Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/1ab8ca35-d99d-3908-bc23-77b0dac1bed1.roa
File: 1ab8ca35-d99d-3908-bc23-77b0dac1bed1.roa (raw, json)
Hash identifier: VlIq7DUAzFW7C/Xs4HQmGGztbXl5pskxiy1IMZR7hnk=
Subject key identifier: 34:F7:0A:84:05:44:5E:43:B2:10:B5:4D:0B:BC:21:40:66:1C:0A:64
Certificate issuer: /CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
Certificate serial: 010D0C9F432858489075FB4D7835FF8A34703480
Authority key identifier: C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/1ab8ca35-d99d-3908-bc23-77b0dac1bed1.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 150698
IP address blocks: 23.173.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:fb:4d:78:35:ff:8a:34:70:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868a7747-d16d-4c1e-b36c-28d03effd7eb
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=a0de51a8-b1ab-4868-bc38-2d471a5e2be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:23:a5:55:17:b2:61:ea:61:bf:9a:37:50:46:
5a:f3:58:a6:63:eb:d5:68:62:5b:e3:b4:88:fc:24:
d0:a5:0b:75:bc:bc:5f:9b:95:ba:45:ae:ab:f2:d1:
c4:a7:ca:a8:d0:5f:a1:ac:c9:e0:04:bd:8a:47:5f:
39:c3:54:34:fc:14:a6:fb:0c:7a:83:d6:f5:8f:67:
a6:67:33:e3:b1:82:8b:8b:9f:61:82:31:a3:f3:9f:
dc:45:d1:d2:ba:01:b4:4d:30:3a:e8:1a:82:52:b1:
be:a7:b8:9a:d1:80:90:56:b3:1f:db:75:50:f2:32:
56:86:da:a2:ac:dd:80:78:b1:03:f8:a0:a1:19:14:
27:22:93:1e:bd:69:e8:2c:8a:86:78:93:49:88:ae:
97:d2:c5:07:d8:18:6c:ed:26:19:52:b0:00:7d:c6:
a0:9a:e6:20:ba:20:17:7c:5e:d5:a3:a7:53:56:48:
da:90:11:23:79:76:9a:7d:ac:c3:ce:20:32:80:e5:
98:43:66:62:bb:16:87:3a:6d:43:7e:d0:f5:6f:90:
4c:ec:0a:7b:5a:ca:81:ad:f6:47:53:82:2f:1e:e7:
74:94:dd:90:fc:34:25:7c:6b:82:27:95:fd:bd:d9:
58:91:3a:ba:4a:da:45:cb:d3:4b:81:f9:f9:24:40:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F7:0A:84:05:44:5E:43:B2:10:B5:4D:0B:BC:21:40:66:1C:0A:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/1ab8ca35-d99d-3908-bc23-77b0dac1bed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb/868a7747-d16d-4c1e-b36c-28d03effd7eb.crl
X509v3 Authority Key Identifier:
keyid:C0:EB:6D:CC:1A:A3:55:C6:38:2C:BA:06:CD:71:23:0A:77:F7:0C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/868a7747-d16d-4c1e-b36c-28d03effd7eb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:b4:44:cd:24:72:ac:11:3a:cb:98:97:f6:07:1c:3b:8f:a8:
14:df:b7:46:b5:d3:92:87:78:ab:79:f3:50:2d:0b:fb:97:b3:
80:22:89:81:90:28:bb:93:f9:1d:36:25:f9:66:4f:89:2c:e7:
ca:d6:74:5f:77:e9:6c:72:01:78:37:06:11:a5:e4:3b:5e:04:
e5:75:64:5e:ba:79:31:80:4e:52:26:6d:fc:94:7e:34:ed:6c:
30:c7:69:bc:e7:f1:20:62:0f:e3:36:d7:3f:42:1d:2a:e7:b3:
2f:5a:a1:68:0a:c5:4a:fe:6e:98:c6:3d:43:11:58:0c:93:37:
09:9f:1b:93:2e:82:49:ba:f6:84:d2:6b:ca:69:76:74:da:0b:
b6:ec:eb:07:e4:80:18:24:3f:6c:2f:72:71:43:d0:6f:1e:8f:
cc:b7:27:00:fa:03:96:42:b1:8e:52:63:fd:ff:a1:36:00:ac:
ab:cb:31:4f:53:82:6b:30:ca:4d:6d:b7:56:b0:9e:59:ce:b0:
59:fb:bd:ec:94:fc:01:2f:fe:5c:f2:3d:84:60:8d:f2:4f:d3:
03:3a:ad:e8:c0:ee:7d:10:ad:0a:72:ef:8e:0a:43:51:da:65:
b4:31:aa:55:2c:1d:a2:41:eb:96:83:26:c9:dc:4c:f8:ba:11:
b4:d5:b1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:32 2025 by rpki-client