Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa
File: 5805723c-746c-3198-a633-1c5ff07a902b.roa (raw, json)
Hash identifier: UPUpxj+owFp0LkX3zWpnuUWXpzVRqV3MasXMVCww6Ek=
Subject key identifier: E5:CD:1B:D8:F9:97:6C:90:F6:5E:D7:87:4E:63:AD:11:3D:5A:09:1B
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285848159FE4A38E79226CE052BC80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 4766
IP address blocks: 23.248.160.0/24 maxlen: 24
23.248.161.0/24 maxlen: 24
107.155.28.0/24 maxlen: 24
128.1.36.0/24 maxlen: 24
128.1.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e4:a3:8e:79:22:6c:e0:52:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=214602b0-9e29-494a-bb84-332fe84b5aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:26:8c:2b:e5:f9:33:5a:8c:be:01:88:0d:90:
c4:75:fd:2a:82:71:c5:cb:af:38:e9:f2:3a:33:e0:
1e:9f:05:12:d0:f3:aa:55:0e:2c:30:0c:30:8a:08:
ac:22:2f:4c:22:85:90:95:0d:f3:42:0d:74:72:65:
60:f2:b5:e6:14:1d:f7:91:b1:ed:2e:c6:73:b7:36:
5f:1d:93:db:a5:08:fc:05:f9:ee:c9:45:bd:1f:e5:
f8:26:e8:16:12:fb:45:87:d6:87:a7:0f:15:74:bb:
5e:29:14:d4:01:a2:3d:ea:b8:5d:af:66:49:1b:e3:
6a:2e:70:98:07:23:3d:6a:5d:71:9a:ac:3d:05:6d:
f7:7a:26:a8:f5:b9:d1:ef:52:04:96:bf:bf:76:41:
8a:89:1e:98:58:b1:6b:9d:df:bd:02:0f:8d:2b:ab:
be:27:c2:de:18:7c:b6:f3:2d:6d:a4:c5:7d:75:91:
b9:93:0f:46:27:1e:e4:cf:36:8e:7f:9d:c4:cd:05:
15:1e:46:7d:b8:88:d9:27:3d:4d:dd:ef:f4:27:4f:
bb:f1:48:8d:73:86:cf:83:9e:93:fc:b2:fc:8a:67:
3c:3c:dc:0c:41:bc:c1:8f:2e:9d:98:db:ca:69:e3:
9c:34:81:bd:7f:35:78:c5:da:d7:ab:86:13:10:4f:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CD:1B:D8:F9:97:6C:90:F6:5E:D7:87:4E:63:AD:11:3D:5A:09:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.248.160.0/23
107.155.28.0/24
128.1.36.0/24
128.1.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:6f:43:4c:a9:b3:d1:6c:1c:ad:55:c0:43:f5:5b:3e:4a:e7:
b3:15:76:8d:b8:a5:99:6e:66:2b:7f:93:37:51:d2:0e:68:0a:
9e:3b:2e:f2:eb:74:45:c7:a2:04:60:c3:07:ee:81:e5:c0:3c:
4a:a4:a1:61:44:32:36:70:39:05:1f:1d:84:6a:72:eb:d6:fe:
7e:38:14:07:39:57:7d:e3:8a:77:64:8f:9c:65:01:6e:16:37:
ac:e9:12:60:01:7b:5f:1e:5c:b9:39:6c:46:e6:72:bb:2b:03:
0d:0b:5e:cb:85:82:83:50:51:63:f4:e6:18:93:48:ee:d2:52:
69:fe:9f:95:0d:0c:9a:75:a7:e3:7e:6b:08:f8:48:de:8e:39:
fb:e6:f7:6e:d6:29:e7:05:62:4c:40:cd:04:20:51:a2:a9:39:
93:6b:f8:5d:50:c3:c7:45:95:aa:8b:a1:6e:4d:f0:e6:58:b0:
0a:fb:3a:90:d4:13:6a:d5:6b:d3:a5:15:3b:34:b7:37:6a:c9:
3c:9c:c1:65:e8:e4:3c:9c:43:ac:d1:c4:62:19:2f:58:2a:b2:
39:b5:88:47:c7:dc:f3:30:28:cd:e8:35:29:b3:18:ef:39:45:
de:f6:85:6a:bb:21:e5:82:1a:33:bd:e1:80:b7:f2:81:83:0f:
5e:b5:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:58:13 2025 by rpki-client