Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
File: f8553b5d-807d-3297-a922-562a8bd98bc4.roa (raw, json)
Hash identifier: o6iV/f2cp00jyZ0btv+i0b2fjgmBC9FVOHsOF8kkYoM=
Subject key identifier: F8:D8:B7:99:FB:18:58:4A:01:DE:72:7C:19:A8:74:0F:A3:C4:D2:A4
Certificate issuer: /CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
Certificate serial: 010D0C9F432858481F652B3BDB749BA0FB8FEB00
Authority key identifier: 0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 54364
IP address blocks: 23.173.240.0/24 maxlen: 24
2602:809:c000::/44 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:2b:3b:db:74:9b:a0:fb:8f:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=345efc87-ff01-44ff-9ccd-ffe5d01d1c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:6a:81:80:f4:09:70:95:98:b2:b8:9d:fb:
e6:7f:bb:92:64:82:89:a1:8c:68:81:fe:e7:96:e9:
9b:ae:f2:80:2a:ae:07:35:56:aa:a4:d2:f1:22:18:
ed:2e:6e:5b:b4:c3:0b:03:e2:f7:06:45:3b:92:91:
5b:20:51:65:f6:3e:53:25:ff:d4:4a:0f:dd:a6:15:
68:a2:56:87:67:54:36:81:ad:64:bb:be:79:c0:7d:
c6:28:db:44:3e:49:15:4f:6d:e5:3d:be:ff:40:64:
5a:ee:16:df:ac:df:79:22:d6:d1:82:07:81:20:df:
95:68:e2:4b:e7:2d:36:88:7f:00:d1:9d:d4:5a:55:
1b:db:17:9e:59:4e:ae:59:d9:8d:b2:7a:0d:f2:d9:
37:b8:c5:d2:20:6d:d8:e2:73:a5:ab:b5:ad:ee:79:
85:65:a1:ea:9b:7a:62:60:7d:f7:5c:66:63:34:db:
6e:00:af:26:62:9b:0c:cd:3d:eb:4e:32:ef:24:3d:
58:36:95:1e:d0:a8:fd:a6:7c:c3:dc:79:46:e9:40:
db:17:45:a3:6a:2e:26:83:c0:a2:99:47:9e:f6:09:
fb:4d:36:17:f0:46:b5:76:2d:b6:ca:0e:fb:4c:44:
fb:a6:ef:50:c6:66:d2:f2:4a:d7:31:0f:80:0a:47:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:B7:99:FB:18:58:4A:01:DE:72:7C:19:A8:74:0F:A3:C4:D2:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/f8553b5d-807d-3297-a922-562a8bd98bc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.crl
X509v3 Authority Key Identifier:
keyid:0A:48:B2:75:13:D3:0B:90:F1:F9:23:F8:EA:4D:77:B2:95:3A:E2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7b4e80b3-ac14-4a4b-a0f2-5675b4c82a56.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.240.0/24
IPv6:
2602:809:c000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:95:33:13:53:d0:aa:27:fb:a5:ff:92:cf:0a:1d:4d:01:6c:
02:9a:c1:19:c0:a5:70:92:54:f0:2d:b4:26:ec:ff:d2:71:b5:
7a:13:bd:15:2c:ff:cb:8a:8d:ae:30:0f:64:88:12:29:a7:9a:
bd:c6:16:84:9d:19:08:8e:9e:87:7e:c6:70:47:4f:b2:ef:74:
e1:54:36:a1:56:6b:b5:eb:0a:bd:5d:2a:13:ec:d1:6c:40:d7:
a8:75:f9:09:a2:42:a2:66:a0:a3:e3:5b:d8:f6:f1:c2:6e:62:
d0:12:da:59:a6:ea:de:91:97:56:05:df:f8:72:3f:d8:8d:0c:
eb:ec:25:36:b8:0b:f1:dd:dd:d4:f3:f3:8d:8a:8c:a7:91:22:
86:47:fa:08:fa:fa:9f:30:3a:4e:b5:f2:9f:a6:65:03:d9:3f:
e5:95:21:1e:1e:d7:7a:e3:63:1c:ce:2b:62:2f:a8:08:a1:86:
98:bb:1a:b5:a3:fa:ff:c8:d5:1f:d4:c5:37:4a:7d:9c:86:c9:
74:6b:81:20:50:da:a2:a9:05:17:68:47:32:e4:b5:38:94:ba:
f1:7a:0c:27:2a:da:48:88:59:63:0d:91:bf:de:ee:39:5b:3c:
e4:c8:51:85:ae:32:54:69:08:61:97:05:d4:2d:75:0f:df:2e:
60:d0:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:08 2025 by rpki-client