Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/6f1370a8-90a1-314f-aaf4-2d22513d3dd6.roa
File: 6f1370a8-90a1-314f-aaf4-2d22513d3dd6.roa (raw, json)
Hash identifier: cy4cEfajjNKdOyAekGT9AJ3BFnJzwvVMaY6EGHB9RKw=
Subject key identifier: 12:88:B8:63:BE:8A:4B:58:C4:52:EF:CD:3A:D0:D0:CB:1C:81:39:FB
Certificate issuer: /CN=d0ee24a2-eb87-4eba-aa78-bca70397cec6
Certificate serial: 010D0C9F432858489075EE337DEBCB28B4B6FB80
Authority key identifier: F2:24:BC:0E:BA:79:1D:83:D9:A2:B4:59:82:F7:6E:E3:A4:4D:88:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/6f1370a8-90a1-314f-aaf4-2d22513d3dd6.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 398415
IP address blocks: 23.142.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:ee:33:7d:eb:cb:28:b4:b6:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ee24a2-eb87-4eba-aa78-bca70397cec6
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=8ecdc549-77b2-4d2e-9158-fda16f056088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9c:52:89:61:a3:23:3f:11:ad:47:85:37:6e:
bc:6e:43:7e:64:30:e5:fa:6b:15:6a:13:af:0c:aa:
25:f9:fe:01:ca:f9:85:5a:af:a5:9e:46:6c:d7:eb:
56:f8:ff:a5:e0:61:76:6b:83:43:2c:35:5c:c7:54:
49:26:85:13:fe:98:14:8a:70:a4:9c:14:c9:d6:40:
75:3d:b1:8e:ff:63:a4:d2:b8:4b:8a:c8:d3:a3:e9:
a8:6c:fa:f6:34:28:19:81:76:b6:36:43:b8:3c:ad:
3a:b4:7f:9b:68:a2:45:aa:d3:c9:aa:2f:f5:7e:31:
c2:f9:20:ca:a4:5c:3f:77:3b:0f:d1:06:27:a9:a8:
fa:c4:26:a4:68:16:b8:ee:bf:39:80:5e:f4:9e:60:
e1:a6:92:51:9a:5f:70:bd:28:88:48:09:0f:3e:89:
22:92:4b:75:62:b3:5f:bb:75:fe:11:82:ef:33:8c:
c2:d9:d4:d5:2e:02:5d:68:9b:16:1c:da:30:56:43:
3a:e7:5c:b8:cd:4d:0e:d4:8b:ba:d2:26:ac:21:89:
d3:f5:35:07:23:8c:33:25:f6:c3:f7:f2:10:67:e7:
02:63:12:b3:48:38:69:f4:8e:1a:9b:53:de:9a:f5:
5e:ab:05:4c:22:c9:91:2a:0d:91:f8:b5:41:1a:69:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:88:B8:63:BE:8A:4B:58:C4:52:EF:CD:3A:D0:D0:CB:1C:81:39:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/6f1370a8-90a1-314f-aaf4-2d22513d3dd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.crl
X509v3 Authority Key Identifier:
keyid:F2:24:BC:0E:BA:79:1D:83:D9:A2:B4:59:82:F7:6E:E3:A4:4D:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:1a:4a:37:42:14:43:c3:0a:16:f2:d4:f6:66:60:20:c9:79:
29:74:33:9e:8e:c4:02:fb:9a:24:a9:b1:d6:74:0d:53:9b:de:
7e:68:d8:be:44:3c:7f:3a:09:ce:84:4d:33:e6:72:9b:1a:6b:
ce:53:a1:2a:61:e4:c8:9c:68:60:2b:19:b3:56:dc:0a:e5:c8:
5f:c6:2f:c8:f3:e4:3f:00:04:34:f0:fe:9c:0b:c4:ad:ea:07:
8e:01:99:ca:09:ad:a6:c4:7a:70:3f:15:18:da:2b:ff:cc:1b:
bc:f1:43:47:9a:b1:fd:fc:47:b4:b3:4f:ac:11:74:4a:0b:26:
1d:5f:a7:85:e5:82:17:da:d2:5a:0b:34:9b:03:1a:7e:cc:0b:
1a:d5:4a:7f:13:a2:d9:04:ef:ac:f9:7b:5d:ce:f6:99:27:0d:
09:f7:5b:ce:57:a0:3f:2f:c5:31:50:da:88:95:59:97:7d:17:
a9:48:43:03:e7:24:86:84:4c:f6:e1:a9:22:07:55:36:f2:3a:
f9:96:2f:f9:25:35:6b:86:52:d8:ee:ba:5c:de:40:f9:6f:0c:
4d:3e:35:bc:a0:ae:e4:c5:e7:7d:c6:98:a5:5d:1f:00:58:c7:
b8:42:78:53:88:30:e4:b9:4a:7e:73:52:e3:8e:db:0d:ec:87:
a4:dc:12:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:10 2025 by rpki-client