Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa
File: 2a117ee7-322f-3fb9-aaae-1c614b96e006.roa (raw, json)
Hash identifier: lFnR3OTRkRvUyV+Cwk0uyQ16qGbX0Mu1xa0hXxrYC/o=
Subject key identifier: 39:D7:CF:9B:A3:9E:E4:42:DA:1F:8E:24:46:DC:CB:0F:8E:F2:D0:75
Certificate issuer: /CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Certificate serial: 010D0C9F4328584823954F0459767F19DB067A40
Authority key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 63334
IP address blocks: 23.143.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:4f:04:59:76:7f:19:db:06:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=31c82ab1-1ff5-4328-b55e-22c76c8fbff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fd:d5:96:e0:20:f8:06:0f:5d:bf:e7:29:b3:
e0:b6:db:13:42:11:80:2f:cb:ef:a7:bd:9a:bd:3c:
1d:dc:01:b6:57:cc:ad:e0:02:63:64:5a:dd:40:7c:
a5:d3:dc:ae:88:96:56:5d:1f:32:e5:c9:ee:5a:54:
55:9e:a0:e9:fe:30:89:05:07:d6:21:02:2e:1b:1e:
f2:fc:2c:af:be:ad:a9:b3:52:1a:0e:7e:1e:38:d2:
bd:32:a6:3c:cc:98:0d:25:9d:bd:84:ba:38:95:8f:
4f:2a:46:af:c8:b0:46:ae:8a:da:c2:26:73:81:54:
0b:de:fb:98:36:63:0f:d4:03:f0:5e:2c:a6:a5:c8:
cc:36:5b:3d:6c:28:ba:03:14:ba:22:87:23:b5:22:
8d:45:e4:bb:a8:f0:f1:1a:93:71:9b:57:4f:82:69:
88:42:2d:95:be:58:9f:a4:47:24:7f:6d:75:5f:cf:
c2:14:30:57:59:51:97:96:2c:ba:d3:91:d7:11:29:
0f:76:77:87:b6:42:0a:d0:ad:99:fb:6c:80:75:b2:
39:77:ae:15:17:b5:07:8e:13:48:b7:7f:36:6a:e4:
c3:f6:c3:e3:a9:8a:29:d5:d2:56:ee:d8:8a:52:22:
8d:62:72:a6:ae:28:4f:eb:0e:af:13:96:b8:1a:29:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:CF:9B:A3:9E:E4:42:DA:1F:8E:24:46:DC:CB:0F:8E:F2:D0:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/2a117ee7-322f-3fb9-aaae-1c614b96e006.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.crl
X509v3 Authority Key Identifier:
keyid:16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:f3:8c:99:bc:0b:c2:1c:9a:a5:c7:fc:0b:43:2f:fe:62:e1:
ba:64:3e:88:3a:1f:34:9c:a7:fd:ea:69:4b:72:c0:01:65:21:
be:91:b5:52:03:a1:70:ed:7c:ca:6c:83:d8:ae:f9:f8:44:a4:
18:42:23:b5:f2:f4:34:06:13:d6:92:2c:07:f3:c8:d2:0a:9c:
bc:52:3f:64:97:a2:5b:9c:76:6d:b1:17:9c:d5:61:fd:27:4c:
7b:fe:96:98:07:38:24:59:bc:fb:d7:05:72:70:f9:80:c4:36:
b8:58:cc:1d:aa:17:e5:38:55:fc:6c:30:f2:9d:12:02:11:a4:
d7:51:ea:fb:70:47:fc:1c:fd:fa:a1:a0:81:b4:ed:60:51:c2:
4e:d8:a4:c0:3f:71:69:ba:c2:74:d4:4d:cb:c6:c4:dd:93:f9:
3f:a8:3c:45:50:5b:5a:70:a0:cc:08:bc:ec:3a:e3:da:e9:43:
a5:01:b8:b0:53:36:27:7d:e5:e5:02:c3:3d:11:ea:bb:f5:97:
b0:0a:6a:33:05:bf:02:62:fb:d0:e5:40:00:ab:60:48:e0:15:
9e:f7:26:60:ea:b1:d5:35:53:d6:51:e9:4e:28:68:44:37:9d:
15:3b:5b:d8:ae:44:55:bf:b1:2a:b9:50:c5:ff:48:10:9f:d9:
84:df:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:42 2025 by rpki-client