Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2a3e6133-21f3-3f13-9b3b-479850738d8c.roa
File: 2a3e6133-21f3-3f13-9b3b-479850738d8c.roa (raw, json)
Hash identifier: igqklATHUgvFylGmQMM3i11H/zOn+7nJ2tF/TEjPZCM=
Subject key identifier: 8E:7C:5A:6B:39:3E:AA:31:7E:A5:A4:CD:45:01:D2:55:40:33:5A:73
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F432858494DC14A174082E5F5E41ABBC0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2a3e6133-21f3-3f13-9b3b-479850738d8c.roa
Signing time: Tue 25 Mar 2025 09:20:31 +0000
ROA not before: Tue 25 Mar 2025 09:20:31 +0000
ROA not after: Mon 23 Jun 2025 09:20:31 +0000
asID: 62610
IP address blocks: 23.251.34.0/24 maxlen: 24
107.151.213.0/24 maxlen: 24
107.151.234.0/24 maxlen: 24
198.44.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4d:c1:4a:17:40:82:e5:f5:e4:1a:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Mar 25 09:20:31 2025 GMT
Not After : Jun 23 09:20:31 2025 GMT
Subject: CN=bbf0b2ed-0c77-4b82-a215-d01ace41f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:bd:a4:92:5a:61:4f:25:b1:94:1a:27:2c:28:
18:89:76:fd:62:47:eb:9d:c0:1a:0b:26:ca:8b:5e:
45:3f:ea:f6:db:dc:79:b7:ac:e3:66:4a:2f:ec:8f:
73:d6:8d:cd:a2:a0:18:0e:6a:4d:3d:51:56:d7:86:
c2:ab:a4:47:f9:82:60:09:01:33:3b:94:67:e2:95:
52:c0:10:5c:49:1a:a6:6d:5f:0b:09:02:18:4c:ce:
f2:85:ee:1f:c4:15:ef:fd:85:68:08:ec:b4:ae:1e:
71:4d:b0:85:9f:f9:dd:8e:2a:e9:25:ab:50:34:7d:
d5:bb:f4:b6:bc:1d:73:ce:1c:c7:77:2b:fd:6d:b5:
58:5a:28:80:12:7e:05:68:c0:6c:a5:3f:06:d5:b0:
94:77:9b:aa:42:45:35:f7:0d:72:8b:93:d9:c1:c8:
6d:49:5a:49:2f:36:24:bc:66:4f:d6:10:26:b6:81:
b1:34:d7:6c:a4:d5:f5:b4:3e:11:98:bb:96:43:bf:
bc:d7:41:ac:2d:c0:52:ef:2a:5a:75:ce:ea:e1:c8:
d1:be:08:f6:04:80:71:ea:ea:47:9b:95:b0:23:0a:
44:d7:02:78:8a:16:d9:7e:8c:c3:7a:d3:d8:82:57:
e0:df:5a:9f:b1:9a:13:48:6c:68:21:9a:72:2b:4b:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:5A:6B:39:3E:AA:31:7E:A5:A4:CD:45:01:D2:55:40:33:5A:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/2a3e6133-21f3-3f13-9b3b-479850738d8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.34.0/24
107.151.213.0/24
107.151.234.0/24
198.44.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:7d:00:b0:97:42:8b:0d:fd:07:81:68:f5:a4:22:2d:d9:33:
e4:87:82:ac:6b:cc:b1:9b:22:52:ed:0c:c1:4f:0a:8d:85:5b:
4a:5c:52:e8:cf:8f:f3:54:fa:36:af:43:34:7c:cc:7f:d5:99:
0d:21:fa:b3:b8:41:80:24:f6:c9:ab:8e:8e:06:1e:7d:86:c4:
df:aa:5e:a6:40:0d:4d:cc:ff:06:cc:cd:d2:29:2f:a4:b9:93:
6a:92:e4:b6:5b:73:41:70:81:3c:88:58:7a:14:22:44:0c:22:
e5:28:76:4b:de:d0:36:9d:7d:de:8f:0d:9b:32:a2:98:91:34:
d3:c7:18:1e:21:0a:46:f7:56:bd:d1:19:8d:7a:c6:2d:c4:39:
e0:01:c2:ad:a6:f4:c2:75:1d:45:d7:3c:cb:68:1c:b2:b0:e6:
e8:75:e6:c6:49:fb:32:32:5e:83:3b:e0:c8:1e:eb:1c:6a:86:
de:f5:18:2d:24:37:19:b8:59:3c:80:f3:86:04:a2:c8:fb:b3:
f6:3b:a3:ad:b1:27:6d:69:1d:03:a0:6f:74:7a:14:1a:f0:d5:
89:c6:2b:af:58:c6:84:2b:f8:c1:6f:b7:48:be:de:56:86:07:
59:38:3e:d9:9b:4e:23:ed:e3:dd:98:56:df:18:bc:03:43:65:
0a:c9:e9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:40 2025 by rpki-client