Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b61dbf2b-3005-35f0-8a42-a63ac054f7c4.roa
File: b61dbf2b-3005-35f0-8a42-a63ac054f7c4.roa (raw, json)
Hash identifier: rrudrxcMqn4MCb/FUqnUWTl3l6c10PEWDlIhNbH0Ipc=
Subject key identifier: 0A:0D:17:DC:27:46:22:63:4F:C8:C5:DE:20:B4:C1:5A:E8:CF:0A:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6CB6C384F99D84AA39A3D0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b61dbf2b-3005-35f0-8a42-a63ac054f7c4.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33659
IP address blocks: 23.31.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6c:b6:c3:84:f9:9d:84:aa:39:a3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=92a214c9-583e-4953-ada7-6c56b95cfc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:e6:dc:6f:e4:b9:3b:31:a2:50:62:1e:39:
60:c7:4f:35:79:81:f8:37:4a:b9:d8:fe:ee:09:88:
57:7c:7c:6c:33:1c:56:5a:24:48:ef:a1:42:bb:10:
24:be:0f:f4:bd:17:83:94:96:72:c5:e6:89:32:53:
51:31:6a:4d:b7:ac:c1:1a:d8:6d:53:ae:47:29:14:
a5:d2:7f:d2:e4:ee:34:7e:e9:4a:02:ee:dc:6a:82:
4b:c8:9d:3b:3a:9c:c6:d7:57:80:79:eb:72:df:a8:
6c:6a:05:e6:99:14:32:fd:c5:04:ec:3d:4b:87:d7:
a8:60:1e:00:de:1c:df:56:12:63:01:f4:aa:11:18:
ee:78:65:92:fd:8b:b6:6a:09:4d:6c:c6:a0:7d:ff:
7d:8a:a4:7e:ed:10:ab:dd:38:c5:db:7b:e3:2b:8e:
37:88:f7:c3:0f:8c:b2:53:ef:91:18:fb:df:35:92:
2e:a5:8c:e3:80:15:f5:0a:f2:b7:57:95:4b:bf:1f:
82:bf:2f:cd:78:b4:e1:d7:54:d8:eb:6b:13:2c:b1:
1b:02:2d:86:4d:50:d8:dc:b3:f9:0a:ef:5d:c9:48:
f3:2c:fc:13:c2:05:86:8f:b4:ac:b1:06:2d:19:94:
e8:06:7d:a2:ef:51:3e:a1:49:87:15:7b:8f:d2:41:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0D:17:DC:27:46:22:63:4F:C8:C5:DE:20:B4:C1:5A:E8:CF:0A:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b61dbf2b-3005-35f0-8a42-a63ac054f7c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.31.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:1f:3e:0c:a0:ae:92:ca:7e:cf:30:3d:f1:92:49:95:1a:b7:
4e:f1:1e:d0:e3:c9:61:89:09:cf:c9:dd:b9:77:ff:2e:ad:35:
a4:15:ae:4b:b2:08:39:f4:46:3e:d6:c0:2f:b2:e2:46:a0:3d:
54:f2:62:ec:48:4d:6b:f1:4e:7e:53:b4:98:d9:8c:9c:74:75:
2c:90:ee:c2:c0:00:26:61:7b:63:ed:4b:a7:11:3d:83:88:af:
9f:75:b5:59:ea:43:7f:d0:a8:4a:a4:eb:1a:a2:8b:d9:4f:6a:
4f:00:55:02:38:f4:ca:62:2f:f4:56:66:bb:03:50:72:81:09:
9d:f2:e4:fb:db:19:65:72:cb:72:6e:22:9a:f5:0d:45:a2:1c:
92:8c:0f:bd:51:34:ba:a8:89:41:a9:b2:60:28:4f:16:69:72:
4c:37:13:9c:60:2a:13:42:2e:fc:4c:61:85:9a:f2:20:09:63:
11:72:83:9b:49:c9:bb:06:3d:94:16:86:82:11:0e:3a:0a:8d:
49:01:29:c3:63:e4:8f:26:99:4d:67:08:58:cb:83:eb:f4:5b:
24:12:bc:e8:b0:06:d3:f4:3d:d9:d7:e1:8b:53:0f:a6:f3:8f:
17:e2:4d:8b:10:38:60:91:91:bf:9b:82:9e:c8:31:4d:c1:d5:
ba:d8:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:36:24 2025 by rpki-client