Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a9effcd9-4a49-3ab2-ad0d-5a1a63022214.roa
File: a9effcd9-4a49-3ab2-ad0d-5a1a63022214.roa (raw, json)
Hash identifier: 9sieNMHyrV+GmStD3jbu2vA7Vjrwdan9mpRZg69ySN4=
Subject key identifier: 70:69:5F:16:D1:D4:A1:16:46:53:01:F7:79:C2:36:8D:D5:DB:7F:B6
Certificate issuer: /CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
Certificate serial: 010D0C9F432858486D9051E2FF83B6294B9E8D90
Authority key identifier: 0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a9effcd9-4a49-3ab2-ad0d-5a1a63022214.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 212524
IP address blocks: 23.155.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:51:e2:ff:83:b6:29:4b:9e:8d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=4310b6d2-34b0-40e8-a745-8988b5d5d482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f9:16:f6:54:c6:f4:c8:7d:e1:0a:b6:28:6a:
df:72:fc:52:70:b8:bb:96:5e:11:09:e7:e4:7e:6e:
85:d6:41:67:0d:be:39:8f:cf:9a:ea:a9:5a:d6:e3:
72:6a:81:b2:f6:c9:58:7e:1e:22:da:64:d6:e1:0e:
04:0f:28:b6:86:77:d8:91:4b:59:91:25:85:89:ca:
7b:36:fe:85:1f:2c:10:8c:73:c0:ba:1f:6f:d4:08:
76:a3:5b:70:81:ee:c0:18:cc:fe:2b:e2:d9:02:59:
fb:d5:62:56:84:ee:e8:57:89:04:a3:d2:57:23:89:
b9:66:9c:a6:8f:b1:33:f3:20:ff:6e:ca:69:db:59:
cb:52:72:28:1a:98:66:dc:9f:38:a9:b6:e3:33:0a:
5d:c8:73:65:a4:42:17:c2:21:67:f4:cf:e4:df:08:
df:cc:54:d3:2b:78:52:55:ed:9b:f4:4b:80:5b:ba:
ff:fe:60:14:74:f5:7c:ac:5a:fb:08:c9:99:36:77:
97:37:97:a8:da:e4:89:46:ba:32:68:8b:25:59:0e:
c9:54:e7:fd:ba:43:51:da:68:46:49:76:9b:f7:89:
a4:e2:b1:81:4c:38:37:f0:c8:9f:30:c1:bc:52:06:
b2:84:a5:98:38:38:22:02:42:e0:13:f9:7e:fb:77:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:5F:16:D1:D4:A1:16:46:53:01:F7:79:C2:36:8D:D5:DB:7F:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a9effcd9-4a49-3ab2-ad0d-5a1a63022214.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl
X509v3 Authority Key Identifier:
keyid:0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.155.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:fc:ca:6d:ce:c2:8a:0c:cb:41:b7:77:8a:88:b3:d8:6a:75:
27:45:4b:e2:64:96:41:2a:10:07:1a:9c:d3:e3:2c:2d:21:51:
21:1d:8f:f5:db:86:5b:b2:00:2a:97:e9:c5:cc:d1:2f:62:3d:
bc:f4:b2:e1:ad:d1:1b:bb:5a:51:17:91:5d:91:11:2a:7a:a2:
44:fb:05:d8:2e:30:78:d4:5b:eb:05:87:6d:22:99:80:45:3f:
54:69:17:ad:97:a2:e9:5f:a3:32:73:2e:84:66:4b:cd:3f:90:
b6:b2:1f:0c:29:9f:67:b1:c0:6f:f5:ab:6f:d7:62:e7:97:8a:
a7:26:36:bd:70:d8:c9:88:17:a4:cd:37:45:3a:cc:f6:5b:1a:
d1:73:0e:f6:9e:a7:6c:1d:a1:82:43:bf:29:b0:eb:89:7e:19:
70:fb:2d:70:79:ed:96:60:4a:07:21:72:08:63:4c:25:13:68:
31:47:f5:9f:42:60:9f:18:21:74:55:81:4c:98:be:33:41:69:
91:07:ae:55:9c:62:4b:6a:bf:a1:ad:e6:31:03:41:37:37:24:
fd:27:6f:89:aa:e3:98:de:d7:7b:87:6a:67:fc:90:89:ab:f2:
b2:3f:27:d8:85:5e:39:33:a9:db:9b:ee:79:33:ed:a5:df:c3:
4d:26:1e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:37 2025 by rpki-client