Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa
File: 7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa (raw, json)
Hash identifier: MvLusIlgZMVahqDHBwa8vWu3P69+GsJ5OtJ8KQqMsQE=
Subject key identifier: 00:64:BE:A3:1B:9B:DD:9C:B8:BE:50:8E:16:B8:B9:67:82:61:2C:A2
Certificate issuer: /CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
Certificate serial: 010D0C9F4328584838854B309C33F74037F3E980
Authority key identifier: 42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa
Signing time: Mon 16 Dec 2024 02:00:39 +0000
ROA not before: Mon 16 Dec 2024 02:00:39 +0000
ROA not after: Sun 16 Mar 2025 01:00:39 +0000
asID: 35990
IP address blocks: 23.177.48.0/24 maxlen: 24
2602:fca6::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:38:85:4b:30:9c:33:f7:40:37:f3:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9650b1c-fc44-4fff-a4a4-cecd13f234e9
Validity
Not Before: Dec 16 02:00:39 2024 GMT
Not After : Mar 16 01:00:39 2025 GMT
Subject: CN=a3348d6a-55c8-4a8f-85a0-b3696f3d462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:86:ce:47:88:c1:38:2f:86:62:5a:42:06:
03:e2:82:d6:b0:cd:f9:19:ce:4d:95:27:28:7c:6d:
a1:97:39:bb:3e:8d:6c:43:23:d2:6a:b5:f9:96:72:
6f:61:b2:a1:28:b2:a4:5c:0c:1f:0b:63:9e:aa:97:
1d:44:48:67:3d:66:48:bb:5f:86:26:15:dd:de:c1:
63:e4:77:3a:4b:52:28:12:f1:73:e0:a2:a2:6e:c8:
ca:5a:6a:3e:29:1c:3e:d0:a7:66:44:9d:e1:70:21:
cf:79:0d:ab:9b:1f:69:bf:46:44:6f:fe:fc:21:71:
99:8f:e5:dc:50:8a:ef:cf:51:11:25:a5:a1:20:84:
e3:84:31:74:5c:0d:87:7a:cd:0b:52:e0:db:e5:ae:
a1:5a:23:63:1a:a0:5e:72:94:d0:fa:f9:46:3d:77:
97:bb:e9:75:cc:72:39:78:56:fa:89:5e:6e:ee:82:
25:0d:c2:9f:29:a4:4e:fc:99:c7:6d:cf:93:f6:ce:
de:89:cc:63:d5:2e:18:1e:31:9f:99:38:13:32:c8:
46:bf:3f:1c:0d:6a:92:e6:a2:24:6d:e6:90:79:ce:
14:4e:f7:75:2e:33:0e:eb:e6:8e:3d:10:a2:d9:06:
7d:5a:19:29:72:f6:37:f5:8f:1d:6e:d6:25:83:9e:
1f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:BE:A3:1B:9B:DD:9C:B8:BE:50:8E:16:B8:B9:67:82:61:2C:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/7b3a6aca-8f55-3f78-bb26-0bfe70d0fa81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.crl
X509v3 Authority Key Identifier:
keyid:42:96:05:27:D8:D6:7A:0C:12:45:C3:4E:0C:7F:CF:97:85:2D:F4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e9650b1c-fc44-4fff-a4a4-cecd13f234e9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.177.48.0/24
IPv6:
2602:fca6::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:31:2a:89:5e:cb:48:0b:bc:f9:ac:b1:23:d0:ca:fe:1c:d6:
da:44:06:52:9a:86:3a:fd:84:26:6d:aa:bc:87:25:79:be:04:
61:51:09:e1:b6:9e:06:50:aa:16:54:7d:fd:51:33:6a:22:b0:
f8:1b:4b:73:5b:70:af:ef:63:1d:eb:b7:3a:eb:a2:43:99:bf:
cd:b2:62:f2:60:d9:47:b5:92:14:f3:96:6e:7a:4a:b4:44:6b:
1b:1e:4a:5d:ef:6c:52:8d:60:bf:ff:ae:18:ef:e8:b5:3c:eb:
cf:20:5c:03:50:eb:cc:c0:e8:1c:fe:d1:79:d7:02:43:9d:f0:
04:ab:31:d9:ce:db:02:b5:fe:9e:d9:ed:73:e1:63:e3:76:9d:
10:ad:d5:14:fe:f4:f3:e1:c7:20:a2:37:6b:40:88:39:8a:b8:
06:96:df:e3:3a:16:6b:20:cb:59:27:3e:df:8f:0f:7f:00:0b:
0e:2a:e7:28:ca:ae:77:13:50:c1:b7:c1:87:a4:10:d7:89:5b:
a0:92:21:2b:55:e6:ab:64:79:e0:6d:7d:54:9a:e1:b6:f2:5e:
26:ac:1f:4c:ec:db:a5:61:7c:1b:4e:1d:10:1a:ed:0c:a9:8f:
9f:64:35:73:c3:db:36:2a:8e:26:4e:b4:8d:56:96:6e:49:6b:
20:2e:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:47 2025 by rpki-client