Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9d844dfe-85d9-3833-8a02-f1224bbad038.roa
File: 9d844dfe-85d9-3833-8a02-f1224bbad038.roa (raw, json)
Hash identifier: BVox1MGGhosGfmu0BJe3h7VlXlHlJIW9bTjT7aTXXSU=
Subject key identifier: 29:11:36:18:7C:0D:FA:36:86:8D:46:9A:B4:AC:E0:15:94:4A:5D:0C
Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial: 010D0C9F43285848C58188B48B10B7ABC3405C40
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9d844dfe-85d9-3833-8a02-f1224bbad038.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.23.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:88:b4:8b:10:b7:ab:c3:40:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=378f5d29-7ef1-44c6-8cf7-034f3e77b3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:7e:8b:eb:c4:e9:71:25:5f:1f:cc:74:41:
66:7d:3d:a9:48:bf:54:53:d0:37:f7:f6:e8:67:83:
55:a1:db:1a:58:87:93:e5:d4:7d:61:86:e1:49:b8:
7f:79:7f:8a:53:b1:d9:36:48:0c:40:3b:db:59:f9:
cb:c7:54:04:fe:9b:dc:ed:c4:ff:b2:b2:12:99:0f:
a1:43:56:bb:05:2c:80:c9:c1:0b:71:5a:69:41:c2:
f8:60:89:0a:4a:8c:c4:48:fa:70:69:2d:24:11:bd:
0f:af:05:1c:1b:6b:ee:3a:07:f3:86:5d:c5:2a:7a:
58:4e:bb:0e:dd:be:af:8e:9b:cc:37:c5:02:05:1a:
02:53:3c:6f:b2:c6:43:79:bf:ab:03:f2:91:dc:d6:
75:d1:37:36:55:69:29:54:69:fe:b7:13:ed:fb:8a:
49:19:ad:b0:6b:2d:0d:47:c1:a8:fb:07:a8:e5:b4:
8a:ea:34:96:f8:8a:05:20:19:ef:25:c2:f5:06:5b:
37:fb:3e:cb:30:3c:5f:88:1a:63:32:60:1b:33:4c:
38:44:0f:1d:56:b9:06:c1:37:10:4f:5f:4d:72:5c:
00:66:00:e6:a1:65:d0:3a:e8:6f:80:cf:21:41:04:
45:0d:38:4e:a0:e0:21:59:5a:50:bb:61:5c:a9:60:
15:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:11:36:18:7C:0D:FA:36:86:8D:46:9A:B4:AC:E0:15:94:4A:5D:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/9d844dfe-85d9-3833-8a02-f1224bbad038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
X509v3 Authority Key Identifier:
keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
sbgp-ipAddrBlock: critical
IPv4:
136.23.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:9d:18:86:44:14:e4:e5:17:97:8a:e6:d3:fb:c4:60:79:4d:
0a:85:93:21:08:96:f2:df:a6:4d:dc:af:1f:0a:a4:3b:e6:41:
02:e8:d7:1b:4e:14:4a:3f:a5:3a:ed:83:b2:7b:52:5c:c6:97:
42:d5:99:52:3b:1d:bf:e4:76:a5:bb:89:dd:6b:84:2f:51:b8:
16:6b:07:0b:d9:04:b7:3f:d8:1d:3f:62:6d:ec:55:24:3c:9e:
0d:2b:03:9f:f1:c6:66:42:c1:bb:4a:79:99:31:65:af:79:fc:
df:ef:b2:c0:aa:ac:89:be:dc:70:f7:44:3b:7f:62:ed:71:48:
47:67:d5:07:02:d8:09:03:b2:63:ef:36:65:09:29:0d:0b:65:
59:35:75:43:c6:bd:65:c7:0e:04:2e:26:2b:44:be:ca:6d:b5:
63:4d:6b:90:ef:cf:14:20:5a:a7:d4:00:0e:51:91:01:71:b0:
3d:f4:e5:ad:d7:77:c0:da:c1:ed:cc:bf:04:76:a9:5a:05:d9:
cb:d8:b5:2f:76:dd:69:ae:59:27:e0:e9:a2:10:b8:c2:c3:99:
ce:4b:f4:4c:c1:a9:b5:74:1b:08:86:73:d9:41:f8:9e:49:51:
8c:0f:dc:30:ef:9e:f3:99:cb:a5:3e:8e:80:1a:ff:74:4f:5e:
90:79:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:46 2025 by rpki-client