Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa
File: cf849384-a1f0-358f-8cff-6f887dcd91a0.roa (raw, json)
Hash identifier: 6mpnKYHu4kwMexut8qE+goS9UDTVhpYQhQtVhQJUXUk=
Subject key identifier: CE:3C:F9:CF:7E:93:1E:0C:8C:DA:BA:52:88:B6:7E:99:E3:7C:D5:BD
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F432858488DAB4F14B05BFDE626D5DB00
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 152156
IP address blocks: 23.249.28.0/23 maxlen: 24
23.249.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:4f:14:b0:5b:fd:e6:26:d5:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=15b07bc2-a9cb-41ab-a03f-c66895c49e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:c8:62:2a:9c:4b:95:c6:8d:e0:0a:e9:84:
ff:67:00:b7:39:3b:8a:fd:fe:22:63:99:5d:dd:d3:
4d:65:12:5a:58:71:b0:3d:05:b5:72:12:4f:37:63:
60:61:02:aa:5a:56:d5:dc:99:fa:6f:ff:84:6a:df:
09:15:9b:9b:4b:5f:2f:98:24:58:b9:f3:f8:fc:20:
54:d0:cf:10:be:d6:04:21:06:00:5c:c8:5d:7e:0a:
fc:af:fa:ce:e9:4f:29:c8:e2:db:2b:92:a0:30:4e:
c8:c2:0a:0f:7c:e4:14:bc:02:02:76:c3:e4:c0:8c:
c7:e6:81:ee:81:4c:bd:84:1d:f8:31:78:30:a0:24:
23:3f:bc:79:17:a8:27:91:39:56:f0:67:a8:42:57:
ac:a7:25:11:c1:70:61:a3:2b:28:06:4b:47:f4:b6:
56:12:2b:29:56:98:6f:88:9f:6b:d1:9a:72:7a:b1:
45:46:c6:44:b0:a3:e4:42:3b:ba:c6:08:5b:ab:0f:
b6:70:02:c6:99:f9:7c:af:89:68:c1:20:cd:36:56:
48:ea:b3:3d:0f:32:0e:60:45:a8:7e:b0:98:06:c6:
e2:2d:e6:05:2c:67:1a:e1:c8:37:12:ab:0b:31:3e:
cf:c3:45:44:b2:28:76:a6:23:ba:91:d1:cd:bb:8e:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:F9:CF:7E:93:1E:0C:8C:DA:BA:52:88:B6:7E:99:E3:7C:D5:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:3f:67:ef:aa:6c:c5:33:4b:37:48:a0:86:c0:44:7e:4f:0c:
0c:ee:01:ef:08:3f:b3:fb:76:d2:b9:f4:23:59:46:47:54:86:
66:26:a7:32:0e:9f:4b:19:d3:43:ea:50:da:32:78:1d:ac:87:
ee:dd:f3:77:7f:ed:b0:e1:84:db:63:74:71:b3:6f:9b:a3:5b:
10:55:08:53:8e:25:6f:ad:92:f1:f1:6b:fc:5b:60:f7:f3:47:
59:c3:66:ab:31:02:82:2a:fc:11:c7:33:38:aa:62:c7:3d:3f:
88:1a:07:be:f1:13:ec:7f:40:dc:4f:5a:26:1f:cc:d1:f9:01:
f6:9b:06:c9:98:75:71:6f:8b:77:41:98:f1:42:fb:ab:ce:22:
f2:1c:1d:d1:b5:42:92:f5:ce:2e:78:e8:88:b9:c6:a0:30:96:
b3:b6:04:47:17:5a:40:0c:88:8e:e7:c2:bb:ca:21:54:2b:0b:
58:1c:2c:68:7c:63:87:a6:0c:3d:5e:e7:e7:1c:da:a9:77:dd:
a5:a1:d3:cf:b4:40:2f:3a:93:43:29:56:b9:34:6a:f9:68:99:
a4:0f:73:4b:b8:bc:5a:99:af:25:32:6e:54:b9:53:71:aa:fa:
82:98:56:4e:f9:12:e7:a9:0b:a1:49:9a:b2:85:a3:87:4d:86:
b4:5d:9d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:08:22 2025 by rpki-client