Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/9195e538-fa0d-39e7-ade2-e40801552963.roa
File: 9195e538-fa0d-39e7-ade2-e40801552963.roa (raw, json)
Hash identifier: B/gTlS2Fg8Od++8B4zBAV+riPJN0pVgmDQfdC8vAtvI=
Subject key identifier: 10:8F:29:63:E2:42:76:A4:7E:70:5D:E7:E9:0F:A5:29:C4:0C:29:EE
Certificate issuer: /CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Certificate serial: 010D0C9F4328584858A05B7EB042E19414B499E0
Authority key identifier: 60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/9195e538-fa0d-39e7-ade2-e40801552963.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 398020
IP address blocks: 23.133.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:5b:7e:b0:42:e1:94:14:b4:99:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=0ae56641-8c5e-43fc-994a-d404dbab202a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:eb:60:8f:ff:3f:48:1c:c4:a9:fb:0c:ce:
0a:76:f3:8a:88:1c:20:6c:26:49:7f:92:f9:4e:f9:
5b:2a:02:a2:91:8f:99:02:70:9a:4e:9a:41:83:c4:
9e:05:47:dc:0f:29:3e:3f:07:cf:b1:ac:87:4f:15:
51:9b:34:db:b4:28:cf:18:72:3a:6b:0a:a0:09:49:
ef:fc:1e:9c:2f:a4:ca:97:67:8e:37:95:4c:c1:14:
99:cb:80:d4:c7:ae:5b:45:3c:5e:78:92:c0:05:b8:
c0:02:d4:83:88:8d:94:b9:31:e4:68:20:12:62:57:
20:da:54:8d:65:bb:1a:a4:5d:69:3f:83:32:2a:2c:
e3:56:b9:40:d0:e7:cf:c6:ed:41:8f:fd:5a:50:ec:
1a:65:cf:db:8a:ff:45:cf:e6:90:c3:83:e3:18:1d:
5e:5f:9c:20:b8:fb:32:7c:16:83:94:6e:c9:30:41:
20:39:53:13:eb:1e:6a:34:b9:ef:4b:dc:0f:c5:39:
a9:21:48:1e:e6:43:c9:38:ed:4a:3a:6a:3d:fc:51:
54:77:46:13:b2:56:5d:5b:f8:f6:7b:34:b3:ef:81:
99:d5:4b:8f:41:e9:5d:c5:6d:3e:90:bc:89:11:d1:
53:ef:93:60:08:0a:36:ed:47:a2:8e:7b:f0:78:1e:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:29:63:E2:42:76:A4:7E:70:5D:E7:E9:0F:A5:29:C4:0C:29:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/9195e538-fa0d-39e7-ade2-e40801552963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.crl
X509v3 Authority Key Identifier:
keyid:60:91:E4:47:FE:45:BF:10:7C:41:41:7E:CF:EB:96:27:4E:4D:AC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab4a1c8a-d40b-4378-a9c6-f3b4d0919df0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:96:5f:cb:e9:f4:21:88:ec:d9:83:c8:ca:32:49:ae:09:83:
5a:c6:10:5a:80:b6:59:aa:88:71:d0:c8:ea:65:96:a5:e0:67:
3f:a9:87:f2:9e:5f:b3:4c:4e:94:02:9e:62:ad:f6:36:6b:0f:
7a:98:a0:0a:44:06:d1:da:ca:13:a6:43:6d:1b:9c:5f:19:d9:
1d:e9:44:39:90:62:bc:dc:7d:3c:7b:dc:af:1a:47:51:36:b8:
a8:96:54:60:e7:7e:03:d6:18:ae:4f:52:26:20:10:a3:06:51:
dd:8d:3b:41:d0:c3:b3:e0:12:46:6f:84:90:69:0a:21:8e:ea:
d3:92:6f:14:a6:82:5c:65:ee:14:24:7e:6a:eb:f5:1c:b5:96:
8b:c4:8e:80:0d:e6:4a:32:a0:c6:e0:9c:91:b6:de:ee:3a:20:
88:9d:c4:f3:92:4a:59:1a:54:ec:c3:62:94:06:d9:c2:7f:07:
e5:4c:71:eb:1e:e9:da:93:66:13:13:0a:8c:f0:14:c6:76:16:
36:1b:04:c1:c7:9d:71:c8:ce:a2:77:48:95:2d:ee:ef:90:b9:
ed:15:12:46:7c:b7:ca:b1:cc:41:1e:b4:55:d3:f0:04:3b:5b:
59:ee:36:6a:30:31:11:fa:9d:43:88:95:9f:eb:06:ee:a2:fd:
0e:87:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:27:14 2025 by rpki-client