Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa
File: bb02bbe3-126a-326c-b493-d6ffc832128e.roa (raw, json)
Hash identifier: A89ItfaehTaseREiMHf+gCQset4mFZrtXbgcBEXznIw=
Subject key identifier: F8:97:43:1A:53:B4:25:79:B8:7F:B7:62:75:83:21:29:64:F1:37:F2
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F43285848159FFB8C873B9C0E92E59520
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 134351
IP address blocks: 23.19.53.0/24 maxlen: 24
2607:f5b5:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:fb:8c:87:3b:9c:0e:92:e5:95:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=edc6c6ae-7ef4-4e89-b7b2-004a61f3b460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:38:f5:4e:60:00:15:bc:93:64:dc:01:1e:
67:98:29:35:84:72:94:dd:be:ee:ef:e6:db:84:25:
02:95:37:02:e9:67:38:41:1f:a2:1d:e7:48:b7:d1:
f2:c8:4c:af:7f:1c:e2:5f:22:f0:8d:00:c2:27:93:
72:ca:0d:3f:f0:a9:61:b3:bd:c5:66:21:c8:a0:01:
0f:14:82:55:a7:1a:09:f4:91:8d:f6:20:eb:aa:79:
08:5e:8b:21:a6:f7:39:58:f2:f6:39:28:97:88:4e:
b8:bd:bd:e0:da:43:5b:55:24:b4:31:61:1d:66:98:
e0:82:3b:97:4e:65:9e:ec:fa:5b:82:3e:32:82:37:
dc:4e:24:b8:b2:1f:5a:39:7d:10:07:41:f5:52:3f:
40:d8:b5:48:59:7c:ef:75:e9:bc:0b:a0:53:03:1b:
f7:2c:7f:1f:fe:87:6b:2c:a7:fb:8e:0c:51:00:4a:
ac:b5:15:fa:ce:d6:87:5b:26:f7:89:52:f6:93:90:
d3:1e:e6:8f:77:26:cc:43:42:18:bb:70:40:54:f7:
ae:25:07:1c:2d:17:ef:65:e1:11:ae:c8:1c:5b:8b:
6f:a9:04:52:0d:ef:8d:de:97:73:33:db:bf:a5:ef:
50:7a:de:d3:2f:2f:32:50:ca:1e:8e:25:55:77:fd:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:43:1A:53:B4:25:79:B8:7F:B7:62:75:83:21:29:64:F1:37:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb02bbe3-126a-326c-b493-d6ffc832128e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.53.0/24
IPv6:
2607:f5b5:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:0a:99:f2:7c:86:29:64:d4:e6:c0:60:cb:a3:dc:37:7b:2d:
24:f2:a3:be:d7:f7:2f:d1:67:53:87:75:e9:35:64:04:0e:37:
9a:14:43:84:09:e5:e2:10:d3:a7:da:da:d7:9f:05:07:84:54:
90:6e:0d:5c:1c:a6:3e:23:d6:de:88:03:4f:80:00:81:75:87:
5e:b1:c5:36:f2:24:7e:03:ef:45:03:fa:46:c6:ac:b3:f8:32:
b4:78:38:a1:45:d7:b1:62:31:ef:a5:96:c0:e7:17:89:1b:3e:
2d:7f:65:6a:50:f5:81:44:f5:f9:89:48:31:ca:6c:5d:83:3f:
b1:c2:46:f1:8d:02:9a:4d:e1:f3:13:39:07:ba:19:cc:cf:c5:
e1:0e:6e:82:ff:e8:8d:4a:7d:3c:c0:8c:b8:00:bd:7a:4e:86:
78:ac:c3:00:96:53:52:8a:a1:cb:7f:02:8c:fc:96:96:6e:0a:
78:24:20:60:31:e6:7b:d8:b4:a2:77:d4:63:34:e3:c0:4d:04:
c9:85:4e:8e:96:22:49:09:34:c7:e8:bc:2b:9e:25:eb:2b:05:
e5:37:83:ab:59:1a:e0:6c:ae:c6:d8:64:2c:9d:59:93:21:2a:
67:ca:41:32:a2:6e:90:b6:b7:70:2f:6f:f4:7a:92:e2:45:7b:
5b:e0:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:08:45 2025 by rpki-client