Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/15858c75-83f7-3898-8aee-64b9f6b5a1e3.roa
File: 15858c75-83f7-3898-8aee-64b9f6b5a1e3.roa (raw, json)
Hash identifier: wecFAnARm1UlpKUjdV6aiDMHZw4tmubXQHuOdIaSLTA=
Subject key identifier: 72:18:3D:EC:24:C6:16:BF:40:B5:BF:79:39:45:E5:4E:BB:37:02:4F
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F43285848F22BE5559F890063188E0900
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/15858c75-83f7-3898-8aee-64b9f6b5a1e3.roa
Signing time: Thu 20 Feb 2025 14:00:52 +0000
ROA not before: Thu 20 Feb 2025 14:00:52 +0000
ROA not after: Wed 21 May 2025 13:00:52 +0000
asID: 26959
IP address blocks: 8.44.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f2:2b:e5:55:9f:89:00:63:18:8e:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Feb 20 14:00:52 2025 GMT
Not After : May 21 13:00:52 2025 GMT
Subject: CN=a5017b7e-c31b-41d4-b3f8-1af64e20d06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:42:e3:08:fc:90:9a:cb:87:78:e7:83:ce:
dc:c2:3d:73:d0:0c:c6:e1:f1:79:f6:5b:63:37:6a:
f9:f5:ef:96:f9:6b:9c:36:91:25:8a:5c:7c:35:81:
72:2a:c5:87:3d:79:57:a8:af:ae:e9:03:36:56:ec:
a9:66:77:6e:20:c8:04:e7:b9:f9:0f:77:a4:52:4a:
bd:fd:ff:a1:57:b0:6a:16:9e:0a:f4:97:40:27:31:
75:45:1f:48:f5:07:fc:0e:1f:ce:ab:98:05:65:74:
59:e1:23:26:30:6d:40:de:a5:33:0f:75:88:5d:f9:
ca:a3:b8:88:6f:3a:72:4d:a1:80:d4:c1:95:18:12:
ed:87:e7:79:ca:09:10:87:38:26:dd:96:94:6f:8a:
f1:e4:da:bb:60:32:93:01:d9:17:e6:17:af:3b:15:
81:1e:4d:11:33:46:76:aa:35:e0:a0:c2:17:f7:85:
34:f2:24:d7:a0:44:c9:d0:85:35:d7:35:cf:96:80:
a1:24:28:83:12:7f:b5:dc:a5:fc:bf:6c:33:92:75:
2e:d2:40:01:22:49:92:83:33:b1:4c:6d:ea:a5:7e:
ce:85:ed:b2:45:77:b5:0b:0f:af:55:d9:7f:36:97:
1d:f1:70:17:53:93:1e:d6:a6:31:ee:c7:8b:3e:e2:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:3D:EC:24:C6:16:BF:40:B5:BF:79:39:45:E5:4E:BB:37:02:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/15858c75-83f7-3898-8aee-64b9f6b5a1e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.44.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:98:ec:30:f8:98:2d:16:d0:0f:88:b2:f8:d6:09:32:60:7f:
2d:3c:71:0b:df:dd:8b:02:45:b1:1a:42:a4:0b:46:17:81:4a:
95:ed:91:7c:7d:ee:66:a5:4b:dd:08:15:78:9b:d7:ae:9c:e9:
35:a8:3b:b8:b2:6a:97:e3:15:13:40:14:40:92:d1:cc:59:6d:
99:26:af:57:01:df:1d:3f:d6:4d:eb:fe:5e:c0:ef:bd:1f:42:
8a:04:f8:b9:ba:0e:c3:66:a2:22:0a:68:f3:4e:45:6b:43:44:
91:3f:23:8c:6f:39:52:57:b0:52:e2:16:b1:52:bc:59:7e:3f:
e5:ab:03:f5:75:15:be:cf:98:c3:ea:d0:e1:e2:b5:28:e8:bd:
72:be:5c:92:a8:90:9b:2c:a5:c4:d7:0b:37:d4:ab:06:98:37:
15:d3:d2:f8:e4:94:10:d6:76:0a:bb:c0:18:c4:6a:5d:2e:35:
04:ff:15:a5:4a:04:7f:09:12:ee:30:2f:87:5a:d6:55:cb:93:
01:79:5d:a7:ec:25:fd:6f:81:17:3a:29:54:67:b0:f7:34:89:
fd:84:f7:b1:5a:a2:6a:a9:99:a2:9b:05:5a:27:39:29:29:de:
2f:e3:7c:3d:ab:4a:da:3f:f2:dd:04:98:22:c8:08:1c:69:b7:
a2:48:0b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:32 2025 by rpki-client