Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/f9085167-0ccd-3972-a0fe-92f04f3c2385.roa
File: f9085167-0ccd-3972-a0fe-92f04f3c2385.roa (raw, json)
Hash identifier: 47x9zpdTp5Q+paN6tJbW9MVLt4Nb0wM5vzfKaRn3/P0=
Subject key identifier: C9:73:86:38:21:CF:A5:DA:2D:03:D5:32:94:3A:CA:2E:43:49:84:0D
Certificate issuer: /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial: 010D0C9F43285848494577C1F5DC50E6AC74A580
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/f9085167-0ccd-3972-a0fe-92f04f3c2385.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 396982
IP address blocks: 23.227.43.0/24 maxlen: 24
23.227.44.0/24 maxlen: 24
23.227.45.0/24 maxlen: 24
23.227.46.0/24 maxlen: 24
23.227.47.0/24 maxlen: 24
23.227.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:77:c1:f5:dc:50:e6:ac:74:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=962dc70b-bc34-4d3d-b95d-5b4f6f85a220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:49:c4:f8:6b:a8:dd:57:eb:54:35:33:92:
f8:e8:9d:51:ed:5f:05:5e:94:d4:4a:e3:91:66:40:
d3:2b:ff:5c:c1:13:0b:a1:9d:7f:b2:51:4c:af:86:
de:b3:94:7b:c4:70:c3:09:88:55:21:6b:f9:ca:9d:
b7:9d:b2:60:53:8e:75:a9:e0:e8:f9:fd:05:c5:db:
e4:82:34:71:78:3b:0e:94:96:1f:09:60:1a:08:c9:
14:7a:1f:cf:c1:d7:21:3d:4d:3f:3d:21:5a:19:43:
86:4a:e2:1a:14:11:bf:7d:db:58:ef:a8:b9:02:6b:
e2:28:79:29:17:2c:4c:7a:c8:3b:72:76:fd:21:a6:
78:32:44:4a:5a:5c:4f:38:43:67:0a:c4:32:fe:8d:
b2:96:ca:30:6a:ed:31:a5:ac:73:10:da:35:bf:8e:
45:4b:33:0a:61:4b:1a:0c:7c:2e:8a:95:50:a0:9b:
85:14:97:37:c9:e8:3b:5a:3d:33:95:12:23:67:ca:
af:3e:ea:5a:1f:d9:ac:ab:d7:ab:b6:06:67:23:6a:
d4:ad:f5:8d:83:9d:eb:66:4e:ce:48:28:0e:c0:ab:
76:d2:5d:da:00:48:66:60:12:6b:45:c5:82:4c:ed:
c7:4a:fe:4a:ac:11:7c:e8:a4:10:c8:d4:f3:4e:cc:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:73:86:38:21:CF:A5:DA:2D:03:D5:32:94:3A:CA:2E:43:49:84:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/f9085167-0ccd-3972-a0fe-92f04f3c2385.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
X509v3 Authority Key Identifier:
keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.43.0-23.227.48.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:a9:70:08:10:10:8d:c6:fd:f1:3f:bd:ad:05:95:fd:1a:ea:
16:29:d2:38:71:39:de:75:c4:ff:3b:12:f2:7a:f1:45:b9:34:
c8:ed:e7:e1:43:0e:5c:8d:f2:63:b3:cb:b0:ba:c7:62:cb:90:
41:fb:af:db:27:9d:91:18:91:84:36:bc:e7:84:d3:7b:db:92:
be:b3:c7:9c:91:08:41:4d:a6:cd:a9:a3:e6:f7:1e:db:b2:ae:
ca:24:bd:b1:b9:d8:11:2f:e8:7d:94:e3:c1:82:a0:9f:fa:1b:
dd:22:35:49:59:82:02:19:dd:aa:2c:e4:53:99:3c:82:c3:7a:
c7:62:74:40:ae:d7:68:15:02:ae:4b:f6:2e:74:60:6d:c5:42:
62:ec:7b:f6:8c:8f:00:87:d3:e8:ec:b2:b0:cf:ec:68:f1:48:
d1:cb:9a:be:fc:cf:52:11:8b:b6:7d:00:f9:e8:a2:c8:11:91:
f0:8e:a2:ed:5f:49:78:0b:39:ec:3e:ea:dd:9e:84:08:d7:80:
22:12:ef:80:19:2c:07:de:42:d1:fd:ec:cf:87:d6:da:32:83:
c1:65:79:0b:b1:db:76:a2:93:f1:df:95:cf:dd:87:52:53:08:
d5:e8:39:f1:34:a6:bb:93:a5:48:50:61:e4:33:f9:63:45:54:
e1:58:7f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:31 2025 by rpki-client