Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa
File: 724eaedf-d166-39d4-84e6-c3434f2a41dd.roa (raw, json)
Hash identifier: 6Bppnt3hwZtF9xi0HoPtNv9IXS6VOL7GAqEWo68RYbg=
Subject key identifier: C1:A9:FF:25:E7:9C:95:CB:84:79:29:B2:B5:EB:CA:60:0B:33:10:9E
Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial: 010D0C9F4328584812D52DF919EB41DBBFB25600
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16509
IP address blocks: 23.29.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2d:f9:19:eb:41:db:bf:b2:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=83ac6ea0-3d96-475b-9f05-228f3ca0e0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:48:38:a0:3a:ea:f9:a0:9a:b8:fe:98:81:
e6:4e:be:60:46:75:f1:79:b4:af:dc:08:6f:a1:12:
b1:1d:9d:b1:92:f2:c1:04:58:1d:ec:fb:6a:bd:50:
d4:b7:75:6a:e9:82:e4:f9:68:b1:fa:c0:70:54:65:
84:e2:79:cd:1d:b0:97:45:d8:99:09:9a:42:7c:77:
d7:f1:1d:20:81:71:0b:bd:04:b9:56:a3:f8:37:12:
a6:0e:c7:3e:f7:0e:bf:b0:37:c9:c5:97:d0:50:99:
83:fc:bc:bb:5f:8c:fe:8b:4f:77:e8:dd:74:36:3b:
43:6c:1c:08:ab:fc:81:ec:00:17:7d:9f:1d:4d:69:
bd:9d:f0:61:40:1f:65:6d:2a:7b:07:53:57:f0:83:
e0:ec:bd:af:70:8a:a0:4a:bd:a0:3e:6c:f7:ed:af:
dc:f7:43:c8:75:cb:b1:30:4d:1b:eb:ff:75:32:d1:
5e:79:12:58:18:d9:a8:91:47:61:59:21:2f:b1:84:
06:91:ef:09:65:61:00:ad:2a:95:65:78:e3:5b:61:
b3:cc:0e:23:ad:22:46:ac:fd:5b:88:c2:15:70:be:
4c:2d:11:1c:d2:ca:79:5f:ca:da:f7:05:75:17:33:
cf:55:f1:b6:00:6d:a0:51:63:53:00:40:d4:30:28:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A9:FF:25:E7:9C:95:CB:84:79:29:B2:B5:EB:CA:60:0B:33:10:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/724eaedf-d166-39d4-84e6-c3434f2a41dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
X509v3 Authority Key Identifier:
keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.29.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:fd:98:ae:2c:6d:ff:f5:82:76:08:de:ed:66:fa:65:1c:c9:
68:89:52:8b:0b:d4:74:bc:48:16:f3:d0:fe:12:22:cc:e6:c7:
3d:b9:53:34:44:63:b3:36:e6:32:34:f4:32:ab:69:ec:c8:34:
ec:92:2e:87:60:81:98:b1:3d:80:c5:9d:c8:71:da:4d:ad:7a:
9d:9f:84:08:ec:59:b5:23:ea:ab:a8:8a:cc:3f:4e:a0:1e:8a:
fc:ec:da:45:2e:45:e0:86:9c:0c:89:9d:28:3c:a5:89:1e:1f:
59:64:0f:11:4a:c7:94:8d:57:7b:ed:17:ff:cf:c2:bf:46:66:
85:f7:0e:b5:d6:09:32:57:bc:3b:bf:c6:1e:3c:1b:8c:23:6b:
28:94:24:0a:c5:4f:a2:25:5d:99:8c:be:1f:3c:4b:95:09:28:
89:2f:a8:1a:ae:1b:ac:7d:0f:20:b4:00:2e:01:5c:33:a3:d8:
99:05:c5:d2:e3:e4:b8:f6:1d:33:4b:a6:57:08:cc:b1:52:76:
5b:69:20:3e:93:83:53:12:df:ed:95:9a:da:cc:8c:0e:b1:e1:
bb:61:94:ce:5a:e0:b5:e3:14:e6:3c:3d:cb:37:41:f0:36:72:
e8:97:88:71:32:64:64:e3:e2:c9:e3:8c:a9:41:0c:47:ec:1e:
a2:d0:a5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:20:45 2025 by rpki-client