Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa
File: 032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa (raw, json)
Hash identifier: ya2pSQSjvx+VNx4aRnc0Pi/FY2ABJSwHrNc+2Bm2XHg=
Subject key identifier: C1:73:5E:10:9C:00:F2:20:55:34:CD:3E:D7:D4:6D:BB:EC:4C:59:23
Certificate issuer: /CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6
Certificate serial: 010D0C9F432858486AC59AC741F11E3FB0385928
Authority key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 22597
IP address blocks: 23.159.120.0/24 maxlen: 24
2607:5fc0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9a:c7:41:f1:1e:3f:b0:38:59:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=9361edd8-cb21-4472-a7f7-8341052778d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:d5:22:bf:65:9e:ea:42:f4:f8:2e:08:eb:
6e:47:43:2b:02:23:fa:01:f3:ba:67:8a:ea:81:5c:
c0:c9:92:ad:15:8f:83:4b:a4:92:ff:8c:f1:14:05:
43:8f:31:58:2b:06:7e:4d:43:c5:e8:e0:96:51:60:
0f:9c:70:f1:f3:5e:81:ae:b2:0a:06:c4:31:7d:38:
9a:60:d5:5c:43:21:e0:c4:4a:ae:11:82:39:e4:77:
4f:1a:be:30:df:92:86:ec:0d:15:1c:44:32:2c:52:
92:e3:0e:62:bc:f2:92:7e:d9:ff:13:d4:b9:0e:2a:
48:8f:f7:62:36:8c:d7:55:0d:1d:eb:24:06:07:19:
88:d8:2b:c2:79:a6:df:71:fc:69:ea:d4:3b:f9:ae:
36:0f:22:4e:fc:00:3a:7a:0c:72:c6:16:10:6d:8d:
75:c5:01:6b:07:01:ac:61:6e:78:23:a3:80:5b:f3:
d0:a3:37:6e:78:ab:bf:37:8a:7c:34:5d:d9:4b:1a:
48:e0:2a:68:e6:23:65:6d:90:de:8c:81:ec:06:92:
a1:33:49:9d:8f:ce:d8:71:ee:dc:91:ed:2d:df:3b:
d3:4e:b1:d4:f4:cb:83:51:a2:59:27:95:c1:e4:8e:
27:df:80:04:76:c6:01:5c:01:7e:5d:13:78:77:0d:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:5E:10:9C:00:F2:20:55:34:CD:3E:D7:D4:6D:BB:EC:4C:59:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl
X509v3 Authority Key Identifier:
keyid:18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.120.0/24
IPv6:
2607:5fc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:b5:30:67:df:31:48:4c:0e:94:fe:8f:6b:dc:83:ae:71:98:
7a:90:45:66:39:98:10:a8:b4:44:7f:f7:b9:09:2e:9a:82:12:
a2:0b:ef:de:5f:a4:19:f4:e0:06:5d:16:80:2c:f9:3c:b7:85:
9f:0e:d6:d3:31:27:7a:1f:5b:9b:97:e7:1e:84:77:7a:0b:8e:
e3:2f:75:49:bb:69:f0:f4:37:20:b3:52:cc:a1:16:da:d3:a8:
21:fa:b6:65:7d:37:9c:19:0b:bd:84:87:6f:37:5c:df:de:6c:
09:6c:ef:81:cf:87:25:87:cc:2c:ad:be:a5:52:02:ec:c7:f1:
eb:8c:7a:66:ad:82:49:90:fc:4f:13:2b:e8:4b:aa:26:9d:b2:
32:7c:a4:5a:c7:0a:83:b1:db:c1:59:67:47:f8:89:24:92:80:
ba:57:4c:84:56:e2:29:6e:fa:af:dd:55:1a:5f:a2:56:ff:c0:
4e:f4:c3:61:18:9c:a9:38:29:64:f4:2b:a9:0c:b9:c9:5b:92:
ce:9d:a3:f7:4e:77:16:e3:cc:0a:a6:51:f5:44:bb:74:b0:83:
dc:98:94:3a:19:57:db:f9:08:f0:c8:9d:ae:1f:20:bd:8f:8e:
eb:ce:d2:47:76:d5:49:70:12:48:4e:4b:a4:d3:26:b4:e2:a2:
10:56:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:37:47 2025 by rpki-client