Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fddd2413-252f-3060-ab9b-3fffedf3f396.roa
File: fddd2413-252f-3060-ab9b-3fffedf3f396.roa (raw, json)
Hash identifier: R3KMkqK+ytTvnP2tP+LwuK+oPiClxRoRxMlvM5o2j3U=
Subject key identifier: 7D:E9:31:00:94:86:8D:6D:38:68:D3:08:1D:69:A7:4D:43:54:67:4C
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584902EC22D8533FA87608F38980
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fddd2413-252f-3060-ab9b-3fffedf3f396.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 40139
IP address blocks: 64.192.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:22:d8:53:3f:a8:76:08:f3:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=348d80fa-be27-47f1-9d65-699e2ca3d380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:5d:6c:cf:c4:6d:59:cd:cb:d4:73:56:1f:
e8:1c:dd:0c:fd:a3:f4:d8:ed:64:5f:ba:f8:8a:ff:
96:42:46:04:2e:cd:1f:5a:bb:8c:82:31:5d:0b:18:
22:0e:17:26:11:9b:56:2c:02:19:86:59:ac:2f:43:
6e:a1:3d:86:8f:ad:08:91:e0:10:5d:14:b4:73:a0:
bb:b9:c3:7d:6e:22:fc:bf:32:83:1f:52:f6:80:bd:
ba:19:07:0f:f6:d8:3b:28:2c:83:64:c5:84:fe:43:
6b:79:3e:96:43:2c:a5:fb:e9:9c:66:f9:67:ab:41:
94:ca:75:3e:de:73:68:e6:af:03:70:1d:cf:a8:46:
a8:89:3f:4b:19:fd:1c:57:ac:66:91:08:be:0b:3b:
96:27:a8:54:5f:38:d4:9f:10:2d:f8:7e:03:91:d5:
1b:56:c4:ea:43:32:38:6c:94:da:bf:02:fd:6f:58:
a8:28:89:11:f3:76:09:8c:33:fe:55:25:08:48:f6:
94:22:b2:38:78:99:8b:f1:0c:c5:ad:c7:d2:08:c4:
95:75:cd:4a:cb:bb:53:09:93:c1:32:5c:d3:71:b9:
bc:f3:7b:b9:fa:9a:93:0f:c9:1c:f8:c6:a7:96:15:
9e:02:c6:d7:5d:70:12:7c:3f:98:81:4d:cc:04:16:
50:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E9:31:00:94:86:8D:6D:38:68:D3:08:1D:69:A7:4D:43:54:67:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/fddd2413-252f-3060-ab9b-3fffedf3f396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
64.192.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:0e:44:6f:c0:52:dc:2d:0a:63:7b:f1:6b:f1:91:02:b6:ed:
a6:e0:54:ae:20:77:78:c5:28:a4:9f:36:9c:8f:28:b3:a7:c5:
1c:5d:8e:99:03:13:54:e6:e2:91:22:3a:08:83:13:86:3e:b9:
66:e6:aa:2d:35:7f:3d:e5:d7:1f:93:07:90:8f:84:4a:5a:5f:
cb:06:f6:ab:c5:22:4b:52:80:5c:de:29:9f:60:e7:91:c0:54:
32:c7:cf:e5:c1:dd:62:95:a3:08:0d:71:d7:0c:b7:63:75:db:
82:2c:4a:7d:6d:db:d2:87:3e:61:ef:c1:29:74:78:92:dd:db:
ff:8d:37:59:04:db:a8:df:bd:55:36:20:f3:8b:41:84:6c:da:
71:ce:6c:1b:00:db:43:9f:9e:50:05:03:9d:98:a3:a8:c8:a9:
d2:49:98:0b:53:6f:7e:ed:b0:4c:4e:0d:4b:9a:87:33:16:3c:
4a:c1:5b:32:46:aa:eb:f2:15:35:f1:96:ee:c6:16:57:53:03:
f5:8a:a4:9c:55:83:c8:08:b2:d6:37:ea:60:1c:33:d3:a2:46:
e0:7c:77:72:74:28:dc:89:1c:f0:f7:4b:1c:5f:ef:d1:da:ad:
6d:20:b0:4e:5d:9b:02:76:03:fc:88:cb:74:56:ef:1b:26:68:
13:d9:0d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:09 2025 by rpki-client