Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/4388c8a6-3c59-38f8-8574-05ccb5c7bf8e.roa
File: 4388c8a6-3c59-38f8-8574-05ccb5c7bf8e.roa (raw, json)
Hash identifier: UZ27BqpuQLYGr04dntORZY7rd6+nfdyVcBT4kc1diV0=
Subject key identifier: A8:A6:82:6D:FC:14:6F:00:29:B1:E7:08:17:E0:12:1C:16:22:78:23
Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Certificate serial: 010D0C9F432858485B6C20F24CA4A4FED1F9F7F0
Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/4388c8a6-3c59-38f8-8574-05ccb5c7bf8e.roa
Signing time: Sat 28 Dec 2024 14:03:19 +0000
ROA not before: Sat 28 Dec 2024 14:03:19 +0000
ROA not after: Fri 28 Mar 2025 13:03:19 +0000
asID: 16509
IP address blocks: 23.128.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6c:20:f2:4c:a4:a4:fe:d1:f9:f7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410
Validity
Not Before: Dec 28 14:03:19 2024 GMT
Not After : Mar 28 13:03:19 2025 GMT
Subject: CN=4bb39182-572c-40ef-895e-e4bad0da2f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:ac:03:8b:13:e7:7b:a5:ce:a0:70:0f:60:
3e:f5:d4:32:a9:39:ca:57:0f:c7:83:79:99:f3:78:
7b:03:6b:3c:98:93:90:34:44:a5:d1:86:a1:8f:2c:
45:91:25:ec:7f:77:4a:40:8b:e5:04:45:c8:7a:2e:
e1:21:a6:9e:2a:a5:81:35:36:91:22:eb:3c:a7:bd:
c8:33:d5:a7:bb:86:f5:3d:9f:dc:19:32:35:f8:44:
ed:aa:ed:19:c3:9f:59:d4:b3:28:3e:be:50:db:4f:
15:2e:38:11:11:cb:ec:76:0c:7c:6f:7b:72:f6:9b:
80:10:68:a2:b0:91:82:e9:2c:de:13:4b:cd:58:fb:
ff:90:dc:33:bf:b0:07:56:45:07:3e:ce:0d:5a:5e:
15:f6:14:2b:5f:2e:fb:71:f3:55:18:47:d8:d1:63:
e7:01:89:d5:2c:14:dc:5b:3a:a6:c5:94:f1:a2:50:
d8:59:95:86:0e:12:ed:7b:12:12:81:37:f0:c3:e9:
41:63:4b:17:db:6f:d6:bd:d7:a5:bc:b3:8d:b8:14:
fd:11:6e:fa:ed:e8:35:de:2c:80:e8:8a:b3:9d:c6:
db:dd:0d:89:68:90:26:5b:fe:11:69:72:d8:77:75:
ed:7b:4e:9e:74:f1:21:66:f2:76:ff:e9:7d:13:15:
28:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:82:6D:FC:14:6F:00:29:B1:E7:08:17:E0:12:1C:16:22:78:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/4388c8a6-3c59-38f8-8574-05ccb5c7bf8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl
X509v3 Authority Key Identifier:
keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:e6:4d:c8:30:2d:3b:2b:86:44:74:23:e0:0c:ce:a2:1e:d5:
e0:60:dc:b4:d5:06:59:ce:d7:14:2c:4e:97:a1:c9:98:8b:89:
f5:34:7c:6d:d5:4f:69:ee:6d:89:3e:a7:f8:05:1d:ad:30:b1:
a2:b9:3a:16:21:c6:a5:7b:ca:11:73:4c:d1:99:5f:6d:04:39:
97:69:fc:74:e5:8d:b2:5e:1b:93:15:52:be:b4:19:78:5c:2b:
24:47:10:ef:2d:9c:2f:3b:ed:c2:e5:6f:1a:1f:2e:20:7c:91:
b3:22:40:9b:27:54:cc:10:d7:eb:c5:3d:5f:a2:26:44:25:10:
f1:44:9d:a9:7c:5b:ff:4e:8a:be:ed:41:4a:20:c2:fb:6a:ea:
e4:87:3c:3f:70:3f:28:b8:41:28:e5:5e:a6:32:0b:67:f3:4b:
e2:78:a9:b6:cf:d3:01:10:db:df:04:a9:c3:4a:78:91:c9:86:
98:a8:d1:a0:7a:d4:a9:40:c4:ee:cf:1f:e3:66:d9:66:47:c3:
1f:04:10:09:26:68:cc:79:78:23:da:3b:97:c4:69:0b:6a:87:
91:30:14:d9:a4:22:e0:08:9f:52:a8:66:28:9d:a7:38:05:ac:
aa:6c:c1:08:0a:9c:9c:f9:87:ef:a8:d6:6c:67:ca:74:6d:1c:
98:30:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:26:29 2025 by rpki-client