Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa
File: 3d653275-34fd-30d1-9fbd-3fc5704add6a.roa (raw, json)
Hash identifier: JotQD+EFoGIAzYas5zFQqJC2HncOAXHi8EwH1Hg9YZU=
Subject key identifier: 9E:4A:C9:97:3D:56:4F:1F:99:BB:D7:0F:9C:C4:EB:94:0E:9D:F0:E9
Certificate issuer: /CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8
Certificate serial: 010D0C9F432858491246C807EC24641EDF63D240
Authority key identifier: 97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 400930
IP address blocks: 23.175.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:c8:07:ec:24:64:1e:df:63:d2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=6cb80d74-bdd2-4c7a-88af-7dfddd9bbd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:e3:09:96:81:13:00:5f:76:45:5f:35:09:
29:c2:8d:4a:2b:c0:a3:0a:7c:2d:ea:95:19:8d:65:
c1:46:21:ae:a8:c1:c8:64:5d:57:24:a0:06:3b:b7:
3a:27:2f:68:2b:d0:6c:ee:f6:7d:d9:63:7c:ff:ad:
8b:0f:cd:81:99:50:1b:c5:f3:e0:00:4c:85:04:40:
ec:2a:a9:e9:43:df:db:45:24:a1:f6:ba:f7:87:ab:
d2:04:c9:82:55:d3:c2:96:2d:69:cd:9a:31:0d:3c:
5e:80:6f:6c:54:5e:f4:a4:29:ee:90:a3:53:12:1b:
40:3a:76:a1:20:7e:88:7f:6c:cd:3e:3b:43:a1:f8:
e4:a1:28:db:16:37:02:dc:f5:9e:34:5a:7d:06:b9:
df:17:44:ab:f9:7d:65:c9:f5:f0:f9:bc:11:b4:0f:
95:23:6b:8b:b4:fa:7c:be:c0:17:9f:be:ee:c1:a0:
25:95:d6:7a:70:4e:c0:34:12:47:6b:c6:43:25:52:
0e:a6:1c:b6:c7:65:09:fb:97:8e:61:cf:8b:13:67:
e1:13:73:96:23:47:87:59:d7:e7:d3:f8:38:b7:28:
70:b1:87:cd:3a:aa:1d:51:02:ac:07:c9:03:e2:18:
d0:3e:f8:d1:b7:c6:3e:01:e7:43:e0:e4:95:f8:b7:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4A:C9:97:3D:56:4F:1F:99:BB:D7:0F:9C:C4:EB:94:0E:9D:F0:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/3d653275-34fd-30d1-9fbd-3fc5704add6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.crl
X509v3 Authority Key Identifier:
keyid:97:53:6D:D7:24:15:39:B2:54:86:F2:25:37:FB:62:7D:CA:AD:42:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2224a0f3-ed0e-4f52-a7d4-5f2b5048bef8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:e7:be:c5:b3:e7:2f:96:4e:12:d7:6e:f9:63:f6:f8:9e:18:
7c:63:7b:38:84:6d:14:dd:dd:96:d6:14:73:7b:3c:9c:f2:51:
32:20:07:e5:06:f1:e8:ac:0f:ef:89:8f:15:e4:96:a5:d6:12:
d5:1d:1c:57:ae:dd:a9:07:cf:d5:b8:04:f5:fe:c8:97:55:2b:
87:89:4f:3d:20:71:26:df:98:63:9d:2f:99:c1:6c:b8:e4:87:
62:af:cf:32:de:0f:7f:d7:6f:37:b3:ba:45:95:4e:ee:0c:07:
cd:54:6e:0e:3e:9b:cc:92:d9:e8:e0:a6:46:f6:be:5c:05:b3:
51:fc:ae:f3:77:be:a5:5d:3f:ab:e5:4e:ed:77:db:88:a8:56:
96:7b:dd:c8:09:13:ae:e0:e8:f5:31:99:d8:3a:d5:2c:8c:f6:
99:b3:be:f7:0c:f8:f5:ca:66:86:df:cd:c3:09:d9:9f:d6:52:
e5:c6:65:44:9a:71:88:42:14:0d:c5:04:37:2e:dc:d9:b4:bc:
cd:f2:6b:95:8f:e5:11:78:93:32:b6:57:3c:6d:fb:16:99:9a:
ab:6c:13:8f:b5:99:34:b9:7c:b1:16:4c:13:11:1e:89:88:36:
66:69:a6:be:4e:e0:22:2a:a6:70:12:23:cd:3f:75:50:f9:4e:
61:43:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:24 2025 by rpki-client