Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/9facefec-05a7-3b4a-bc11-635411da018c.roa
File: 9facefec-05a7-3b4a-bc11-635411da018c.roa (raw, json)
Hash identifier: OEaopfYrEQcSSThBkUZFz8DT5D8kysv+bd00Z50FItg=
Subject key identifier: 4C:88:B2:37:79:4B:1E:0F:FA:91:C4:49:77:47:7E:2C:58:7A:26:7F
Certificate issuer: /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial: 010D0C9F43285847F234F075EE00D218536A0280
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/9facefec-05a7-3b4a-bc11-635411da018c.roa
Signing time: Wed 20 Nov 2024 21:32:14 +0000
ROA not before: Wed 20 Nov 2024 21:32:14 +0000
ROA not after: Tue 18 Feb 2025 21:32:14 +0000
asID: 401104
IP address blocks: 23.190.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:34:f0:75:ee:00:d2:18:53:6a:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
Validity
Not Before: Nov 20 21:32:14 2024 GMT
Not After : Feb 18 21:32:14 2025 GMT
Subject: CN=550ac954-1a64-4869-83bd-e7ed2fbeeaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:22:fe:0c:aa:39:0a:5d:9d:9f:3a:26:58:
c9:6e:27:fe:cc:a9:f9:80:96:20:78:34:09:05:90:
90:af:e7:80:cf:fa:95:07:5f:7e:8c:77:3b:3b:0d:
1c:00:64:04:eb:88:45:10:6a:37:5a:e5:96:0d:6d:
45:26:81:28:bf:ad:10:b6:b7:ad:85:92:c3:33:2f:
c0:f1:4f:9c:e5:0f:d2:55:5b:11:2d:4b:d8:a7:33:
60:2d:17:7a:5f:66:1a:07:c4:37:46:74:1a:f9:2d:
6b:d6:35:50:76:24:ef:1c:29:c9:82:90:4b:ca:94:
53:49:68:8e:17:db:a7:e1:56:cc:b2:77:ef:23:92:
4f:b4:b6:50:03:a2:1c:e2:f9:a7:18:8b:1a:4b:1c:
01:b5:20:c8:80:c9:27:b7:aa:5c:6b:cd:c5:c7:f4:
73:d5:39:7c:7f:dc:f8:d7:00:97:f3:0e:21:34:fa:
77:90:39:03:a2:3e:1b:5d:9d:7f:bd:02:89:ed:41:
53:3d:51:36:ca:e7:1a:67:ad:08:01:a2:32:36:48:
3d:3d:15:16:16:f9:65:c7:90:50:93:bd:82:ed:0b:
f7:18:16:05:89:cb:44:77:1d:47:ef:9a:67:39:37:
a5:70:75:a0:5c:21:0d:dd:80:e2:49:47:a4:59:67:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:88:B2:37:79:4B:1E:0F:FA:91:C4:49:77:47:7E:2C:58:7A:26:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/9facefec-05a7-3b4a-bc11-635411da018c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl
X509v3 Authority Key Identifier:
keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
sbgp-ipAddrBlock: critical
IPv4:
23.190.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:f7:23:88:6a:ba:1e:b9:b9:fc:a1:09:69:91:77:ee:1e:f4:
f3:34:0c:20:9d:b4:0d:d1:cb:97:0c:78:f5:6e:ec:ec:51:99:
df:fb:51:32:49:7f:6d:4f:4e:65:f2:9e:c2:31:08:d6:cc:1f:
96:78:3d:cd:44:2b:9d:c1:66:4e:4e:44:98:94:0e:12:a9:77:
84:f0:69:f2:08:f0:20:45:bf:46:31:61:fe:fc:87:20:ca:17:
c7:3c:19:bd:c8:5a:7d:2c:1f:ab:2d:97:9c:63:75:cd:1d:18:
4e:6c:1a:c0:e3:f8:c4:5e:47:e3:3a:85:f9:2c:61:51:70:61:
c8:6b:b1:cd:6b:5c:e7:e9:34:3e:26:d1:49:4a:13:31:2a:fa:
c5:0d:b8:66:d2:67:19:33:61:35:97:54:68:e2:5a:01:7d:b7:
0d:bc:3a:59:0f:13:69:f9:18:d3:eb:05:e0:d7:0d:5c:ca:24:
29:b0:8d:9e:01:f5:46:3b:f9:58:3f:fd:f5:3d:25:b7:09:82:
d6:7d:c9:da:b0:4d:fe:e7:ef:1d:07:ba:75:52:cb:ef:9e:64:
c2:c7:16:87:8b:f8:da:a1:8f:77:2d:eb:65:86:b1:ff:8c:db:
cb:8f:9a:77:56:bb:18:ee:82:d6:95:78:b6:f4:96:f3:a9:d5:
79:c9:9b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:23:17 2025 by rpki-client