Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa
File: 66807622-f529-3717-a7e3-9e3f1a257327.roa (raw, json)
Hash identifier: NxAmts+12rnq9dWUhaGXaboO6sc46WARc0RK3ZM4iTM=
Subject key identifier: 35:19:A1:89:A0:5F:9F:DF:4D:5E:2A:68:B9:D3:6F:9F:AB:0E:02:D0
Certificate issuer: /CN=f2eccad3-9416-4755-b75e-5a77a272beb3
Certificate serial: 010D0C9F432858484515824AD4CDCE965343AA00
Authority key identifier: 4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 19625
IP address blocks: 23.188.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:82:4a:d4:cd:ce:96:53:43:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2eccad3-9416-4755-b75e-5a77a272beb3
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=e55e423a-66c5-4330-a398-772c58814d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:2c:07:ac:46:0b:29:a4:f7:b7:d2:e0:4e:
2d:8a:cd:3c:db:ab:a2:4c:f6:8b:a6:16:7e:26:ae:
b9:06:1a:7e:6d:3e:f8:e9:37:dd:ae:9f:0f:82:ff:
7c:ca:49:3e:e3:04:de:09:56:b6:7b:7e:bc:c8:ab:
57:38:79:50:32:b8:c5:04:44:80:76:9f:c8:c8:e1:
c4:bf:ab:c6:20:c6:9b:5f:55:eb:ab:66:c4:ac:0a:
22:5d:46:ed:8b:f3:42:77:fc:61:2b:89:ed:af:f4:
c7:b4:fc:6c:71:10:4b:95:b3:2e:95:6c:d5:30:f2:
1a:43:92:27:87:e9:6b:4a:35:6b:64:48:8b:9a:c5:
fd:29:95:6e:27:64:92:09:93:33:ba:e0:f6:79:b8:
76:80:2c:ad:3e:73:3c:cd:82:47:56:d2:65:16:84:
3e:e1:fd:3c:52:d4:66:e9:44:70:7c:4c:3f:04:5a:
42:f3:87:65:23:b7:a4:b4:39:65:83:28:7c:39:a4:
76:e5:38:99:fc:3d:c8:db:9c:f1:c7:1a:09:bc:61:
fe:be:30:e2:a0:a3:23:8c:d4:84:5d:42:8d:b5:a4:
74:a2:1b:72:8c:f7:0a:aa:45:71:dc:29:71:0a:3e:
b2:7c:97:88:2b:9f:4f:6b:33:b4:14:8c:d1:e2:a0:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:A1:89:A0:5F:9F:DF:4D:5E:2A:68:B9:D3:6F:9F:AB:0E:02:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/66807622-f529-3717-a7e3-9e3f1a257327.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3/f2eccad3-9416-4755-b75e-5a77a272beb3.crl
X509v3 Authority Key Identifier:
keyid:4F:2B:E0:FF:62:0B:EA:21:24:4C:D6:E2:99:C0:42:D8:AB:3A:E6:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2eccad3-9416-4755-b75e-5a77a272beb3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.188.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:51:ec:b6:72:94:dd:02:af:36:64:41:dd:72:f9:ab:e4:31:
51:00:e8:1d:ff:d4:d1:e2:aa:46:04:7d:27:15:d8:77:f9:ae:
06:f8:39:2f:31:85:ae:77:4c:ae:b6:23:f7:d2:6e:eb:e5:10:
19:e8:bd:47:be:f9:e1:c2:a8:38:f8:e3:72:87:97:d9:4f:06:
51:62:e3:d9:4c:77:ac:44:cf:d5:32:b3:c0:f4:6f:46:be:6c:
58:c9:c5:88:33:6f:aa:72:ae:c3:8a:4a:d7:cc:6e:30:bb:ff:
fb:51:6d:03:c9:4e:04:1a:4b:5d:83:a7:4e:81:f5:b4:45:e9:
5c:47:20:de:cf:8a:ce:f5:65:da:6d:ab:35:81:46:24:28:c0:
26:31:11:51:ea:bf:da:1d:84:95:8f:ca:16:49:55:5c:40:6f:
19:06:85:43:73:39:c9:21:06:c4:58:e0:f2:ac:74:a3:64:0a:
94:b2:20:d4:e9:46:04:b4:67:b2:46:e7:c2:dc:3e:aa:8f:7d:
03:78:69:eb:d6:96:f5:82:cc:c9:8d:94:ea:2a:e7:e6:bf:6e:
25:ae:b8:c6:51:19:cd:cb:7c:51:eb:1e:ec:36:aa:19:1f:f5:
1b:1e:8c:97:d5:b5:5e:ef:92:05:c0:50:0c:b0:94:62:ff:cc:
b4:19:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:10 2025 by rpki-client