Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa
File: c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa (raw, json)
Hash identifier: ilHtgpoMY/QKsg2iOhJOYIcX+C8IGb7ppNU82qcfm/Y=
Subject key identifier: 30:24:F7:3A:C8:B2:28:2C:F6:23:0D:9E:6F:5C:77:7E:1C:7B:30:7B
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F432858492CB208E637ACE9B90B4EA600
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 1340
IP address blocks: 8.12.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:08:e6:37:ac:e9:b9:0b:4e:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=27bc8eaf-a3c9-4c61-8a56-0b8ddd8861cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3c:a5:c2:2a:cd:41:16:e1:a9:4e:92:ac:87:
36:c2:41:4c:2b:b5:7f:f8:8e:ef:a4:c5:e4:1d:66:
90:63:08:b6:1d:68:b1:40:3c:bf:04:98:62:a4:30:
06:f3:e7:d8:bc:0a:15:8b:8c:00:a8:4e:e8:e2:5f:
81:73:98:8e:89:81:bf:4c:8a:dc:d8:4e:46:2f:0b:
1e:61:62:3c:fc:7d:06:29:88:ac:f5:54:2e:1d:67:
eb:be:8a:ee:34:da:ed:0e:8b:2f:76:57:8d:4f:e2:
b3:fe:19:4c:1b:4d:51:99:92:5b:23:9c:dc:7a:e7:
c4:22:77:06:4b:81:f9:9b:06:7c:c0:8b:05:76:e6:
14:8f:5d:35:3c:b7:f2:74:80:37:af:41:c9:96:b7:
a2:a6:77:02:49:08:8f:b5:d1:11:ad:73:51:a7:0a:
74:a2:35:7c:56:68:2c:0a:50:da:88:bd:91:a9:30:
c7:ae:d4:1d:e2:91:4f:21:68:17:29:56:7a:b1:42:
81:4e:0d:d8:c0:3d:7b:c2:65:c9:84:fc:fa:28:31:
f3:59:66:a8:71:9b:cd:55:49:7d:32:fa:43:da:c7:
dd:8b:86:7c:a5:43:d0:8c:04:c6:bf:dd:4e:91:20:
7a:e9:08:8c:db:d7:8f:44:96:09:7c:e5:b2:ed:94:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:F7:3A:C8:B2:28:2C:F6:23:0D:9E:6F:5C:77:7E:1C:7B:30:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c70113e4-5d6b-37f1-bb7b-8a447f454e8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.12.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:ff:73:10:a6:d3:62:af:04:bf:8a:c1:45:7f:2c:e8:68:b2:
cf:9d:56:a2:79:f5:78:b3:20:f6:62:5d:43:63:b8:e3:97:cc:
47:8f:b3:cf:56:42:e1:5b:47:70:c4:14:45:10:4d:78:a5:2e:
1b:36:c6:c4:bb:e7:63:27:95:1f:c4:12:fc:52:56:30:62:d5:
62:19:7d:a7:c6:2e:d4:d0:4e:07:ba:7e:b1:48:80:38:a3:dc:
47:48:73:b4:01:93:ec:6f:49:de:66:d4:9c:f2:ff:58:3a:51:
14:93:33:01:21:b1:39:8b:5b:13:8b:20:c9:9b:1c:ee:37:8a:
49:ab:40:65:1e:b3:e2:6e:0c:7f:75:4c:2e:91:d4:b8:c0:2d:
c9:a0:f0:b3:59:60:eb:42:f2:ee:57:27:aa:d5:82:69:ab:34:
61:5e:94:9d:72:14:ab:ba:33:bb:92:54:75:61:67:d6:c1:77:
b7:2f:f8:33:3a:13:51:1d:a6:c9:3a:b7:9b:83:d8:9f:f1:e6:
fc:b5:89:c0:b0:e1:47:5c:17:d3:17:52:10:ef:e7:08:04:87:
49:d9:d9:0f:ec:68:c7:4a:cd:fd:45:a0:68:47:82:2e:96:88:
a9:43:56:25:2e:3c:de:ca:d5:b1:c9:34:a9:02:65:9e:43:48:
ab:a8:66:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:57:32 2025 by rpki-client