Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa
File: d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa (raw, json)
Hash identifier: khaC3CCScA1nS285P9/2zjh0EIxIPdwFxSoVFbJzsd0=
Subject key identifier: AC:4B:40:02:4C:F4:2B:1D:EF:04:42:A5:98:0B:DC:B1:13:69:46:3C
Certificate issuer: /CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Certificate serial: 010D0C9F4328584832F0323CCD20F59575D51620
Authority key identifier: B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 396982
IP address blocks: 43.231.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:32:3c:cd:20:f5:95:75:d5:16:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd08292-8dfd-43b8-a08c-22cb31ed200f
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=bfa116a2-a0c0-4a0d-a413-ba2865c37eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:f5:78:1b:2d:28:2a:66:4f:c7:2a:7e:fc:
ed:0e:98:1c:d4:42:57:d9:cc:4f:f1:61:1e:02:e2:
27:29:f3:55:a9:df:85:59:8b:c7:46:3b:23:78:97:
1e:c2:41:a2:68:a1:46:b5:ca:40:46:a0:fa:85:22:
83:15:06:32:d3:a9:d6:e8:b6:8d:5b:52:e4:65:fc:
d9:fb:56:62:0b:0f:33:39:7d:cc:94:f3:c4:01:15:
1d:fc:02:a7:c2:55:a5:cb:5c:58:51:cc:b2:8f:32:
96:59:e7:ce:36:33:66:9c:27:7d:02:9f:d4:d0:ba:
b4:24:d9:92:0a:7e:cf:97:28:8f:e9:b6:d2:d3:04:
4f:1d:b1:62:c5:ea:1b:25:a0:69:9f:d1:d7:5f:68:
9c:4d:1b:8b:ee:6f:8e:47:0d:26:f7:bd:ba:76:02:
d1:80:5f:1b:ef:e1:c5:3b:35:c1:3a:82:a7:d0:17:
1a:fe:28:00:b4:3c:12:3c:ea:f2:ce:0b:22:d4:7a:
6a:d4:b7:40:4f:6c:e6:18:45:4e:e5:5b:6d:62:4b:
a4:e0:ee:59:69:bf:5c:51:e5:03:4c:d9:2b:39:83:
af:fc:1d:cc:d6:28:6b:02:93:d6:06:51:85:f8:05:
40:38:1a:82:b0:93:0b:41:91:bf:d8:97:8e:67:68:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4B:40:02:4C:F4:2B:1D:EF:04:42:A5:98:0B:DC:B1:13:69:46:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/d21ac35b-3fd6-30d3-8ece-f5c2092ae957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f/6dd08292-8dfd-43b8-a08c-22cb31ed200f.crl
X509v3 Authority Key Identifier:
keyid:B0:3B:BE:20:D1:AE:CC:FB:57:D1:3D:62:EA:4C:99:DA:41:D1:EB:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6dd08292-8dfd-43b8-a08c-22cb31ed200f.cer
sbgp-ipAddrBlock: critical
IPv4:
43.231.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:58:e5:c5:43:d6:e4:fc:64:7d:07:45:cf:74:0e:0f:f7:04:
81:41:14:6c:56:dc:dd:22:23:10:f1:fe:d0:a7:9e:c2:22:bc:
ca:e7:db:7d:d0:7b:7c:c5:3f:ef:ac:49:20:8b:3d:19:83:f9:
80:8b:2b:d7:c2:9d:1f:ae:60:0f:0a:1d:7d:ae:e9:e0:4a:9d:
13:ce:65:8d:4e:9b:e3:f7:5e:55:83:52:f3:bc:b7:8c:f4:90:
d2:da:7b:53:ae:69:eb:16:18:14:fc:38:99:e8:97:d5:6b:7e:
15:6a:2d:c6:e2:fa:89:be:b8:31:bc:c8:45:fa:29:03:6e:b9:
07:36:58:77:b8:41:84:71:ff:aa:44:01:76:96:cf:1e:0d:e4:
6a:b9:ca:42:b9:96:c8:24:95:96:87:01:e8:f8:89:56:41:7c:
20:57:36:d7:8a:b6:f2:af:10:b7:4e:74:36:d9:be:7e:e1:5c:
a7:be:5a:eb:bd:50:d1:b6:82:e6:d0:8c:79:43:fa:84:be:ee:
fb:30:d2:08:68:4d:73:80:b5:cf:51:b0:49:ca:ab:9b:cd:3c:
57:de:9d:2a:c0:b9:49:a6:36:fb:0c:2d:30:67:04:70:30:d1:
91:ae:cd:3b:3a:18:6d:ed:22:b7:7b:43:e7:e2:06:72:0c:25:
1d:24:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:27 2025 by rpki-client