Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa
File: 52166749-1228-3cb2-be42-612a2e17d6bc.roa (raw, json)
Hash identifier: sIQS6oVDFOWdG1jYJA2x9lc50ZHj2wAnXng4ClaRBZA=
Subject key identifier: DF:8B:C3:5D:C1:97:9B:67:6E:21:43:CE:E4:66:A6:41:09:FF:E7:49
Certificate issuer: /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial: 010D0C9F43285848610056B8F37E188A95ECE300
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 401009
IP address blocks: 23.177.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:56:b8:f3:7e:18:8a:95:ec:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=420229f9-58d1-4750-97e7-6566e8d5dd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:c4:de:7b:bc:c1:9a:e1:89:5e:45:04:e8:
e7:dd:2b:45:4a:cf:97:5d:d8:e4:fb:48:73:7a:f9:
c5:72:99:ba:41:de:80:99:70:05:a6:50:a6:97:66:
5f:1c:0f:7c:7e:39:fe:3b:9c:09:54:93:4d:ee:56:
d6:62:42:79:c0:50:e6:f3:3d:e7:f8:b0:b8:de:a0:
40:9e:a2:f3:31:fd:e6:36:a4:18:6e:1a:e3:80:f8:
ce:41:74:bb:34:d2:17:b1:91:c7:1a:f3:33:20:57:
82:7d:ec:e0:eb:a1:82:db:01:cf:00:b7:51:77:60:
dd:97:66:38:8a:37:97:76:07:a3:d9:de:61:73:12:
c9:81:31:cc:56:07:62:63:83:3e:2e:de:2d:4f:9a:
2a:db:bf:be:cc:f7:14:6e:a7:15:47:59:54:b1:04:
b3:ea:a3:b0:46:6c:95:7d:27:c7:42:c2:05:83:09:
a5:80:62:7d:db:e1:c5:1d:23:4b:a7:9e:e1:0b:1b:
96:b8:9c:8e:98:29:6d:ab:87:10:15:b5:a9:83:22:
c3:d5:1a:bd:d9:2d:f7:e1:03:4b:b1:24:59:04:20:
33:dc:e9:f9:15:54:12:f8:6f:bc:c3:42:ac:0c:ef:
fb:73:79:19:66:17:2b:a3:81:4c:c7:89:2a:41:05:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8B:C3:5D:C1:97:9B:67:6E:21:43:CE:E4:66:A6:41:09:FF:E7:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/52166749-1228-3cb2-be42-612a2e17d6bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl
X509v3 Authority Key Identifier:
keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.177.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:87:a3:ce:0f:3d:8a:46:a7:4b:ed:72:01:9d:d0:d7:f0:d7:
3f:df:3a:53:78:df:88:ac:d6:32:17:14:93:4d:20:ac:00:6c:
48:7b:1a:81:e4:f2:ea:3c:be:88:df:16:58:1f:05:59:8b:e7:
06:19:fd:aa:d3:88:32:61:77:a3:70:80:15:f7:17:c6:72:7d:
e0:fd:e5:be:fa:f3:40:9c:b3:1f:5e:65:5b:5b:b0:f2:5c:9d:
2c:ef:71:8e:6b:f7:45:93:59:d1:d9:f7:81:60:c4:37:3b:1a:
07:35:d2:52:c2:52:7d:42:47:c4:64:5d:58:c2:d0:48:0d:06:
95:cd:81:b2:92:0d:3e:e6:ed:01:dc:c5:da:d8:5b:52:34:28:
98:39:ed:91:80:c4:a2:e0:3a:42:5e:d7:bf:f3:66:c3:e0:19:
3d:65:13:01:fa:c3:c7:8b:3a:9c:9b:e1:61:14:a6:19:9a:33:
4e:2c:9c:d6:8b:8b:c7:af:02:4f:8f:e0:82:12:72:ef:6a:1b:
ca:11:fb:37:1c:cf:d9:6c:68:c7:ca:60:ed:5c:46:f9:ed:fc:
be:79:99:9d:c2:58:cb:44:67:4d:81:64:85:e5:bd:38:75:d7:
1f:7f:16:68:fb:cd:7a:1f:f1:27:36:b9:8d:80:00:05:ba:e3:
87:5e:4e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:31:01 2025 by rpki-client