Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d90d31b8-8155-3610-8198-5dd6d5876243.roa
File: d90d31b8-8155-3610-8198-5dd6d5876243.roa (raw, json)
Hash identifier: xAZv/HhRmIW8kFDJYdLmKi0IK0i9eCcsJIddWjvv1gQ=
Subject key identifier: 4C:4D:48:83:AF:DE:79:AE:1B:BE:C7:77:42:53:4A:E4:7A:38:FE:5C
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584840E5513D039125E0A6211100
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d90d31b8-8155-3610-8198-5dd6d5876243.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 1239
IP address blocks: 23.237.28.0/23 maxlen: 23
2001:49f0:d076::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e5:51:3d:03:91:25:e0:a6:21:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=7f020d5e-ea0c-43fe-944d-448d9cc692ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:c5:9b:72:77:2b:4f:87:d4:d1:b7:b9:95:
47:8f:29:77:70:d4:a1:f4:30:07:4f:d7:eb:05:70:
ff:e0:98:95:3f:dd:10:c6:67:8a:af:33:10:62:9f:
5a:10:e4:04:b6:a8:0e:75:ae:3f:6a:91:25:b8:67:
e6:fd:2c:85:28:d0:2d:bd:91:7f:a3:ee:b8:c9:18:
4f:35:21:ff:37:8c:32:07:eb:44:fb:26:e6:fd:f9:
c7:55:df:57:c7:18:d0:c8:59:d5:07:00:b0:b4:eb:
c4:f8:ce:13:cd:e1:23:e9:38:15:11:c8:72:0f:22:
6e:48:a9:e2:7b:e3:34:07:d8:3a:43:43:b4:58:86:
f3:a7:5f:e8:b8:e8:bd:39:e7:d9:8b:9e:78:7f:de:
69:4f:df:62:70:c0:02:0d:79:b5:8f:3e:99:4d:3c:
08:e4:6f:6d:f5:82:cf:7c:e7:91:2a:93:bd:51:d0:
f1:8e:56:03:08:45:0e:6e:c5:56:a2:aa:e9:99:b1:
9a:7d:5c:12:8b:59:69:c8:94:70:1d:df:4e:2c:a2:
ee:d7:6d:a4:cc:39:dc:41:29:b4:4e:88:46:e4:e9:
6f:d9:f0:20:26:30:77:c6:7f:33:15:db:1f:09:08:
28:f4:ef:25:f6:2d:04:3f:22:69:fa:b1:5a:fb:14:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4D:48:83:AF:DE:79:AE:1B:BE:C7:77:42:53:4A:E4:7A:38:FE:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d90d31b8-8155-3610-8198-5dd6d5876243.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.28.0/23
IPv6:
2001:49f0:d076::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:5a:7f:72:4c:39:c4:0f:b1:b9:a4:e2:da:68:f1:5d:bb:e9:
55:c1:71:73:68:58:fe:18:5c:8f:75:b9:2f:3b:e0:04:58:b6:
ce:a4:d8:3d:54:4c:e7:7c:e1:f5:f1:f5:91:09:02:09:3b:f3:
ae:4a:dc:61:52:56:1e:c0:53:20:7f:8f:e5:03:bc:18:71:e4:
ec:67:70:d8:a8:a4:e3:5c:cb:5c:cc:30:dc:ad:e3:f7:7b:a6:
6b:18:7c:b3:be:d9:d8:8a:17:d3:1b:a6:4b:3f:8f:ba:b8:9d:
f9:5b:40:33:85:de:20:dc:a8:f5:b5:02:5b:7e:8c:9b:b2:56:
49:6f:fe:6b:de:82:4b:7f:53:68:c2:71:18:2d:54:1f:25:cc:
b1:45:db:ee:35:11:57:94:48:a6:3b:3c:8c:fe:15:93:19:31:
5f:82:99:81:7b:69:a9:82:61:5d:70:26:63:2b:cb:64:aa:fe:
ad:f7:de:73:cd:d9:1a:58:1c:ea:d9:a8:5e:80:0a:14:ac:b7:
20:ca:02:64:f7:fe:42:be:09:dc:d0:cc:5b:20:fe:58:82:4b:
37:66:56:f2:42:7d:fa:c2:67:62:dc:25:09:f9:2d:00:30:d4:
59:f0:0b:72:5d:6e:5b:02:c2:97:38:59:48:46:94:43:5f:bc:
27:4d:89:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:18 2025 by rpki-client