Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa
File: 86cf6b8d-588c-3655-91c4-daa30a58f113.roa (raw, json)
Hash identifier: DGs5xZfmx+GygyHsZ0+3pQZEJL49coVuAw3Iy5OaFbA=
Subject key identifier: 1F:B4:2F:DD:AA:1A:6D:6D:56:97:95:70:41:A4:D6:00:AF:E5:A4:F1
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F43285848159FF9AF7D1044CE1E7F63C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 394380
IP address blocks: 23.19.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f9:af:7d:10:44:ce:1e:7f:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=52002dcf-3ac4-4f7d-8faa-d4de112fe56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:7f:3e:ec:08:72:df:c7:d7:32:a7:2f:92:
b4:88:76:d7:2a:71:ea:78:ca:da:42:cc:2c:e4:9c:
cd:47:99:a4:1c:e8:9e:6f:ed:bb:cc:0a:86:5f:ba:
e7:61:fd:27:c6:9e:01:06:f1:3c:0b:ad:22:48:ce:
b5:34:b4:a3:a7:8d:64:1c:a5:f8:a0:2a:67:94:44:
21:e2:b9:81:b7:53:ff:d5:b9:59:39:c5:fa:73:f0:
45:67:e2:b5:fd:52:8e:db:ca:ea:07:54:73:0d:be:
b3:f4:4b:d6:de:96:0f:27:a4:07:da:af:87:41:bb:
dd:52:cb:08:8c:54:86:9d:d8:c4:01:63:93:2e:c3:
6a:6e:36:e9:9e:ef:26:24:0f:8c:ac:23:4c:97:a3:
ad:e4:5f:8b:3a:f3:9a:97:fa:72:a4:40:7a:13:42:
02:d5:b3:04:94:01:2e:e8:c4:26:7f:ec:84:c9:67:
3a:c0:47:cb:95:51:7b:3b:4c:76:31:57:87:99:7d:
a3:c0:eb:1e:0a:1a:99:7e:f7:2e:10:03:b5:1e:4b:
02:83:d6:9e:5b:91:8e:62:a3:ca:22:ba:45:ba:ae:
d0:fc:7a:06:7f:52:36:3e:de:07:a2:d5:e9:5d:1d:
4e:f2:40:42:d6:18:a4:be:11:c7:00:15:65:06:92:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B4:2F:DD:AA:1A:6D:6D:56:97:95:70:41:A4:D6:00:AF:E5:A4:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86cf6b8d-588c-3655-91c4-daa30a58f113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:2d:6d:85:16:8c:42:9c:d3:23:7b:b0:1d:0c:4f:5f:f1:8d:
d9:ae:4d:c7:f7:07:43:20:0c:d6:36:51:ac:1b:82:b9:6c:6b:
d1:8f:05:77:5f:01:5f:49:75:2e:06:4f:1c:0d:0c:07:b1:75:
0d:9b:b4:5e:aa:e5:8b:62:eb:7e:a4:e2:a3:7c:b4:4e:ee:f4:
0a:58:bd:3f:e9:be:a3:39:0b:dc:43:58:68:b7:50:29:09:80:
b1:56:d2:73:b8:7a:0b:b8:05:4f:00:35:6c:7f:f1:48:41:bf:
75:c7:60:49:af:79:6b:a4:b7:36:23:e7:50:d8:9a:ec:8c:a4:
ca:d7:a2:41:bc:39:9e:cc:af:ab:e5:f2:d3:c7:1c:e1:04:86:
8c:06:87:82:ac:ca:e4:95:7a:45:5e:90:5f:ca:f8:76:eb:60:
42:51:66:d8:ee:29:cd:2e:93:d5:1a:39:23:bf:ae:0f:c4:4d:
00:d2:d7:cb:2a:6f:21:76:3d:e6:ef:5d:eb:d1:08:e7:89:be:
d9:8f:f8:cb:db:ac:4b:98:b3:b3:f5:fc:25:f3:06:bc:6f:33:
12:9a:5b:73:91:a4:23:5f:61:12:fa:23:e2:3c:c2:79:d0:71:
2e:82:73:a0:de:1f:01:8e:78:a0:64:08:85:5f:fa:3c:62:63:
bd:36:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:32 2025 by rpki-client