Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa
File: f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa (raw, json)
Hash identifier: U/Ati0+pr+rJUT0HqZIbJL5sp7xbK0DQ1ueafPrYOrU=
Subject key identifier: 06:11:25:BB:9C:72:DA:A1:54:FA:8A:76:DA:B8:90:E3:C1:A1:71:85
Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
Certificate serial: 010D0C9F43285848037B6C0F04BBDD84F6505D40
Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 35008
IP address blocks: 23.153.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6c:0f:04:bb:dd:84:f6:50:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=28e26768-a815-45a3-b168-f323e141f9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:83:f3:f9:7a:b1:f9:b5:27:6f:15:00:91:31:
d1:e1:d0:47:0e:94:8b:99:f2:dc:fd:c2:5e:51:76:
27:e8:6f:61:66:db:26:6b:e3:5b:15:6d:03:85:37:
4c:fd:b3:ed:a7:e9:d5:b6:a6:b9:7a:f3:63:ca:f6:
59:04:20:49:ac:cb:a0:8e:02:5f:e9:6b:29:6c:28:
b9:cc:ee:fa:a5:df:fb:63:eb:db:5e:d3:8b:79:a6:
77:fe:d4:8b:59:fa:31:ce:0c:ec:b6:27:2a:bd:c1:
74:30:ce:fd:00:84:9a:ef:d8:df:8e:c7:a3:03:f6:
98:9d:ae:a1:7c:da:f9:e7:4c:e6:99:b9:31:8e:99:
7d:0f:3a:30:b9:fc:55:25:50:61:7f:d5:c2:70:fb:
40:a6:15:a6:6f:fb:ae:81:ee:20:be:4d:7f:c7:f9:
4c:bb:db:ec:d0:93:16:8a:ed:c6:2e:b1:ec:89:c6:
cc:f4:ec:ff:ed:25:61:03:5a:05:b1:86:50:b2:63:
eb:61:dd:bd:62:6c:3c:02:56:87:29:b1:e7:8a:40:
3f:37:18:b2:38:9b:9d:b9:db:25:5a:ab:a8:8d:28:
45:b8:c9:26:9c:30:a6:23:cc:24:59:be:6f:c7:6b:
3d:d2:b3:f1:91:06:7d:81:43:17:d2:6c:56:93:cd:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:11:25:BB:9C:72:DA:A1:54:FA:8A:76:DA:B8:90:E3:C1:A1:71:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl
X509v3 Authority Key Identifier:
keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:33:e8:f5:83:51:f6:c0:96:39:5e:12:fd:90:49:b0:0c:19:
ce:d7:f3:9c:32:e9:30:89:af:ce:bf:64:ac:2e:59:69:f4:02:
c2:3c:9a:13:cd:c4:af:ce:4f:97:87:2f:f6:e9:09:6c:c7:20:
67:49:c7:0c:60:f9:2c:f6:4c:8a:32:33:46:c5:8b:ea:fe:da:
62:42:7c:51:3b:6f:39:62:53:a4:d8:9a:03:1a:9e:00:57:32:
7b:cf:65:c8:e3:89:a0:83:2b:77:ab:c4:c0:53:3e:6a:7a:5c:
b2:a9:28:d6:ec:7e:8a:68:6e:ce:5c:c6:9a:7d:db:90:ac:ea:
03:97:f5:4b:ab:34:b3:d6:ef:15:85:8b:b0:a4:d4:e3:fc:b6:
ef:2e:0d:40:43:32:05:a5:94:91:25:b3:8d:08:46:38:79:f3:
6a:47:45:a4:b7:31:21:c6:95:57:ce:71:45:14:bd:36:76:0c:
63:8d:03:f3:00:2e:3f:35:d9:09:09:b9:e4:22:a8:01:70:de:
ee:a5:9c:77:55:33:fc:36:be:21:9b:1d:8c:2f:dc:bb:77:46:
49:33:8c:ea:51:2c:e0:c4:15:35:3e:6b:7d:15:2f:6b:17:55:
94:b6:9e:8c:23:c1:f1:c4:48:0a:2d:26:0e:2d:24:3a:55:b4:
15:ec:79:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:06:09 2025 by rpki-client