Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895/76aff39a-b574-3619-b438-36199b7c74ab.roa
File: 76aff39a-b574-3619-b438-36199b7c74ab.roa (raw, json)
Hash identifier: LFoaFbIIbWYoYfac3JlazNZzjkKRC5D3aV2qKa3MRHU=
Subject key identifier: AE:56:45:B1:F7:EB:8A:8C:23:E1:1D:C6:32:D8:70:65:52:1E:CC:83
Certificate issuer: /CN=fdf7eae3-1726-4868-ac7d-c2c68e6dd895
Certificate serial: 010D0C9F4328584819CFCCB926589D593FB76280
Authority key identifier: A3:B5:01:9D:F4:88:EF:A7:AC:A1:62:2C:13:40:BD:AB:CD:8A:88:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895/76aff39a-b574-3619-b438-36199b7c74ab.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 36165
IP address blocks: 23.168.112.0/24 maxlen: 24
64.190.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:cc:b9:26:58:9d:59:3f:b7:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf7eae3-1726-4868-ac7d-c2c68e6dd895
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=67ede307-66a8-4100-8de8-3211e7367d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:e8:c9:43:a3:d2:a7:35:d0:55:76:3a:09:
fd:1a:df:6b:4d:bc:41:6f:c3:c5:0c:2a:ac:70:ca:
8a:a7:35:64:15:39:01:1c:62:70:1b:1b:5d:12:fa:
c2:fa:89:fd:a3:fb:33:5e:0d:24:2f:c9:ac:8c:be:
f5:3a:91:ba:db:20:e8:8f:57:a6:49:8e:09:de:5d:
3d:db:79:b5:69:56:90:38:55:72:b7:f8:df:ac:37:
af:3a:42:c4:32:46:fa:85:30:b9:73:fc:14:2e:38:
e4:84:5c:65:5d:6b:01:89:fa:40:e9:5c:0e:51:a0:
98:00:ad:f9:b4:a2:a1:1e:21:f0:2c:70:bf:95:59:
7b:3a:79:b7:6a:49:f0:11:88:8a:d2:d0:c3:64:5e:
e1:30:e1:a4:67:d7:bd:2f:f4:2a:3a:46:01:a8:55:
2d:d3:ee:e7:95:be:fb:38:4a:42:d2:95:85:a7:24:
80:10:c9:4c:d2:ec:17:ae:b7:a6:bb:08:0f:ba:f8:
40:38:98:02:16:f9:c3:72:a4:68:74:d2:38:ae:af:
ea:57:fd:a6:cd:bd:b8:59:15:3c:28:00:fc:94:50:
29:17:33:c8:d6:ec:b0:2d:b3:c0:81:49:e6:a0:0b:
63:79:0e:52:ae:81:dc:f3:4f:93:8a:d3:f0:da:60:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:56:45:B1:F7:EB:8A:8C:23:E1:1D:C6:32:D8:70:65:52:1E:CC:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895/76aff39a-b574-3619-b438-36199b7c74ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895/fdf7eae3-1726-4868-ac7d-c2c68e6dd895.crl
X509v3 Authority Key Identifier:
keyid:A3:B5:01:9D:F4:88:EF:A7:AC:A1:62:2C:13:40:BD:AB:CD:8A:88:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fdf7eae3-1726-4868-ac7d-c2c68e6dd895.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.112.0/24
64.190.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:b8:16:eb:fc:74:7b:0e:97:df:35:65:96:f9:54:1a:d4:a4:
d3:b9:74:ad:eb:e2:b5:0b:1e:5b:b0:da:6a:fd:d8:2d:b9:b2:
a1:d3:f9:71:34:c5:2e:9b:20:80:02:e7:a9:1f:8d:9a:ee:c1:
71:e9:cb:d6:cd:78:49:10:25:fc:77:c6:31:05:9c:c4:e8:e7:
51:74:99:4f:95:ca:31:00:6a:42:82:26:e4:f7:36:a9:c0:d3:
fb:67:e8:2e:d7:a8:1d:ee:cd:59:5e:26:aa:1d:4a:4a:36:07:
b5:9c:8f:4d:50:8d:65:79:ce:c9:30:9e:59:1d:a6:7a:d9:c2:
cb:b3:a3:32:5c:4b:8f:a9:87:2b:1f:35:91:7d:0f:b3:aa:86:
2b:41:2a:21:93:f0:f8:a3:4b:c6:66:bb:75:19:cc:75:ff:1c:
03:85:f7:dd:61:07:7d:1c:50:21:19:69:6b:a7:45:ef:b7:56:
74:ea:00:0b:e2:99:95:7c:b9:7d:6d:69:71:4f:2c:16:6d:8a:
42:55:3b:b9:cb:63:0b:71:41:74:52:1e:25:71:aa:f3:dc:8f:
03:8d:ee:d2:56:7a:38:44:4a:7f:a2:cd:48:50:21:5e:49:1f:
70:b5:ed:95:ca:29:c8:7d:43:72:65:19:59:b3:f0:55:07:c7:
d0:cd:87:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:52:01 2025 by rpki-client