Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/23902af4-0c49-3014-9394-6b31fa2836cd.roa
File: 23902af4-0c49-3014-9394-6b31fa2836cd.roa (raw, json)
Hash identifier: yN5Uw1c/vkdLwK5BJ0FIPSxG8cpxTp0ND7bBVdKIHp8=
Subject key identifier: 6B:7C:04:8A:39:30:28:1F:89:5B:B9:2B:95:B1:45:EB:10:4D:F7:50
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F4328584863CAFB9D867B672929170DC0
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/23902af4-0c49-3014-9394-6b31fa2836cd.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 9084
IP address blocks: 154.1.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:ca:fb:9d:86:7b:67:29:29:17:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=aa88e5cb-8914-4409-b542-739a0d8ca5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:95:3f:91:d7:21:6f:d3:ba:03:90:7a:b3:
5e:42:32:cb:88:58:b2:7d:d3:db:24:9b:82:13:58:
41:b6:d1:f0:26:e4:00:2b:a8:51:54:c9:0d:fd:40:
ea:7e:69:9f:c8:47:20:1f:86:79:3f:9e:1c:2c:61:
78:43:67:9a:ac:e8:b9:6d:ec:ef:8e:30:11:75:8a:
27:30:cb:f7:91:3a:ac:85:66:8e:42:af:f5:bb:15:
d5:a2:44:da:93:d4:95:28:72:d6:b4:35:b4:aa:cd:
96:d2:72:3a:e7:c6:fc:ff:6a:69:ca:17:38:55:18:
76:a1:f2:61:71:22:49:38:e2:37:05:5e:aa:43:a5:
ff:b0:fc:f9:91:ca:cf:54:cb:cc:dd:09:e0:99:c7:
0b:04:99:c9:aa:a3:44:2a:1a:6e:4a:ed:4d:e7:d6:
b5:5b:65:fd:97:45:ca:0e:44:78:9f:b6:0c:26:de:
70:96:8f:32:83:b1:02:77:ef:68:45:ff:23:d5:83:
f8:0e:ae:73:40:91:e1:34:65:3b:fd:49:99:02:68:
54:5b:c0:55:b0:45:35:b6:f7:d4:35:9b:09:f4:89:
f0:57:94:ae:7f:50:20:eb:7a:a3:ec:ab:46:9d:df:
b4:67:2d:95:db:f9:25:98:11:4a:f1:31:8c:29:35:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:04:8A:39:30:28:1F:89:5B:B9:2B:95:B1:45:EB:10:4D:F7:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/23902af4-0c49-3014-9394-6b31fa2836cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
154.1.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:88:c5:b0:d0:f6:dd:25:69:fa:1a:a2:65:64:1a:1e:f5:d4:
69:a6:46:d1:9d:98:d9:fc:05:85:d2:55:c6:a2:d3:38:36:b6:
62:20:f5:9f:6d:95:ee:27:43:ba:1f:e3:17:29:22:f3:bd:97:
d8:06:f4:8d:9c:1e:7e:90:69:1a:41:52:46:2a:be:11:d7:0d:
10:fc:ba:16:65:18:73:05:0e:da:3f:9b:cc:63:5d:d7:b5:24:
34:54:05:08:86:5e:53:30:61:15:4a:91:73:11:61:90:c5:2a:
f9:ff:19:ec:a5:ad:e9:11:7a:83:07:58:28:3d:21:ee:b9:0f:
39:be:10:4d:6b:46:b3:c3:21:76:58:51:49:d2:d1:d5:37:1e:
a4:b8:96:94:a8:44:a2:96:12:6f:d2:d8:4f:3b:3f:65:7a:a4:
ef:d1:0c:13:7b:21:06:5d:1f:b8:2c:1b:ac:1f:6c:92:96:08:
5c:53:5f:29:d0:f3:8d:f0:a5:0a:c6:f5:1f:96:b5:07:b4:83:
1c:87:a0:06:f3:6e:e4:b6:e9:f9:a0:dc:b9:76:b6:9f:30:0b:
83:ba:09:dc:5f:d4:a1:10:a7:9a:e5:6a:72:84:8d:a3:92:45:
2f:4d:52:a0:95:4e:88:a8:51:9a:5e:04:19:24:40:6c:27:d2:
73:ac:a3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:38 2025 by rpki-client