Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/0c656ad8-0bd3-3f2d-a488-05b6f1e1d8cb.roa
File: 0c656ad8-0bd3-3f2d-a488-05b6f1e1d8cb.roa (raw, json)
Hash identifier: ApxpRo/2K5boiPKba2CX+/5Dl+5RDi37M+VSaH6683M=
Subject key identifier: F6:40:09:B2:41:4E:6E:3C:09:98:19:99:4C:96:A7:B1:3F:BD:F8:27
Certificate issuer: /CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d
Certificate serial: 010D0C9F432858486C2B16863309D7EC7CF6D100
Authority key identifier: 26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/0c656ad8-0bd3-3f2d-a488-05b6f1e1d8cb.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 209104
IP address blocks: 23.154.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:16:86:33:09:d7:ec:7c:f6:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=b04a640b-5fbe-481c-a190-5f52e737106c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:69:45:8f:d2:1b:f1:79:83:ec:88:e6:02:0a:
ec:98:c0:91:fb:3f:32:b3:ea:eb:c4:90:5b:3f:77:
5f:78:8e:9e:cc:80:95:bc:87:60:fb:92:5b:d4:90:
ab:44:06:04:c5:df:e0:c7:da:ae:96:1f:ca:4f:07:
a7:46:26:46:8f:0f:d5:78:60:c4:dc:76:60:c4:0e:
a3:a3:aa:3f:52:43:6d:71:d7:c9:8f:e5:91:f9:5e:
69:ab:27:18:b2:0e:a1:6e:ca:b8:41:d3:c5:8f:8d:
52:0b:7a:4b:a5:e0:67:d6:bb:bb:d6:0e:53:ef:51:
32:e4:0e:61:d0:d9:42:75:96:67:9f:c8:f4:c8:47:
5b:bb:30:7c:20:2d:18:c2:ab:9b:25:d2:db:33:ea:
7e:2c:29:47:71:9a:b7:92:42:db:7e:ad:c0:82:30:
4a:fe:6a:ce:60:f1:d2:e9:7b:c5:64:14:f1:7c:96:
b6:a1:df:3f:1e:c2:9f:74:79:aa:0b:db:a6:ee:cd:
11:ab:35:9c:33:18:ca:70:5e:c8:42:2e:63:04:3d:
ce:41:60:9e:77:96:1f:8e:06:44:45:8d:c4:b3:71:
74:bc:18:5f:26:b5:bd:e4:1b:6a:e8:ec:3e:43:31:
fa:12:5b:0b:a1:3e:ea:c1:78:0c:53:03:ce:15:d0:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:40:09:B2:41:4E:6E:3C:09:98:19:99:4C:96:A7:B1:3F:BD:F8:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/0c656ad8-0bd3-3f2d-a488-05b6f1e1d8cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl
X509v3 Authority Key Identifier:
keyid:26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:ab:0e:44:8c:38:f3:44:c8:6e:a3:0c:c6:6d:33:63:da:9a:
da:8f:bc:04:c7:42:4b:7f:17:e6:73:32:c4:cc:9b:28:78:8c:
1c:d4:78:e0:57:83:0c:df:0f:06:41:98:05:e8:3a:a6:3c:83:
93:2b:e4:07:5c:0c:6a:b0:0e:f9:9e:24:83:fb:8c:7e:fd:81:
c5:4e:52:c2:f4:2a:2d:d5:06:09:c8:b5:e5:f2:f9:6c:1c:38:
ee:a5:39:80:b9:95:56:b7:42:05:3c:74:05:cc:7c:bf:ad:1c:
d3:2d:66:bc:93:ca:77:5c:38:7c:3f:80:3c:6d:6d:25:ac:16:
1f:0e:68:9f:cb:01:2c:36:f0:fc:12:39:af:1c:80:0c:94:c5:
95:18:20:7a:32:15:4f:50:81:7e:72:66:20:03:6c:64:ff:1d:
ed:50:61:2a:1a:f8:92:0b:b5:e6:67:f9:47:48:23:e0:59:ae:
b4:6d:f2:d0:57:23:7f:f1:1e:b5:26:41:1f:e6:1e:b2:8c:28:
ac:42:3a:93:44:94:4b:6c:ff:f9:64:e6:64:36:68:82:cb:3b:
d4:1b:da:87:78:0a:96:82:9e:ab:4e:a0:47:8f:d0:90:f7:39:
72:31:4b:c8:41:47:08:1e:86:3d:8b:61:01:30:05:5d:c2:5a:
ad:9f:2d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:11:59 2025 by rpki-client