Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa
File: 4bff34b6-57f0-332c-8398-4fb31b240aa0.roa (raw, json)
Hash identifier: JLDcUkZVysnR/LsKG8nCqK8y63CMmsgloVSG7bLXbzI=
Subject key identifier: 49:90:B7:A0:C1:7B:18:21:8C:81:F6:B6:5B:B6:0B:87:97:A7:41:8B
Certificate issuer: /CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
Certificate serial: 010D0C9F43285847FDE4D994F06C5CEAAF0B3800
Authority key identifier: 80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa
Signing time: Mon 25 Nov 2024 02:00:28 +0000
ROA not before: Mon 25 Nov 2024 02:00:28 +0000
ROA not after: Sun 23 Feb 2025 02:00:28 +0000
asID: 401339
IP address blocks: 23.188.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fd:e4:d9:94:f0:6c:5c:ea:af:0b:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d
Validity
Not Before: Nov 25 02:00:28 2024 GMT
Not After : Feb 23 02:00:28 2025 GMT
Subject: CN=289a85e0-64b3-40e2-9dd8-7907f0e3d94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:03:2c:5f:63:ef:23:f8:6c:ca:b8:ca:c9:23:
82:17:69:c0:55:94:c0:dc:9a:b2:a3:03:03:6a:cd:
64:c3:b8:21:d3:6a:04:ed:fc:57:fb:6a:39:84:9a:
42:ce:5b:2c:20:0a:9c:2c:9f:4e:95:88:e3:4e:5f:
4d:7d:83:f0:39:6d:f7:83:42:b9:41:70:26:29:b6:
33:66:2b:a0:3f:c7:54:b9:11:74:ce:1e:87:31:5b:
4f:98:5d:11:3f:69:8e:03:1e:26:4c:7b:20:d5:be:
e8:43:c4:c1:2e:9e:70:76:47:e5:bc:10:4f:f6:72:
0f:53:02:02:ae:af:3a:58:69:a9:dc:63:fa:e3:71:
b0:ca:b9:33:0c:33:60:2c:08:03:bf:95:41:b5:05:
de:de:87:c5:66:13:a6:7a:ea:cd:ee:46:14:c8:4e:
87:44:49:8a:2b:37:ca:af:21:ca:7b:49:97:4d:ba:
60:13:c1:b3:0f:50:4a:17:3e:b7:2c:6a:94:1a:a5:
f4:ee:a6:9e:3e:13:d1:03:bd:2d:bc:98:e2:ff:01:
66:83:62:21:74:97:3b:c9:26:65:03:4c:a4:d6:ec:
10:0e:28:0b:6d:0c:21:14:7d:b0:6d:a6:8e:07:bc:
e8:1a:6a:57:74:6f:7a:94:a3:72:c6:d8:94:51:1a:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:90:B7:A0:C1:7B:18:21:8C:81:F6:B6:5B:B6:0B:87:97:A7:41:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl
X509v3 Authority Key Identifier:
keyid:80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.188.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:6d:2d:eb:a6:8b:0f:e0:60:7e:53:44:84:23:75:8f:67:8e:
6f:14:3e:81:e2:f2:ba:7a:63:bc:ca:26:0d:47:1d:45:7f:b8:
05:a3:02:8b:db:92:8c:41:67:37:3a:3d:0f:ae:07:e7:09:05:
c8:17:46:0a:78:de:ca:bf:40:fc:7c:5b:1a:df:ff:c2:88:7e:
f5:98:b8:cf:68:fd:4e:36:70:4f:7e:d2:9a:13:00:ce:be:1d:
b8:9f:f5:38:ff:42:db:eb:55:3d:21:bb:22:9a:ea:f7:0c:ab:
d8:d3:56:3d:cb:19:ff:a1:b3:89:99:17:ec:23:58:9d:7b:64:
7f:00:ba:c9:c8:18:60:a1:61:4c:37:fc:0a:03:98:eb:ce:76:
cd:2e:9d:af:8d:5f:6d:77:19:99:86:ff:e2:bf:d0:ce:d6:1d:
6c:ba:9c:57:cf:07:0b:f2:74:f0:ff:dc:19:e7:a3:06:09:04:
5e:c4:1a:db:e1:c8:b5:3b:36:f3:2e:0c:c5:6e:4c:d9:f0:d2:
a6:d2:9d:1a:a4:5d:d8:62:42:03:5a:44:e4:69:b1:82:4b:4e:
a0:ad:d1:0e:de:03:b6:fc:8e:1f:6c:03:dc:94:9e:6d:19:14:
3c:35:6f:e2:07:6d:5f:1a:0f:5c:54:d9:af:69:dd:c9:98:3e:
38:07:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:28:10 2025 by rpki-client