Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d63ab3ed-1030-3355-be35-f7ac9ff15dc1.roa
File: d63ab3ed-1030-3355-be35-f7ac9ff15dc1.roa (raw, json)
Hash identifier: ayYoSobdyMBKsYy1Fuzel1MsovkcF3+TYNaTRLXQ6Os=
Subject key identifier: 95:FD:55:3B:D6:C0:41:49:77:8C:73:F3:1E:23:3B:CE:E8:E6:0E:05
Certificate issuer: /CN=d622ae28-b14e-4021-900a-c9182c5b5a2e
Certificate serial: 010D0C9F432858490AE854D5F21BBBB40E271200
Authority key identifier: 8E:99:4E:29:2F:54:AE:C6:12:78:DB:E7:70:0E:D5:07:2F:FA:94:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d63ab3ed-1030-3355-be35-f7ac9ff15dc1.roa
Signing time: Sat 01 Mar 2025 10:40:02 +0000
ROA not before: Sat 01 Mar 2025 10:40:02 +0000
ROA not after: Fri 30 May 2025 09:40:02 +0000
asID: 57406
IP address blocks: 23.133.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0a:e8:54:d5:f2:1b:bb:b4:0e:27:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d622ae28-b14e-4021-900a-c9182c5b5a2e
Validity
Not Before: Mar 1 10:40:02 2025 GMT
Not After : May 30 09:40:02 2025 GMT
Subject: CN=7b2073e9-7a78-4bfe-b980-ab04cc5fffd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6b:1d:9a:96:5c:93:41:b8:ad:40:c3:b8:e2:
2f:2d:fe:a2:b3:65:ae:22:2a:92:18:f5:9e:0f:4c:
b3:f7:5e:df:76:1b:3f:a1:5d:42:d3:8f:0b:bb:43:
82:97:e1:73:57:2e:a9:7c:69:89:f0:7d:1a:48:af:
73:4c:8e:5f:c4:c6:64:94:9b:10:79:76:cf:a9:2a:
e1:e4:44:9f:7c:ae:91:c9:b6:e6:54:a9:d2:98:72:
d0:b0:8b:ef:5b:8a:e9:22:96:29:6c:25:75:66:cf:
25:5c:75:2f:a3:31:ee:e9:e3:a1:79:d3:31:88:02:
2a:64:95:43:ae:70:66:dc:2e:1c:b4:92:4d:ea:e5:
ee:39:fc:89:09:de:9f:9a:2b:8e:bc:1e:f6:b0:36:
a1:7e:50:c7:6e:b3:7b:70:92:95:f1:b6:2e:fd:7d:
a5:9d:42:0b:c7:01:13:25:93:8e:18:55:47:63:51:
76:9c:b8:ef:0a:c6:d3:d9:81:e0:4a:3c:c9:73:41:
df:12:2f:41:4e:fd:27:e8:f3:12:fd:d9:fd:e1:6b:
65:85:a3:2e:1a:3f:dc:98:50:bf:05:da:8b:a6:0e:
0c:bd:9c:11:b1:d6:10:b3:11:87:53:1c:6d:f2:1b:
6d:37:f7:92:ea:e8:eb:d4:cd:c7:74:ca:34:2e:68:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FD:55:3B:D6:C0:41:49:77:8C:73:F3:1E:23:3B:CE:E8:E6:0E:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d63ab3ed-1030-3355-be35-f7ac9ff15dc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.crl
X509v3 Authority Key Identifier:
keyid:8E:99:4E:29:2F:54:AE:C6:12:78:DB:E7:70:0E:D5:07:2F:FA:94:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:4f:4b:57:aa:65:b7:cf:db:42:e3:4a:3d:47:d4:38:5b:d8:
89:f3:0d:aa:95:79:45:aa:88:38:76:80:27:0d:04:ad:cc:8e:
d9:47:97:60:a1:9f:d0:ce:2e:d2:88:5b:49:b0:fc:e7:9c:84:
fe:ea:7b:30:0f:62:e4:f9:f4:64:69:55:5d:97:fd:6a:56:9a:
e8:0c:6e:d7:bf:4f:75:2e:bf:90:95:20:0a:7e:0c:78:1f:59:
c9:a0:ab:ca:87:89:b3:0d:b9:98:40:4c:7e:cb:25:5c:20:6a:
29:44:13:ef:4e:e5:0d:75:85:07:56:bd:b0:0c:90:de:88:56:
51:82:8a:f6:58:e9:24:af:ab:77:b5:52:99:16:8f:c9:95:e0:
35:fd:55:3d:54:1a:17:2c:2d:35:eb:2a:c4:05:de:6a:a2:0e:
21:eb:dd:71:3b:72:b8:5e:41:fc:aa:ba:a0:00:e0:f6:5d:bb:
33:94:af:0a:09:1e:ea:1a:e5:ba:56:b7:6e:e2:5e:d1:bd:57:
50:c6:0a:ed:0b:28:e6:83:a0:fd:39:49:b0:82:1f:4c:02:d3:
cf:5a:7b:cb:b9:8f:2f:4b:2d:e1:35:c2:80:89:dc:a3:0b:e3:
a4:2e:b9:e1:2c:29:fb:98:bc:ef:e3:81:f0:04:4f:12:21:16:
86:e0:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:47 2025 by rpki-client