Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dacc71d3-a94a-3e01-8efc-0551dfc89451.roa
File: dacc71d3-a94a-3e01-8efc-0551dfc89451.roa (raw, json)
Hash identifier: Uift7c09/FqoWSVAHvAY/s67GQL0Gsck9RhH9gMpgzI=
Subject key identifier: D2:F0:A6:EF:75:B9:40:A1:D3:01:71:A5:F9:B3:DE:52:F2:04:47:F3
Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial: 010D0C9F4328584812D52E0B8A44D8ECDC922800
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dacc71d3-a94a-3e01-8efc-0551dfc89451.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 14618
IP address blocks: 23.29.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2e:0b:8a:44:d8:ec:dc:92:28:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=8e9b3654-78fa-4e0b-905d-044933fbb266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:99:44:94:d7:5f:f4:ab:b4:31:a1:05:5b:
5b:29:82:cf:71:b6:f7:1c:46:e5:8c:be:89:bd:76:
7c:e3:93:52:91:b5:d0:be:28:27:86:35:f6:3d:ef:
eb:ad:fb:2d:66:7a:09:19:b8:90:31:ca:9e:0f:41:
b4:f2:36:cc:09:c2:96:bc:90:97:51:c7:4b:8f:81:
78:50:3f:fd:67:d4:63:44:6b:cc:2e:55:db:9c:b2:
94:c3:de:88:67:e3:b7:a7:30:59:cf:b6:6f:b3:d0:
1f:5b:6d:ef:18:81:26:ad:eb:d5:83:7f:f5:5c:84:
ff:14:26:48:e3:53:90:38:f1:de:e4:3d:40:83:f3:
b4:c5:f1:96:f9:ba:c5:c2:4a:da:bc:a7:5b:9a:a7:
fa:59:c5:f7:98:88:87:8c:31:9e:79:75:3f:56:80:
af:06:21:84:34:0b:af:d1:b4:37:65:62:a8:90:23:
58:3b:65:5d:e5:c5:1f:48:b2:03:30:00:51:27:d3:
fb:73:c8:71:1e:9a:fb:3c:9d:8e:4e:17:31:48:5e:
65:31:e4:13:1b:a7:b7:85:c3:df:dc:da:b2:37:7c:
5f:43:9d:a9:52:36:ed:4e:f8:c9:8d:6a:1a:04:aa:
90:d2:33:94:69:18:67:db:f1:e2:90:93:d8:85:51:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F0:A6:EF:75:B9:40:A1:D3:01:71:A5:F9:B3:DE:52:F2:04:47:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/dacc71d3-a94a-3e01-8efc-0551dfc89451.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
X509v3 Authority Key Identifier:
keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.29.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:e5:d3:69:7d:23:ac:bc:89:c0:54:02:de:d6:f8:49:a8:d1:
42:5b:2e:c0:5f:cc:59:0b:84:9e:51:55:9d:09:6e:17:b1:31:
94:42:80:59:8b:aa:db:38:ed:d0:4a:7a:7d:19:98:d2:7b:1a:
e6:04:f3:50:b5:85:eb:5b:25:38:8a:c0:1c:15:d1:ed:e6:8a:
61:4e:93:34:69:62:39:12:c4:7f:a4:15:12:9b:e7:e3:07:e2:
62:a5:f9:26:91:fd:cf:b0:bc:c4:8b:d2:58:ef:20:3a:85:55:
fd:21:77:41:ca:5a:26:95:1c:86:c2:cf:5e:6e:75:28:7e:08:
35:f0:e1:ac:be:b8:04:c3:7e:9d:3d:d3:21:72:00:1d:38:32:
87:e3:10:a7:12:b5:9d:1f:f0:e5:ee:c4:45:81:5a:79:fe:08:
5f:77:3f:fa:54:44:56:17:24:8f:85:07:df:1f:33:ef:c0:6d:
39:18:83:fa:92:f3:a2:bf:b1:53:1d:1f:d1:b4:ae:89:d2:bb:
7f:bc:95:c1:58:87:95:07:8c:a5:d6:25:f7:76:e0:d2:56:66:
dc:b9:fc:58:2d:48:26:30:ef:dd:63:50:24:7c:78:98:78:de:
9c:a2:ee:6b:0b:7c:39:9c:5a:ea:05:9d:c2:b1:2a:04:7a:24:
84:2f:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:06 2025 by rpki-client