Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/a9ef1dd3-971a-352a-8601-5da36a79924f.roa
File: a9ef1dd3-971a-352a-8601-5da36a79924f.roa (raw, json)
Hash identifier: wd4e3j9X1vvxxtmIl5HXlfaCKdcZrD3ad+XexoQVrgg=
Subject key identifier: 33:3A:C5:DD:B7:65:2F:9B:35:57:62:76:64:BD:91:99:5B:AA:60:84
Certificate issuer: /CN=15046f6d-bd92-43fe-aa6b-1c0465361a1b
Certificate serial: 010D0C9F43285847EFEF899261C379E8F336F800
Authority key identifier: BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/a9ef1dd3-971a-352a-8601-5da36a79924f.roa
Signing time: Wed 20 Nov 2024 02:00:39 +0000
ROA not before: Wed 20 Nov 2024 02:00:39 +0000
ROA not after: Tue 18 Feb 2025 02:00:39 +0000
asID: 202662
IP address blocks: 23.143.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:ef:89:92:61:c3:79:e8:f3:36:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15046f6d-bd92-43fe-aa6b-1c0465361a1b
Validity
Not Before: Nov 20 02:00:39 2024 GMT
Not After : Feb 18 02:00:39 2025 GMT
Subject: CN=6b88a16b-6d06-4c83-a25e-6c7e6d95d7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:ff:a0:d2:1b:15:aa:a2:45:a8:d7:f5:4d:
ab:fd:8c:5d:07:20:0e:f0:d2:54:cd:47:53:18:69:
b0:43:d4:c3:f4:e7:8e:8b:5e:49:e6:7a:8a:5f:00:
48:6f:6b:eb:11:b8:39:87:83:49:c6:c6:f0:85:67:
9d:c0:b9:42:ea:50:da:cb:6f:94:f8:84:b1:2e:46:
59:09:e9:84:bc:31:fa:77:73:8a:64:da:ef:64:be:
06:ed:01:4a:bb:28:8e:bc:aa:41:80:cb:f4:53:86:
77:f7:0f:8e:23:25:bf:61:ce:a0:d4:ce:d3:6c:18:
5f:ff:9d:00:d4:98:09:ab:aa:4a:ce:de:c3:61:61:
8e:5e:c3:25:96:4e:b1:e3:56:27:18:e8:b7:f1:d9:
49:73:cf:e6:3a:b5:a8:60:c4:b2:6b:e8:50:68:ab:
aa:a4:51:2b:78:3d:84:3a:43:34:a9:a1:16:d8:60:
45:82:5c:28:ff:36:48:b3:24:b5:d4:fc:5c:58:24:
44:ff:39:c0:f7:8c:5a:23:2a:f0:69:bb:28:64:d3:
8a:57:c4:d5:dc:f7:df:68:35:cc:15:b7:a4:bf:6e:
98:f5:0a:9c:07:05:fc:ed:fa:3e:75:c7:89:a0:04:
a0:36:a3:d0:57:68:b3:d9:68:16:28:81:22:ae:a0:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3A:C5:DD:B7:65:2F:9B:35:57:62:76:64:BD:91:99:5B:AA:60:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/a9ef1dd3-971a-352a-8601-5da36a79924f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.crl
X509v3 Authority Key Identifier:
keyid:BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:4a:83:71:57:98:50:31:dc:99:60:05:f0:a6:55:19:76:95:
18:6b:46:53:b6:96:b8:fd:45:25:44:5e:ec:f2:9d:45:7f:96:
fa:ee:ac:8d:59:6e:b3:79:21:59:a8:a0:79:e7:c7:ee:3f:60:
95:1a:23:67:95:72:42:41:42:ed:2c:2c:c7:7e:7f:f2:ef:cb:
25:07:41:56:70:53:d1:b0:82:85:95:6e:b5:20:aa:c7:d5:7d:
84:ec:59:22:09:95:77:c8:4a:c0:5a:0c:cc:f1:85:c9:46:12:
4c:27:6f:6c:e9:dd:07:be:aa:42:ad:d0:f4:93:f0:77:94:76:
ca:59:4b:2e:03:8a:88:26:28:0b:5d:dc:6a:a9:75:5b:62:0b:
ec:34:3d:ac:97:dd:8b:84:65:f0:48:38:a3:2e:c2:e4:86:9c:
7a:49:d6:e7:6f:7f:b8:0a:42:5f:a2:7e:c0:45:9a:f0:05:d6:
69:8f:ac:13:1a:3b:c0:71:04:1e:70:64:cd:ed:53:d0:33:87:
7b:2d:bf:bd:1c:ed:91:bb:16:17:6f:ba:d9:e2:a3:20:30:9b:
53:44:3e:71:49:35:f4:15:4a:51:63:ed:2f:2a:12:90:c1:af:
29:85:83:57:23:b2:3f:e2:d4:17:6d:06:94:6f:25:e7:8c:ae:
97:a8:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:37:01 2025 by rpki-client