2f:1a:
77:72:d6:26:1f:9e:92:3e:93:37:1e:da:1e:e3:5a:
65:cb:0c:0a:e5:1f:97:68:6a:db:8b:08:6c:c1:f6:
03:03:84:60:8f:83:c7:f4:f4:fc:46:68:ca:cd:08:
68:00:db:aa:87:71:fa:3d:a9:86:49:ce:dd:d8:55:
76:ab:d9:a5:79:5a:29:5e:dd:2a:aa:b9:ac:19:f3:
c2:b2:c1:fe:e0:38:be:f8:b0:29:ad:a6:30:64:62:
a9:cb:1b:52:47:e3:c0:cf:9c:ec:9d:e0:65:86:c9:
43:b0:a2:7b:54:f1:5d:ec:28:ec:d2:d2:07:f0:f5:
00:95:58:7b:e5:a6:fc:81:b4:13:c3:9f:cc:fd:4e:
6c:3c:d5:b0:c5:36:23:0b:60:5b:05:ad:74:43:f4:
b2:be:3e:86:3f:34:1d:37:1d:7a:a1:e4:60:3b:26:
80:12:61:1a:4d:93:b4:80:58:11:39:1d:0b:92:fa:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1B:0F:FA:F7:AC:7E:B3:8A:B2:76:28:FC:7C:63:39:9A:A5:DF:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/2a9ebc3f-0d63-3bbd-9abf-1df4b0be82f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.88.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:dc:16:93:1e:e8:33:90:02:12:66:0b:04:e1:96:e3:78:6a:
2a:54:02:1f:eb:6b:b2:6b:dd:34:b7:14:cb:56:5c:99:03:8b:
c9:20:e1:19:e3:9e:6e:eb:60:86:23:e4:19:92:44:ed:d2:5f:
ca:7e:61:82:99:d7:15:72:de:9e:68:97:9b:fd:6b:99:71:5f:
17:37:47:49:4f:1f:28:e9:a8:58:98:77:cb:2a:70:59:40:b5:
ae:40:bc:60:79:42:f2:37:fb:ba:d1:f5:11:6e:49:bc:e4:dd:
ed:d7:c8:7e:28:57:9c:fb:8e:b8:25:81:ff:82:5e:ec:b2:db:
5d:cb:39:b3:33:e7:75:45:a2:2b:ac:94:b1:ae:7f:b1:18:d4:
04:b2:4f:90:ee:70:ee:d0:97:6d:6f:2f:a5:d4:65:7e:cd:ab:
96:4d:8a:68:e2:3e:d3:4c:cb:4e:bb:0b:8e:21:9a:43:fd:9a:
5d:db:23:58:58:c0:c3:b8:48:a0:38:2f:42:f3:1c:43:38:73:
3e:14:a6:e0:41:90:83:72:03:07:be:a0:6b:8e:96:db:01:9d:
ce:5d:41:23:c8:49:d2:1c:5c:77:85:ee:1c:33:23:f3:d6:eb:
6c:f6:fe:1e:7d:a1:c7:eb:0e:2b:e1:45:50:57:f3:7c:34:d8:
ac:e9:7f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:03:42 2025 by rpki-client