Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa
File: a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa (raw, json)
Hash identifier: Zym2EwFSIleWwgTGJejPiDlLB3O4zAR9g4s0V1iBU3A=
Subject key identifier: FF:75:47:99:B3:5C:16:4F:BC:F3:5A:C4:C6:1D:34:D2:38:26:F0:05
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325DD5FF3261A292B0ED900
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 23.235.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:dd:5f:f3:26:1a:29:2b:0e:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=7043a40b-41d4-46f9-8699-1b857c47ea1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:9e:31:95:8b:d2:54:a6:78:c0:83:61:cd:
25:bc:a2:bf:d5:ec:7e:ef:c5:f1:52:eb:14:8d:07:
15:e4:c9:4f:f2:58:a1:32:44:1c:4b:14:90:38:93:
5d:fd:b8:6e:49:31:5d:e8:fe:53:73:0a:4f:c5:08:
c1:ce:8b:37:d4:d9:06:b1:9c:36:fb:89:69:80:27:
36:6c:11:e7:b5:fa:fa:3d:d4:64:4c:1d:d9:0c:d9:
00:e1:fe:00:a7:f3:e0:57:80:9c:69:e8:df:31:34:
00:a5:a0:af:03:80:f5:a4:d1:f2:8b:bf:a8:63:2e:
fb:63:53:13:d6:11:cb:f5:8a:9e:08:39:c4:68:00:
31:f9:e6:c5:b6:99:2c:af:ec:7c:15:e3:4b:35:36:
4e:3c:4e:5f:23:0f:ce:e1:ca:e7:3e:6f:b2:4c:91:
8c:69:36:85:47:cd:7c:7a:72:38:60:0c:85:94:69:
b5:99:e7:55:fe:a8:b2:80:77:49:38:28:a6:f1:9c:
2e:e4:f4:f2:31:6c:74:61:e8:bd:58:de:36:44:83:
49:59:89:05:06:32:5c:14:c5:6c:75:9f:ea:c2:00:
20:0a:3f:0c:f5:d0:11:20:35:74:58:d1:c2:cc:90:
f7:43:e9:f1:f7:e0:63:bf:89:37:e3:2c:c0:2b:8d:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:75:47:99:B3:5C:16:4F:BC:F3:5A:C4:C6:1D:34:D2:38:26:F0:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:4f:4e:86:6f:02:75:11:cf:1d:c8:b5:ef:0e:0f:f4:08:71:
bc:43:d6:e0:cc:07:75:75:7b:62:f7:f4:87:a8:2c:ec:99:a9:
25:2e:2b:df:66:83:5b:91:ed:ec:04:c8:fb:06:fa:02:af:20:
df:03:db:b7:32:12:14:5e:3b:2b:c3:5c:6f:67:6a:af:f8:49:
8c:f5:ed:d5:15:10:ea:57:3d:10:b0:63:7c:d0:e1:07:be:9f:
2e:18:bf:01:0e:cd:75:37:e0:4a:4e:ff:8f:6f:f7:a9:9f:f3:
92:7b:03:f2:af:4c:e8:59:d7:63:18:eb:56:6e:e0:65:36:0d:
7f:80:5a:9a:f1:9a:14:45:0f:f1:e9:61:5c:85:bf:79:b5:cb:
42:b7:7d:dc:f8:f7:13:05:03:19:c8:c1:2a:13:5b:81:42:81:
1d:c8:05:1b:5d:6e:4f:09:62:df:31:96:d3:5b:36:26:32:72:
6d:b3:ab:b7:37:2a:7d:9b:d6:3a:dd:51:d6:26:f2:5a:5e:a8:
19:74:15:86:86:32:69:55:48:28:d5:2a:4a:3d:e1:bd:3d:9f:
c9:1e:31:41:70:0f:8b:7a:71:91:1a:56:cb:fa:be:01:1b:7b:
57:2e:69:46:57:f2:e1:6b:33:09:e2:df:d3:36:22:4e:04:98:
8c:f3:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:57:53 2025 by rpki-client