Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa
File: d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa (raw, json)
Hash identifier: JHpBLlBVbm6Mw67iao3AECpEXBT2wRSElxlnb/2gSOY=
Subject key identifier: 8D:18:EF:F7:F6:4B:E3:ED:3D:99:09:3B:32:06:F4:60:8D:D7:99:C3
Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Certificate serial: 010D0C9F4328584882809F4A4CDAE119406B0A80
Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 31799
IP address blocks: 23.138.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9f:4a:4c:da:e1:19:40:6b:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=bfcca035-244f-42a7-8897-bbfbe3f866c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:65:2c:2d:24:10:15:ec:ba:30:06:6c:11:
33:ae:e2:ef:0d:fc:14:87:9d:05:80:00:ac:90:34:
ed:d9:51:bd:74:fc:71:83:c1:3c:40:47:60:3f:41:
98:a8:b1:2b:26:6f:38:63:27:b6:f5:0b:b8:69:f7:
bc:d6:5f:f4:c6:cb:1e:c5:06:1e:46:0e:62:2a:17:
3c:a1:bc:87:11:c2:41:64:5f:ed:8a:69:c3:f5:c7:
d1:06:9b:d7:b9:32:ce:a3:da:57:c1:0c:77:ec:b6:
10:a3:28:96:40:f1:5e:ce:a4:e6:e7:25:fb:ae:ed:
2d:57:40:2a:5a:a0:af:80:1e:c5:57:d0:65:48:45:
cc:6e:a7:66:19:09:36:df:a8:96:ed:28:8b:70:a6:
c2:44:dc:b0:6c:1d:b5:c9:62:36:92:bb:1a:45:d5:
5e:e4:f7:10:03:12:6d:b9:58:b3:72:fd:d4:14:5c:
01:f3:00:4c:b1:27:a2:a4:bd:dd:e3:df:ac:44:6b:
3f:f1:4f:88:1f:7a:4e:f6:64:3b:8e:1f:fe:0b:11:
5b:58:36:67:4e:af:3f:24:56:85:83:ff:bd:9f:3c:
03:03:cd:50:35:60:b6:7e:95:2e:b1:63:82:ba:1d:
17:f9:d2:09:be:3d:8c:fc:98:4c:a5:bb:a8:81:f4:
d5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:18:EF:F7:F6:4B:E3:ED:3D:99:09:3B:32:06:F4:60:8D:D7:99:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl
X509v3 Authority Key Identifier:
keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:94:85:3f:9d:11:aa:7d:05:74:61:f4:56:b7:4e:a0:a4:73:
e5:03:34:24:1c:0f:51:3b:2f:ac:d8:60:92:b0:dd:30:66:17:
f4:94:ad:9e:18:0c:fb:6d:34:ab:c2:5e:f8:5f:8f:20:85:55:
5d:05:4b:dc:a3:76:d5:18:f0:8d:37:0e:34:b4:5a:6e:88:2b:
d7:07:19:6d:45:d7:f4:a3:08:bd:00:20:5b:b5:28:bc:f9:4e:
28:62:f8:ab:90:d5:ce:b6:5d:c8:e4:51:2f:26:50:85:16:73:
2b:57:3d:18:90:b2:71:09:8a:e1:47:8b:0a:b8:90:d0:d2:70:
95:31:41:fb:0d:e0:2e:95:d5:14:b5:f9:24:b1:67:37:d3:31:
af:fb:71:62:25:11:79:66:fa:f4:76:95:b7:b9:f5:eb:35:35:
5b:5b:af:58:da:0a:a9:5b:7c:72:9e:59:e0:6a:7d:3c:fc:56:
b8:ed:52:bd:c2:f0:bd:0f:6d:85:0a:7e:58:99:17:1b:fe:9e:
ba:82:ba:1a:2c:88:4c:1f:b9:12:26:bc:7e:59:96:56:50:e8:
08:20:5d:13:a7:6f:0a:ac:56:ba:78:80:08:cd:c0:5a:2a:b3:
ba:f2:8c:83:62:cd:dd:bc:dc:43:e0:f0:f5:75:19:5e:e8:30:
68:d9:61:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:35:47 2025 by rpki-client