Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa
File: 4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa (raw, json)
Hash identifier: Pq4GdN0s6+VH6Il/jwzokqyYwRreNkAJv57bw/5ETYM=
Subject key identifier: D8:A8:5F:59:34:D2:B4:84:AC:27:9A:7B:84:94:02:17:21:7F:3E:17
Certificate issuer: /CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
Certificate serial: 010D0C9F4328584940394DA67B0908F4060373E0
Authority key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 395332
IP address blocks: 23.146.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:4d:a6:7b:09:08:f4:06:03:73:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=3daed478-b97b-4f27-ad1c-09d0bf50cc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:4a:06:43:c3:ea:0a:00:63:c1:10:0a:73:
ba:26:43:11:68:a3:95:08:94:42:d8:af:e9:3e:1b:
82:db:22:87:88:57:6b:4b:ba:af:7e:0e:02:52:89:
62:b6:49:d7:b7:3c:68:46:fa:db:94:4a:a7:a8:bf:
15:de:15:dd:aa:97:6b:1e:5b:ec:9e:b2:ab:aa:0e:
e6:e8:dd:bb:33:a5:3f:f4:a5:0d:9c:99:e7:ce:c2:
90:18:6c:e2:eb:0f:d0:d8:e4:53:eb:fe:cb:2e:29:
eb:5c:fd:02:20:fa:5a:5d:3f:99:20:40:06:14:68:
4a:da:10:76:37:a6:65:88:0d:96:29:ae:5a:76:31:
27:8a:43:42:b3:3c:1d:58:3d:99:c7:eb:f2:bf:45:
91:b3:6a:5b:92:d3:60:05:df:af:71:77:51:ef:46:
ea:a7:ae:3a:3c:8b:d7:01:9e:f7:30:fd:c2:a9:b2:
9a:fd:0b:31:e2:33:2e:78:d7:3a:a6:d1:3a:e4:85:
b3:6f:4d:4f:91:4e:38:04:f3:68:04:9f:f3:b6:f8:
7d:ab:16:bd:00:db:c2:d2:c4:34:0e:26:11:b9:4b:
e3:9a:36:3f:cc:56:52:09:ae:12:85:77:90:6c:da:
45:8f:7a:70:14:29:24:94:51:96:65:dd:a0:49:b7:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A8:5F:59:34:D2:B4:84:AC:27:9A:7B:84:94:02:17:21:7F:3E:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl
X509v3 Authority Key Identifier:
keyid:E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:cb:f7:54:5b:51:f6:03:4d:1b:af:d4:4f:6b:69:d1:6f:b9:
c9:1a:85:a1:9d:ce:85:72:9d:a5:9b:a0:70:a7:2e:d7:48:ac:
42:5e:9d:09:01:3d:1d:c7:1e:57:60:96:61:fa:ff:8c:37:53:
30:99:b6:63:57:9d:dc:4d:d0:40:5f:e0:da:9d:21:33:9f:98:
9d:7b:5e:e7:9e:51:08:a9:c1:03:be:b5:7c:f4:53:e8:ca:d8:
42:c6:87:e3:26:76:fe:82:77:f2:ff:f7:83:d4:6a:bc:9f:e9:
04:bc:bc:52:16:3e:3d:25:b9:95:74:ed:18:d4:70:87:88:c8:
e6:72:33:23:64:9c:27:ed:7e:d7:a5:8f:70:50:90:6a:4d:6d:
0f:f6:c6:26:a6:dd:4a:7b:f7:af:68:98:d0:c4:38:f8:01:cc:
77:6a:36:b6:d5:e9:ca:dd:95:81:92:44:83:53:b2:ad:3a:d4:
73:bb:60:51:f9:2f:77:c9:2a:e9:b4:44:93:30:9d:66:4a:65:
9c:8d:57:07:46:e2:23:ea:70:4a:ef:ee:16:eb:87:5f:de:12:
af:02:f4:fc:1c:81:53:c4:0f:b2:d2:e5:34:1a:72:96:14:86:
51:01:be:6a:4a:2c:59:96:9b:74:0e:6c:ca:06:49:74:68:a7:
56:f8:1c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:41:44 2025 by rpki-client