Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa
File: 089fd902-9225-391d-ae0e-3c7cd908bf12.roa (raw, json)
Hash identifier: yBje8XcbQ/FbwRluwLzuLg/YQHTehRmEb1yGYVQfbbw=
Subject key identifier: 48:82:4D:16:D1:7F:1A:A8:76:6E:14:E2:AC:D1:26:6E:4B:40:B8:49
Certificate issuer: /CN=a07ba476-e067-424c-814a-2b920e23990d
Certificate serial: 010D0C9F43285847F65274BCEA576FADAB5F1500
Authority key identifier: 3C:59:1C:AA:2E:BC:6E:39:12:86:E6:18:66:AF:F3:9F:55:C7:82:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa
Signing time: Fri 22 Nov 2024 08:54:57 +0000
ROA not before: Fri 22 Nov 2024 08:54:57 +0000
ROA not after: Thu 20 Feb 2025 08:54:57 +0000
asID: 399951
IP address blocks: 23.152.120.0/24 maxlen: 24
23.187.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f6:52:74:bc:ea:57:6f:ad:ab:5f:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07ba476-e067-424c-814a-2b920e23990d
Validity
Not Before: Nov 22 08:54:57 2024 GMT
Not After : Feb 20 08:54:57 2025 GMT
Subject: CN=b4f1f97e-38b3-4708-8459-51a41aa36ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:1f:87:28:a8:86:a3:b3:5a:2b:65:c5:f5:
58:0d:30:ea:d0:a6:ac:d8:dd:2f:b3:b4:ca:14:c2:
2d:6a:ed:d6:28:4f:52:1a:a0:35:ec:aa:64:ac:84:
f9:78:42:5e:b6:d2:62:01:a9:1f:c6:2c:8d:a8:8a:
63:f6:de:80:11:df:05:75:8a:1e:b1:fd:2b:7a:dd:
ea:f2:52:3b:7d:92:8b:f0:aa:eb:80:70:e3:44:e6:
db:3c:09:ee:5e:97:ad:d6:df:12:ec:db:e8:42:c6:
2c:4e:68:91:8e:63:66:e8:b2:45:71:85:54:31:1c:
67:9d:2f:24:71:f3:70:e6:d4:dd:7f:46:79:cd:e0:
33:47:f1:b9:f7:01:58:7f:c1:52:c6:47:c6:55:b3:
ce:da:64:48:79:ed:ab:27:e0:ec:dc:de:ba:13:9f:
1e:fb:a5:a8:57:d6:65:50:78:b1:c2:0e:09:a5:b3:
77:f7:34:70:54:1b:d6:a9:7d:dd:94:c8:66:3f:e5:
e6:3f:a8:5f:a9:67:89:0c:f5:1b:65:8a:d9:09:00:
8e:4f:83:81:69:0d:51:b5:c7:e1:90:f5:45:63:a3:
28:1f:85:e0:69:97:24:0e:ad:60:bc:e3:fd:89:f1:
17:15:eb:e8:8d:18:94:62:6a:0a:e5:d1:b7:2f:0f:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:4D:16:D1:7F:1A:A8:76:6E:14:E2:AC:D1:26:6E:4B:40:B8:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.crl
X509v3 Authority Key Identifier:
keyid:3C:59:1C:AA:2E:BC:6E:39:12:86:E6:18:66:AF:F3:9F:55:C7:82:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.120.0/24
23.187.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:26:02:66:0b:88:a9:7e:fe:09:10:c9:89:b5:01:3d:5e:e6:
6f:0e:f4:c2:61:6d:d3:85:a0:ff:fb:90:bc:ac:f4:21:d6:f5:
f9:62:8b:97:e6:c6:36:02:f7:b5:fb:31:f6:20:61:41:a3:55:
e0:f7:a2:de:0e:bc:e9:ea:cf:75:6f:2c:96:30:ca:a3:95:1f:
98:89:5b:cc:25:8a:2a:7d:32:b4:3a:c6:2d:05:0d:e0:09:8c:
66:a9:18:ae:a0:99:94:48:d5:86:64:8f:97:bd:a0:b0:62:e2:
94:e9:98:ec:12:20:20:4c:88:5c:63:cf:f8:a1:56:a7:1e:56:
c8:47:bd:be:23:cd:24:20:bf:30:d2:24:55:cd:5c:43:db:44:
64:3e:6b:bc:78:01:af:51:5d:03:07:62:d2:6c:e7:19:31:7b:
1c:21:a4:2b:71:c5:e3:02:36:4c:e9:00:bb:3f:ba:8e:37:5f:
02:b3:40:00:72:83:59:5f:17:b8:b2:97:08:56:0a:e8:6c:e0:
fa:5d:af:5b:b5:49:b0:63:9d:89:e9:6e:47:6b:f6:5c:bd:21:
e7:bf:ce:bb:ad:e3:b9:ba:87:c9:c7:69:49:54:2d:f6:13:88:
ad:b0:32:ea:11:8e:fb:c8:87:e1:4b:e2:ef:07:de:30:78:c7:
1e:16:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:57:38 2025 by rpki-client