Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
File: acd658b8-634a-338a-a46b-a493a731bb64.roa (raw, json)
Hash identifier: 0p1tj6x9e9QXLVGltcpzBCM5VLB0UKrYWVEMTv/I9oI=
Subject key identifier: 9B:A8:1A:12:B1:55:D5:D8:AF:9B:64:7D:E3:80:65:C4:7E:1B:99:0C
Certificate issuer: /CN=47bffed6-be0f-48ff-a8fe-85a63c9b0e45
Certificate serial: 010D0C9F432858483FB80FA69913ED10FC3D0900
Authority key identifier: 3B:07:A5:30:1E:F5:42:9A:EC:2D:F9:6F:FC:46:66:97:CE:06:BD:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
Signing time: Wed 18 Dec 2024 15:53:40 +0000
ROA not before: Wed 18 Dec 2024 15:53:40 +0000
ROA not after: Tue 18 Mar 2025 14:53:40 +0000
asID: 398196
IP address blocks: 23.147.208.0/24 maxlen: 24
23.147.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:b8:0f:a6:99:13:ed:10:fc:3d:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bffed6-be0f-48ff-a8fe-85a63c9b0e45
Validity
Not Before: Dec 18 15:53:40 2024 GMT
Not After : Mar 18 14:53:40 2025 GMT
Subject: CN=39687b5a-4473-42d1-ad4a-03f4eeef3595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:70:d2:3e:df:95:f3:78:be:5b:1e:a3:92:fc:
1e:82:4d:1f:4d:be:ae:91:de:4a:aa:51:73:ca:af:
a9:35:d9:3f:cb:4b:1c:7e:bc:0e:58:0f:f0:23:b4:
f0:30:60:04:f2:c3:35:91:c4:b1:02:c2:8f:73:ef:
5f:6a:d2:13:ba:53:51:75:6d:cc:19:f3:81:1d:86:
d7:ad:aa:c1:70:ac:6a:05:02:31:38:d9:6c:f9:d0:
e4:33:e2:bd:54:3b:c2:94:96:8f:9d:8f:78:c1:c3:
b3:9b:bb:9d:25:b7:e7:29:81:1f:2c:f7:9b:62:09:
10:e6:89:de:93:05:7f:95:79:07:80:00:3b:68:67:
ab:0c:c5:ff:f8:ac:f9:4f:71:43:c9:39:59:37:5e:
69:8f:da:20:da:1f:77:f4:37:a3:cc:aa:2f:85:d7:
26:4e:b0:7c:72:10:ab:17:7a:f7:95:5c:8d:69:e2:
eb:80:be:9a:e4:68:8c:28:21:c8:c5:52:cd:b1:fe:
da:13:ba:99:bf:b0:26:c9:de:5e:ea:0c:2e:34:a1:
81:c3:b1:20:3e:86:92:63:9d:4c:d5:05:30:a6:ff:
a0:fa:8f:32:bb:8b:71:6f:8d:1d:bd:b0:8e:e8:6a:
06:74:48:89:38:43:78:6a:f5:16:f7:a5:ae:77:6f:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A8:1A:12:B1:55:D5:D8:AF:9B:64:7D:E3:80:65:C4:7E:1B:99:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.crl
X509v3 Authority Key Identifier:
keyid:3B:07:A5:30:1E:F5:42:9A:EC:2D:F9:6F:FC:46:66:97:CE:06:BD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:df:91:20:fa:f4:58:c6:58:f7:62:9c:a8:ad:8e:21:14:c6:
d5:1a:f5:10:36:c1:96:d6:1b:c3:36:bf:5a:27:60:97:df:a5:
bc:f9:c0:9f:3e:4e:b9:bd:48:4d:13:f3:f7:b2:1e:4d:f2:ae:
a3:c7:95:76:37:7f:66:b0:aa:1f:f7:9e:79:59:78:f5:ff:d4:
12:6b:17:95:87:47:5e:be:24:bd:14:fb:f1:18:c7:af:30:e1:
a4:b9:76:fb:5c:99:e0:3f:6d:40:b4:9c:94:30:b9:15:43:00:
2b:29:a3:47:c5:e0:f8:fe:2c:9a:a9:dc:4b:b6:70:f4:64:5e:
38:79:0d:da:74:d3:a9:93:84:97:6b:74:75:39:ce:fa:97:93:
2a:55:23:63:2c:a7:59:ff:c2:07:20:c0:d3:08:82:66:6a:48:
04:48:27:65:d8:5b:f6:bf:79:34:b9:1e:ad:f7:0b:a2:5c:03:
f6:5f:c2:c7:32:02:e8:95:db:81:f3:49:ba:82:a1:b4:c9:b9:
4e:e8:24:da:2c:eb:79:bd:b2:2f:33:2d:58:13:b3:e7:cb:e7:
f4:ed:e8:3a:61:c1:49:57:62:42:7a:f2:48:c7:d7:a3:c6:34:
8a:2f:3d:88:d6:4d:32:f3:91:b0:b4:d9:05:fa:a5:6d:59:48:
6e:6a:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:32:15 2025 by rpki-client