Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/9b457f5e-c29c-3e0c-95e2-54c237208382.roa
File: 9b457f5e-c29c-3e0c-95e2-54c237208382.roa (raw, json)
Hash identifier: K/LX5n8FPXZsQwkR35V1kELbkobQxSEW+82+9qxkbAA=
Subject key identifier: EE:F4:BD:21:CD:A2:D8:33:F2:9B:8B:7A:6F:BD:52:34:62:7E:9D:66
Certificate issuer: /CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Certificate serial: 010D0C9F43285848F32B6DB87BE37AFC3F5ACD80
Authority key identifier: FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/9b457f5e-c29c-3e0c-95e2-54c237208382.roa
Signing time: Thu 20 Feb 2025 22:35:49 +0000
ROA not before: Thu 20 Feb 2025 22:35:49 +0000
ROA not after: Wed 21 May 2025 21:35:49 +0000
asID: 394256
IP address blocks: 23.83.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f3:2b:6d:b8:7b:e3:7a:fc:3f:5a:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Validity
Not Before: Feb 20 22:35:49 2025 GMT
Not After : May 21 21:35:49 2025 GMT
Subject: CN=b29c27f8-711d-4d28-95af-397422d1e08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:8c:17:77:d5:c4:80:f0:79:89:56:d1:13:
3f:c1:fd:a4:c3:fa:37:b9:51:42:ad:f4:c2:88:55:
1d:eb:af:9a:dc:85:5a:22:3f:d3:af:fb:3d:d6:22:
37:b1:88:88:92:cd:13:13:f5:73:01:88:5a:5d:90:
c6:a7:e3:1f:33:69:23:93:db:4f:b2:b8:8c:f8:f9:
12:44:9c:5a:6e:bc:50:af:a9:36:c8:72:b3:40:5c:
a2:3e:3e:cf:3d:42:76:86:81:e7:50:60:b1:b5:d1:
88:55:c6:9a:3c:d5:00:70:d5:1f:50:98:8e:64:73:
8a:a5:7c:3e:8a:7e:ef:cd:3c:80:8c:79:63:27:ed:
99:ad:4b:24:f4:8f:da:de:2c:32:2a:f8:ed:a8:fd:
82:55:64:ba:fd:54:be:f6:e7:74:a5:29:f3:92:1b:
a7:e9:d4:93:f4:78:ec:e1:2a:99:4f:dd:e4:bc:1f:
b4:a6:72:bb:c7:c9:c8:e0:14:2a:f4:c0:5a:d7:9b:
a9:b3:2c:3d:44:da:45:da:bc:00:7d:09:06:ec:ca:
a9:22:e1:3c:b5:8f:82:5c:90:c3:0a:0a:5a:7b:3f:
bf:36:32:b1:9a:76:a0:d3:7f:a6:57:41:71:2b:69:
8a:5b:b5:d0:b0:24:f2:43:db:25:bd:cf:d0:86:4e:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F4:BD:21:CD:A2:D8:33:F2:9B:8B:7A:6F:BD:52:34:62:7E:9D:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/9b457f5e-c29c-3e0c-95e2-54c237208382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl
X509v3 Authority Key Identifier:
keyid:FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
sbgp-ipAddrBlock: critical
IPv4:
23.83.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:71:d1:6b:93:5b:69:f7:df:95:b6:b5:f1:8e:7d:aa:cb:c9:
8e:23:46:b5:4c:30:4f:60:ae:b3:4e:6b:f0:7f:5c:3c:70:f6:
b9:a3:9c:da:1c:91:17:d4:7d:b3:10:1a:df:cc:3f:4e:e3:be:
32:ab:e5:50:2a:34:77:70:88:14:90:1c:68:f9:bf:1a:0d:8d:
be:62:16:84:fa:3b:50:a9:46:9e:33:04:b5:47:56:be:2c:f1:
b8:f6:59:f8:9f:12:d6:a7:c6:44:00:53:6e:08:06:4e:60:50:
75:5b:1a:5e:3f:3c:ad:b2:5a:e0:53:b2:ad:71:97:e3:43:fc:
e2:10:94:e1:94:70:2d:f5:20:7b:80:4e:aa:9b:7a:19:33:14:
20:6c:4b:9c:18:fb:78:21:2c:68:14:26:63:88:29:f7:1f:cd:
c1:19:0f:77:d7:4f:c9:77:62:05:26:ce:98:4d:22:35:ce:84:
12:ac:e4:6a:ad:6f:02:0f:f1:6a:95:b5:ae:c2:b6:d9:50:a2:
10:76:74:b7:61:d4:03:36:6f:d2:36:4f:2b:9d:a2:da:17:f1:
3c:b3:d3:90:86:58:23:1c:a0:70:e0:d9:11:90:d9:13:98:38:
6b:0c:ad:6b:92:ba:cf:c5:2f:bd:44:73:0e:e6:dd:6d:fc:95:
dd:a1:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:31 2025 by rpki-client