Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58c08dfd-fd44-45ea-91ec-366178a38f28/dce304bf-5e0e-3862-8372-79589f1d5537.roa
File: dce304bf-5e0e-3862-8372-79589f1d5537.roa (raw, json)
Hash identifier: kOt0rQff3myVRPaYjknXBUm1Jx9pgIO+2EbDWKoZeDo=
Subject key identifier: 0E:7E:7C:0F:05:8E:34:1D:81:CA:10:7A:9A:59:19:22:B0:79:85:CF
Certificate issuer: /CN=58c08dfd-fd44-45ea-91ec-366178a38f28
Certificate serial: 010D0C9F432858493B7BB42DAE3577767E109E80
Authority key identifier: BB:FD:0F:DB:E2:25:AA:FB:4D:ED:B6:5D:6D:3B:44:6B:33:32:16:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58c08dfd-fd44-45ea-91ec-366178a38f28.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58c08dfd-fd44-45ea-91ec-366178a38f28/dce304bf-5e0e-3862-8372-79589f1d5537.roa
Signing time: Tue 18 Mar 2025 20:15:46 +0000
ROA not before: Tue 18 Mar 2025 20:15:46 +0000
ROA not after: Mon 16 Jun 2025 20:15:46 +0000
asID: 395881
IP address blocks: 23.136.44.0/24 maxlen: 24
2602:f6b7::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3b:7b:b4:2d:ae:35:77:76:7e:10:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c08dfd-fd44-45ea-91ec-366178a38f28
Validity
Not Before: Mar 18 20:15:46 2025 GMT
Not After : Jun 16 20:15:46 2025 GMT
Subject: CN=cd3c4bc6-f210-4eea-9483-18ad258f40ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:4c:ae:d0:68:70:27:20:06:5a:25:dd:53:
6e:88:69:07:e2:3a:ab:d7:11:00:88:21:76:2d:1b:
d0:ed:fb:4e:3d:fa:10:a2:5f:59:ee:d5:49:20:53:
dc:8a:52:46:03:74:b2:74:a2:31:c2:24:f1:0e:a3:
07:dd:5b:05:53:e0:5c:b2:19:a2:2b:fb:fd:83:90:
99:5d:57:e0:27:be:07:e7:37:e4:b1:00:92:6c:61:
46:91:cc:45:b0:9c:31:07:cb:39:f6:fc:02:c1:45:
5c:60:82:2f:ce:62:ab:16:68:cf:01:90:08:84:b8:
8a:48:a1:6b:8b:f0:08:77:15:eb:64:a4:2c:c0:1e:
6e:b4:b1:62:5f:e3:9e:b4:2d:ad:9f:0a:96:30:32:
e5:a6:7c:2b:3d:5e:19:04:9b:df:23:1e:79:2f:af:
4c:85:22:bd:f7:da:0f:a3:62:4d:88:4d:e5:2a:a6:
38:e7:d0:2b:60:93:4b:36:7f:28:04:e7:77:13:19:
d9:27:f2:eb:a6:8b:ba:ff:e6:2f:44:34:53:a4:4e:
9e:e8:94:04:cd:a7:90:a1:ba:a8:36:0e:cc:07:6a:
25:64:02:ce:12:01:5d:4c:9f:8c:d1:79:5e:3f:2a:
40:da:07:3a:73:91:97:a1:8d:09:10:c2:53:e4:a8:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7E:7C:0F:05:8E:34:1D:81:CA:10:7A:9A:59:19:22:B0:79:85:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58c08dfd-fd44-45ea-91ec-366178a38f28/dce304bf-5e0e-3862-8372-79589f1d5537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58c08dfd-fd44-45ea-91ec-366178a38f28/58c08dfd-fd44-45ea-91ec-366178a38f28.crl
X509v3 Authority Key Identifier:
keyid:BB:FD:0F:DB:E2:25:AA:FB:4D:ED:B6:5D:6D:3B:44:6B:33:32:16:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58c08dfd-fd44-45ea-91ec-366178a38f28.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.44.0/24
IPv6:
2602:f6b7::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:e4:14:3c:a2:21:2b:70:81:e5:ef:2f:c5:f0:27:bc:d1:2a:
c4:b7:70:03:4a:fb:8e:a3:33:e5:8f:e0:12:fb:3c:22:86:86:
a0:37:c5:1d:2b:e7:63:88:1f:ea:9c:6a:07:c7:98:04:ac:d4:
81:40:7d:6b:4f:3f:50:1a:f9:c6:0d:7e:5a:76:35:d3:de:c1:
3d:49:99:39:72:2e:f1:a0:c5:87:f6:48:37:70:7f:8c:c8:94:
e3:03:4f:dc:e5:39:05:e5:0b:9a:3e:dd:3a:47:01:79:07:dc:
61:2e:4b:be:09:58:8f:0d:f3:98:ab:3f:d9:38:1a:cf:b1:2f:
ec:40:56:e2:65:03:42:ce:2e:66:f5:28:f0:66:44:1c:f5:83:
26:9d:7d:be:d8:fc:50:fc:2a:04:46:60:93:04:bd:38:37:88:
50:9a:bd:c1:d9:4f:12:1a:bb:d9:81:87:be:b3:f8:9f:e7:2d:
ae:27:54:97:10:f8:ed:f6:bc:a5:97:81:f1:fa:78:04:10:89:
43:e2:12:cc:0e:35:f3:11:6c:a0:4b:6f:8b:1b:6f:85:c5:8a:
69:b7:f8:f3:9e:74:80:92:d3:4e:fd:f5:dc:96:c7:1a:eb:d8:
09:02:ca:3a:1a:2f:dd:dc:74:7b:a0:8b:96:7a:cf:76:60:b8:
37:22:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:02 2025 by rpki-client