Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa
File: 246a9945-e728-367d-9f55-59504f6985c6.roa (raw, json)
Hash identifier: cw4LuFCpRh+Imn6K+aCApBR4x4uk/L/FMAG7K2PC/5w=
Subject key identifier: 0D:B4:71:05:42:E5:85:31:AB:FC:DB:B6:2B:C1:AB:47:DC:C8:8D:07
Certificate issuer: /CN=ad697a12-b25f-4a7b-8c14-097935c18e5b
Certificate serial: 010D0C9F4328584812D526F8EEE04176CB5F5C80
Authority key identifier: C4:09:D9:07:5A:4B:0E:66:CF:34:3D:CC:88:C3:80:97:80:4C:D5:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 7029
IP address blocks: 23.189.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:26:f8:ee:e0:41:76:cb:5f:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad697a12-b25f-4a7b-8c14-097935c18e5b
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=6177098e-38b5-4820-9273-57e25f7d5a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:d6:a4:e0:7d:af:1f:21:a7:10:f0:82:7c:
52:a1:d9:94:82:f8:dd:96:f3:c1:a2:b3:5b:0d:aa:
dc:14:6c:ef:1e:58:48:6c:04:6d:be:b9:7a:01:d0:
79:9d:9d:83:69:71:78:be:cf:59:2f:51:05:35:37:
b1:ca:84:e6:52:33:f6:f7:9a:44:97:10:41:71:76:
91:fa:8a:10:3b:7d:3c:3a:43:82:17:58:1e:3d:d9:
63:16:72:c9:f3:58:66:26:1c:a7:8c:30:e1:7e:1d:
1d:48:be:aa:ef:0c:72:60:7e:20:d2:e0:fb:14:b3:
20:c2:b0:19:8e:66:96:a4:a2:4b:2d:f7:73:4e:c9:
b4:c4:68:9e:49:cd:76:c1:df:96:c9:1b:ca:bf:e1:
8f:9a:9d:8b:cf:72:7f:88:79:76:7c:6f:80:ba:ec:
f0:a8:98:67:6d:36:76:5b:d2:dc:8c:2a:a8:01:10:
aa:d9:6e:31:d4:2a:7e:f1:60:f6:f6:2f:4b:b1:21:
09:2c:a6:13:00:7d:78:b0:21:8b:dc:87:d8:7b:63:
51:8d:4d:3d:d4:7e:1e:cb:b7:b7:e6:3d:f1:3a:68:
dd:34:47:94:5a:e7:66:fc:92:a6:9b:87:7d:71:c3:
74:7a:aa:4f:5e:60:95:27:fd:72:dc:9f:42:be:8c:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:71:05:42:E5:85:31:AB:FC:DB:B6:2B:C1:AB:47:DC:C8:8D:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.crl
X509v3 Authority Key Identifier:
keyid:C4:09:D9:07:5A:4B:0E:66:CF:34:3D:CC:88:C3:80:97:80:4C:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:e4:3e:f1:0d:78:da:d0:c6:14:56:3a:de:0f:f3:0c:2f:83:
d8:fd:29:b4:3c:86:76:9b:cc:a0:f5:f5:b3:8d:fa:a8:15:7a:
33:ba:27:e4:3d:55:f2:5a:16:13:9a:f9:89:b5:27:9e:fd:90:
ec:4f:1e:a3:91:ea:43:af:65:eb:a8:eb:5a:c1:13:57:9d:77:
fb:e7:7e:86:7a:b2:7f:f2:97:e7:61:72:e2:cb:74:ba:1d:92:
7e:7b:70:ac:51:13:7c:68:51:a8:9b:8b:68:74:dc:88:5b:d4:
12:05:c7:37:c8:4c:81:e4:59:76:c5:31:b4:a3:03:77:9e:84:
c4:81:23:70:ba:97:eb:b3:14:7e:03:e0:ec:0c:f8:68:1d:93:
d2:e9:f5:72:78:69:95:04:66:a5:a4:1b:b4:d1:a0:ff:49:d2:
58:76:75:1e:67:dd:f3:23:2a:4c:3c:93:1b:46:e9:20:b0:79:
26:92:46:0b:43:f8:04:c4:8e:f4:43:82:86:98:15:3b:f6:68:
df:23:b3:1c:08:59:a5:52:fd:7c:d3:b3:42:ff:2e:3e:38:de:
0c:f1:5e:5b:e3:db:ab:f6:86:2b:f6:b7:9b:1e:df:15:35:17:
34:24:35:8c:7d:df:e8:08:e8:5e:78:25:70:3b:60:d4:dd:b7:
da:ad:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:33 2025 by rpki-client