Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa
File: 2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa (raw, json)
Hash identifier: F4V21YW5UeWjXBjyG8a0w0N0MYNl2jMQF6KephXsUMc=
Subject key identifier: 1A:8B:F8:EB:F8:00:4C:F7:BF:B6:48:A8:D5:48:5E:06:D3:66:F9:79
Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b
Certificate serial: 010D0C9F432858486C2B16767835057ED6E71D80
Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 208504
IP address blocks: 23.154.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:16:76:78:35:05:7e:d6:e7:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=2a784c70-399f-4396-85ed-1dfea1db147c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:d8:b8:a2:48:44:f8:b9:04:37:07:c7:ab:
61:f2:bc:28:e3:53:85:90:11:97:e8:f4:58:01:00:
86:63:ae:76:ac:64:d4:71:2f:9c:6d:49:fd:bc:20:
ca:b4:d8:2b:d5:14:86:e4:0f:c5:74:27:7d:de:cd:
ec:bb:ba:4c:61:54:7a:39:09:f8:c7:b5:83:8f:87:
63:48:7c:a5:3c:fc:de:ce:b4:0e:4f:7a:46:24:19:
ae:c3:9d:4d:fc:4a:02:87:b6:c2:3d:d5:5d:f6:5f:
94:59:6e:0d:ed:33:f5:77:07:7f:41:64:b7:1b:1d:
3a:74:7c:5c:4d:0f:66:c2:7a:00:b6:cc:fd:33:5d:
e0:97:37:b9:2a:b3:53:ce:1b:bd:a8:f4:10:89:d3:
f5:22:73:1e:be:bf:95:50:9f:00:5d:25:0e:00:93:
d9:7b:9d:a3:a7:8e:13:f0:74:c1:1b:03:b3:4d:10:
47:91:40:44:d6:19:c8:8f:c7:2a:f2:2b:2f:1d:36:
9e:9e:8c:ac:48:35:e5:ad:fd:30:a3:21:f2:1b:e1:
56:dd:9c:6e:84:50:f7:b7:7e:d7:c5:71:45:d0:30:
a1:5d:bc:a2:93:f0:8e:00:84:fb:b1:3d:25:1d:f0:
74:06:8a:b9:d2:93:44:2d:6a:0a:1b:02:44:4a:e3:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8B:F8:EB:F8:00:4C:F7:BF:B6:48:A8:D5:48:5E:06:D3:66:F9:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl
X509v3 Authority Key Identifier:
keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:36:2a:a6:fa:4e:34:4f:c2:be:ff:ca:c5:4b:1f:4b:d6:45:
45:4b:b5:c2:ca:e0:01:05:4a:39:6b:58:cd:64:fd:0a:4d:47:
40:dd:6b:98:cc:67:31:b3:89:be:6d:d1:02:1e:a5:b2:b5:97:
93:7c:7b:7f:34:a0:e0:c9:09:7b:71:83:ed:c2:dc:dd:45:3d:
11:64:11:a2:b0:ee:dc:45:15:01:50:0e:1d:db:fb:01:23:ec:
56:01:60:99:7a:2a:b1:97:8e:be:04:e8:fc:94:6c:af:50:ca:
e0:bb:c6:18:66:68:ca:76:8c:a5:79:1e:34:b3:5f:35:07:89:
41:10:23:65:da:f9:08:04:ef:9d:0f:5e:a9:71:38:25:5d:f2:
3c:d3:7c:49:49:25:1b:81:fa:da:08:f9:29:f0:40:cf:57:8d:
ee:28:e1:55:02:7d:86:b9:f8:07:20:2d:27:dd:5e:cf:6d:e7:
f7:cd:4f:a1:45:27:90:13:ee:58:14:e2:74:0b:ea:15:5b:34:
49:c0:26:ab:84:e0:c5:41:ef:9d:39:60:40:ff:0f:e1:2d:47:
f8:40:47:04:11:15:37:b7:5e:d0:3f:2e:98:ad:80:8e:bf:30:
55:a0:00:e8:97:19:13:cd:ec:b4:d7:d2:12:2d:b8:5f:e8:86:
98:e1:6c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:04 2025 by rpki-client