Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa
File: 957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa (raw, json)
Hash identifier: kiRidC/07WN3PVQg2RmGF+ggSpffyx8uOv+/eopRdDU=
Subject key identifier: 88:19:55:E0:45:26:FF:64:2B:64:5F:57:C6:B3:EE:F9:2F:05:C6:4B
Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial: 010D0C9F4328584919417A7EE777B6F09106F7C0
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 16509
IP address blocks: 23.179.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:7a:7e:e7:77:b6:f0:91:06:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=d01a0b80-f80d-47e5-b5fc-74a5b7028087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:d4:d0:14:42:a7:9f:fc:6b:89:8c:17:c5:
ae:d2:51:32:a1:c7:3c:a7:f1:ac:bb:a6:ba:e0:8a:
b7:a7:e4:13:9e:08:d8:47:8e:fe:48:7a:6b:ac:60:
5e:0a:4b:4c:b4:ab:10:57:c5:3d:8c:bb:fe:c2:fe:
26:3a:2d:40:95:8e:ff:fc:50:96:8b:fe:f4:cf:f6:
d2:f9:87:6d:90:70:31:41:3b:a2:24:ee:4d:0c:a8:
73:39:71:fe:a2:e9:dc:60:e3:bc:e9:2d:db:9b:0e:
bb:9a:1f:60:f1:50:e4:89:c5:a4:0f:36:c2:3d:78:
8b:60:34:25:3e:0c:f7:f7:49:82:e7:19:2f:94:d2:
7e:d4:a6:97:6f:11:56:30:17:7f:fe:3f:cb:d2:5b:
19:9f:b4:61:fe:fa:15:ae:3a:84:4b:5f:1d:18:dd:
d2:00:5b:e8:c1:d3:b1:6a:11:ce:64:a9:ec:59:e6:
c0:9f:a5:f1:3c:b3:f0:5a:0d:72:a6:5e:d1:ab:0e:
bb:a3:8c:fb:7c:7a:f1:11:79:20:f8:a3:7c:2d:e9:
1d:07:f0:2e:e2:db:d1:b0:40:ad:ee:4c:41:2d:e7:
46:c7:e0:dd:2a:d5:6c:9f:05:e7:c0:57:8a:58:5d:
c5:d2:dc:a0:b5:2c:89:d0:2a:0d:f6:c9:33:87:06:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:19:55:E0:45:26:FF:64:2B:64:5F:57:C6:B3:EE:F9:2F:05:C6:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
X509v3 Authority Key Identifier:
keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
sbgp-ipAddrBlock: critical
IPv4:
23.179.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:af:75:30:25:fa:c7:8d:23:9a:a0:a4:10:f0:40:a0:8d:cd:
8b:77:95:7a:23:64:67:a4:27:1d:d7:66:5a:92:a6:87:f2:4f:
ec:5b:4f:8e:f4:20:4f:0c:b8:05:62:d7:ec:8b:67:b1:a9:b6:
e5:dd:03:fc:90:53:41:37:cd:4a:f6:28:b6:80:b0:58:48:f6:
b9:8f:56:52:15:00:55:18:4d:4b:11:11:88:08:ff:94:68:f9:
a4:f4:66:2b:61:07:53:4b:de:4e:b5:2e:5b:03:aa:15:65:c0:
54:91:b7:56:fb:f0:db:61:75:e8:a9:95:8f:44:66:61:2b:ce:
21:41:00:1a:6a:e2:c2:90:35:15:cb:7e:e7:eb:32:26:b0:6a:
0a:56:ad:ba:55:ce:51:54:ba:85:fa:e3:3d:af:1e:51:90:ad:
39:42:c0:71:e0:e2:a4:2c:63:17:04:4f:17:ed:e8:fe:7b:d8:
ee:5d:8e:21:a1:5e:09:01:9c:d2:60:51:3c:26:75:ce:23:1d:
c7:4c:f0:80:ea:85:84:51:43:d0:30:b3:eb:e2:56:81:3e:f5:
36:14:97:57:28:9e:cd:78:1f:16:82:54:eb:59:4f:11:31:53:
74:f9:c9:fa:cf:91:6d:89:2a:41:73:46:09:cc:d7:58:5d:38:
23:f0:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:25 2025 by rpki-client