Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/68a9d485-4b07-3e52-8c52-574733e856cb.roa
File: 68a9d485-4b07-3e52-8c52-574733e856cb.roa (raw, json)
Hash identifier: xJhEEf2uo8A61x1cOJ7T8DE4WWrb/+cOdVSJOT6Qh6I=
Subject key identifier: D6:1A:81:7B:41:42:F2:4C:69:E0:34:D6:D0:71:E5:26:5B:AD:61:2B
Certificate issuer: /CN=4e0f128f-0758-4b15-87a4-5bba9de24312
Certificate serial: 010D0C9F4328584863CB0E5FFF32C6C5BA80E550
Authority key identifier: EB:33:8C:B8:C4:DB:54:C8:E2:EB:D6:66:5C:C6:BA:14:1E:9E:CD:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/68a9d485-4b07-3e52-8c52-574733e856cb.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 40676
IP address blocks: 23.152.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0e:5f:ff:32:c6:c5:ba:80:e5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f128f-0758-4b15-87a4-5bba9de24312
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=74e4209a-65f5-405e-aefe-31faa3484e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:b9:9d:e4:f6:3f:67:53:02:63:8f:9a:44:
2e:e9:55:21:89:0e:0b:8a:a9:e9:6d:a5:f9:07:d7:
28:72:f2:6b:3f:de:c5:59:19:7f:4b:c2:56:ef:e8:
b7:a9:18:c6:ac:f3:09:82:23:81:cc:f3:f7:2f:26:
e6:2e:8e:a0:4c:ea:92:64:ea:08:0d:dd:56:2f:49:
3d:39:18:da:63:34:eb:92:e8:62:a1:54:12:b0:f9:
ed:2e:47:d6:19:49:70:97:24:ac:8e:ce:ef:19:6e:
f7:39:0b:01:37:1e:ed:b8:99:c4:3f:93:b5:1f:db:
95:d9:f3:18:dd:39:b9:3b:08:08:b8:5e:7b:67:83:
88:19:8d:ab:57:59:ad:fb:10:c4:33:0e:db:fd:95:
05:40:75:40:ce:b4:cf:05:69:8f:db:55:72:82:b4:
c4:76:13:af:8d:d5:ce:c5:b3:94:f0:81:74:5b:3d:
04:0a:38:eb:5c:06:0b:6b:93:f6:80:cd:69:7e:0b:
33:e9:39:37:72:27:bc:aa:53:4d:4d:81:b9:0e:cc:
95:53:f0:d5:37:e8:7c:e8:80:92:fb:31:9a:ba:dc:
ff:69:d4:af:8a:49:53:32:32:5d:40:5b:bb:a2:2b:
d6:2f:2d:f2:b8:98:e4:ec:d0:f7:4a:4c:1d:77:a1:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1A:81:7B:41:42:F2:4C:69:E0:34:D6:D0:71:E5:26:5B:AD:61:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/68a9d485-4b07-3e52-8c52-574733e856cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312/4e0f128f-0758-4b15-87a4-5bba9de24312.crl
X509v3 Authority Key Identifier:
keyid:EB:33:8C:B8:C4:DB:54:C8:E2:EB:D6:66:5C:C6:BA:14:1E:9E:CD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4e0f128f-0758-4b15-87a4-5bba9de24312.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:45:ad:bf:5d:be:47:fb:26:0a:9a:38:06:70:3a:a7:d4:6a:
fe:72:9f:3d:2f:17:79:03:58:a9:d3:d4:99:60:3e:61:27:92:
c3:0f:4c:2e:62:67:e9:6b:08:5d:46:f8:06:1f:ab:1d:b8:d7:
64:5b:5d:f5:df:bb:43:64:76:3f:ff:5d:63:e3:ef:a5:ea:3f:
62:d8:27:99:8f:bd:0e:fc:d1:24:5f:eb:f5:af:1d:25:7f:3f:
ea:9a:25:bd:ff:ab:15:a7:68:8a:c5:08:27:9e:06:a2:d5:b7:
1a:50:9f:3c:52:a9:5e:68:91:e4:70:b0:7c:5e:3c:94:9e:47:
55:3b:44:e2:0d:44:24:77:bc:1e:f9:28:8a:73:cc:3a:aa:98:
78:46:c8:d7:1f:ec:7b:6a:da:aa:40:2d:b1:11:79:6b:3d:7d:
da:9e:38:e8:e3:0a:71:a1:be:b4:32:97:9e:1d:3e:f6:55:58:
92:a3:f6:6a:32:65:0d:0d:25:01:62:f6:1f:42:18:91:4a:16:
05:8f:61:d7:2c:af:89:11:ae:5b:b8:67:2b:6e:81:37:a2:4a:
7d:fa:38:91:ef:34:25:a2:1a:8d:37:db:72:9e:69:04:2a:96:
7e:66:6c:e4:1b:fc:14:5c:55:da:da:cf:32:98:50:57:c0:2e:
b7:33:4c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:10:44 2025 by rpki-client