Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa
File: 9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa (raw, json)
Hash identifier: i+acCBSIUbYbGqlwEZhU6lBaLvtAHBGWEkU+Wjo/lmo=
Subject key identifier: C6:3F:DD:84:5D:34:0C:29:67:F9:1F:08:0D:E2:5A:AA:D7:15:F5:87
Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
Certificate serial: 010D0C9F43285848C2B643A8DF6B21B6B6081F80
Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa
Signing time: Mon 03 Feb 2025 14:00:52 +0000
ROA not before: Mon 03 Feb 2025 14:00:52 +0000
ROA not after: Sun 04 May 2025 13:00:52 +0000
asID: 395494
IP address blocks: 23.139.104.0/24 maxlen: 24
72.19.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c2:b6:43:a8:df:6b:21:b6:b6:08:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
Validity
Not Before: Feb 3 14:00:52 2025 GMT
Not After : May 4 13:00:52 2025 GMT
Subject: CN=aaa7447e-49df-4fff-bc06-b81e2083df73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c9:88:6d:ea:3f:6f:e0:01:eb:00:18:e5:2d:
87:b1:2f:c5:d3:88:9e:98:b9:d5:7f:56:ec:ad:ff:
5b:a4:fd:80:ec:1c:bb:76:34:4f:9a:1b:ca:81:8c:
72:51:9c:0a:81:f4:ca:b3:1e:f2:1d:75:b7:e3:7d:
44:79:31:73:23:ef:e2:b1:ae:43:e9:9d:64:08:4f:
4e:36:f6:9a:37:0f:e3:60:e5:31:10:b3:63:77:62:
70:9f:2f:23:5e:3e:3c:be:8d:47:e2:ba:25:a7:b2:
82:bc:d9:6a:0e:ba:cd:cf:01:38:31:8f:3c:0d:0b:
40:a9:f2:5a:e0:b6:b2:f3:83:56:00:28:59:31:5e:
0d:cb:f7:04:8c:a2:d0:e4:0b:65:b5:32:dc:75:82:
0d:0e:d0:49:c7:41:d0:f9:21:28:5f:3d:ea:2e:49:
39:bf:b5:ec:35:a9:9d:66:d1:73:b2:a9:5d:c0:77:
9e:ee:3e:fe:f6:86:39:1b:f5:0d:a1:a5:ca:b7:e9:
5f:db:e7:c3:a5:e4:65:15:00:10:94:e0:c0:a3:12:
aa:46:23:82:72:35:e1:d3:2c:d0:53:12:25:8e:a7:
78:f1:50:79:22:55:b7:22:f1:0f:44:e9:5b:3b:b7:
c9:23:90:11:21:7a:56:52:e2:49:ee:91:fb:d7:ad:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3F:DD:84:5D:34:0C:29:67:F9:1F:08:0D:E2:5A:AA:D7:15:F5:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl
X509v3 Authority Key Identifier:
keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.104.0/24
72.19.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:42:46:91:77:9b:69:f2:48:3e:1d:17:9a:84:38:ff:98:f4:
6c:26:0b:af:84:87:52:58:b8:40:bb:0b:6b:e5:eb:60:f5:8d:
83:66:01:43:4d:56:39:95:05:c9:df:9a:aa:d6:09:b7:34:62:
4c:df:de:21:99:24:c1:b4:14:ce:ca:18:19:71:8e:68:c9:ea:
6f:dd:73:b9:1c:7c:80:a5:e2:87:7d:9d:f5:ac:de:e2:63:07:
27:66:c8:9c:e6:14:04:bf:a5:35:95:e7:51:43:4f:8e:39:05:
7c:a6:ef:74:2e:00:a8:aa:2f:34:52:96:f9:03:95:c3:53:fa:
53:5c:0b:8f:f9:98:4c:bd:19:62:8c:53:58:bf:3b:5a:7d:3d:
51:6f:56:9c:08:cd:82:1c:d1:bc:3e:32:6f:dc:3e:28:ab:22:
81:b4:6f:da:47:b9:9b:6e:77:4e:bf:30:06:e2:a4:06:c7:5f:
4a:8c:24:13:54:5e:ff:0e:0c:db:9c:48:58:7f:7c:72:8e:0f:
4a:38:8e:29:5f:34:2e:02:0d:41:a6:b1:f9:e5:e4:22:2c:1f:
22:a7:a0:83:5c:df:d0:bf:a9:f8:c0:d3:58:0f:1e:aa:a3:d5:
47:db:1f:35:94:2b:33:12:e8:96:95:f5:55:c9:fa:1f:a5:15:
2e:31:1e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:23 2025 by rpki-client