Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa
File: 87eb7ad8-367d-3484-866c-a694fd0c58a3.roa (raw, json)
Hash identifier: kFZO69odCHyVfZRlt3QMS/54gnNmAydAjOBA5YXcFR8=
Subject key identifier: 91:C2:11:48:B7:2C:8D:C0:1F:94:8B:F7:A3:D0:39:16:9D:5D:A4:5A
Certificate issuer: /CN=99b49bb6-2782-4a82-829c-d4b94eb646f1
Certificate serial: 010D0C9F432858486D9051ACD1B86BC35840E300
Authority key identifier: D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 212524
IP address blocks: 23.154.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:51:ac:d1:b8:6b:c3:58:40:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b49bb6-2782-4a82-829c-d4b94eb646f1
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=390354da-4edf-407c-a36f-0dca7ca2652d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:ec:2d:e7:4c:e3:52:ce:ce:46:ef:d3:7d:
f5:44:64:71:56:5b:49:8f:17:9f:31:0e:71:63:b7:
c0:11:27:fc:ab:41:24:cd:4f:ae:50:cd:25:3f:b9:
55:f5:af:60:07:f7:b7:22:af:07:5d:23:be:5b:5a:
1e:05:16:83:7b:b8:e7:f5:ef:50:7b:cb:b5:84:05:
5d:46:72:96:37:61:e5:6a:08:32:ad:63:78:aa:52:
7a:41:0c:0a:f3:d2:1d:46:71:f3:14:db:92:0d:6e:
7f:36:83:b3:56:78:a0:50:dd:e0:d2:24:d9:7b:2f:
cd:11:57:03:3a:da:67:9f:44:53:f3:31:5d:7f:e0:
ad:43:39:ab:86:40:6d:1b:32:13:30:00:01:39:ce:
1b:6e:52:c8:63:9f:be:cc:8e:81:fb:64:7e:7e:c5:
9f:0b:d8:06:40:82:7f:d8:aa:45:08:68:0e:89:3b:
25:ad:9f:73:93:ab:c6:a3:06:7d:a3:2f:14:81:cb:
ea:9f:cc:32:fb:c6:22:ea:c1:07:07:4a:77:ac:f7:
f6:9b:b4:ad:b4:d0:be:5b:99:d0:37:b8:91:dd:7a:
72:50:be:62:1a:81:5f:4a:78:1c:7f:59:09:12:28:
b8:c0:38:31:97:f9:83:40:e2:7f:98:e8:5c:81:0a:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C2:11:48:B7:2C:8D:C0:1F:94:8B:F7:A3:D0:39:16:9D:5D:A4:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl
X509v3 Authority Key Identifier:
keyid:D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:53:6d:50:90:61:4a:7a:f8:e9:11:aa:4b:b6:1a:14:d4:39:
a9:49:14:d0:2f:f9:4a:b8:2a:77:f0:bd:2a:17:c7:30:b9:5a:
2c:e8:dd:b8:8b:3e:ce:07:70:26:fc:82:ac:44:65:2c:18:a4:
9c:44:f2:bf:13:e2:c1:9c:be:44:86:4b:f7:3c:85:2f:bd:e2:
ca:07:92:ce:77:6d:bd:b7:cc:04:8e:b8:f2:fe:e2:4f:37:59:
0c:c7:30:7b:f5:3b:a5:d0:7b:40:45:54:43:13:a5:ac:b9:67:
bf:f8:3d:c0:6b:10:4a:86:8c:96:49:de:54:44:37:7f:fd:66:
20:c6:09:6a:b8:19:01:49:54:5c:f3:81:58:db:cd:40:cd:cf:
88:5f:ed:17:66:c3:4c:ca:83:0f:af:3f:59:ca:69:d9:98:a1:
bf:ae:5b:87:87:63:77:1f:b3:b8:61:28:0d:ca:14:26:cd:25:
e4:8e:47:6e:ed:76:d8:90:ab:a5:0d:ee:18:09:3c:30:65:1e:
c5:1b:43:f9:80:a5:26:ad:00:1b:79:31:43:81:82:b6:9b:6c:
8a:64:57:a1:67:32:9d:87:91:b8:35:f6:f1:0c:24:c2:08:b0:
fb:35:a2:4b:14:11:ad:97:6f:a9:49:06:ad:74:54:c9:15:00:
0f:e0:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:50:42 2025 by rpki-client