Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f3af2bc-0a9f-3728-a0ff-3b1326aaae16.roa
File: 0f3af2bc-0a9f-3728-a0ff-3b1326aaae16.roa (raw, json)
Hash identifier: 7AJ1BZIIs5xL6I5sDeSs7ozytKIPiCgHwqOQkTeD7NE=
Subject key identifier: ED:B9:04:43:65:41:BE:77:F0:1A:9D:EC:AB:FC:06:F4:03:0F:A3:FB
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F43285848D0ABC12A7D53FDABEF7F3B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f3af2bc-0a9f-3728-a0ff-3b1326aaae16.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 44477
IP address blocks: 23.27.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:c1:2a:7d:53:fd:ab:ef:7f:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=e88da945-f111-4e66-b03e-21b231adbd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:b7:1f:f9:86:7e:ac:17:35:4e:80:8d:74:
48:a0:4a:6d:3d:24:5d:dd:e3:fb:d0:8b:61:ae:02:
97:1c:78:05:4f:59:56:b2:fd:25:6b:98:65:64:9d:
e9:2e:a8:08:03:90:0b:fe:a8:b2:e9:26:0e:b4:c7:
8a:5b:47:6d:27:f2:e8:aa:80:71:2d:3b:e2:4f:e9:
a5:fd:f9:7f:5c:76:16:af:7e:0a:ce:e4:49:d9:63:
2d:d4:a8:d1:da:69:7e:3f:b6:6f:d5:42:c0:f3:7c:
f3:8f:a5:35:74:c5:8b:6e:0d:e1:70:74:4d:b5:f5:
17:ee:7b:83:07:49:ac:1b:f0:90:61:37:07:0d:84:
a2:0f:0e:17:28:66:9a:18:bb:18:fc:ef:9c:42:fa:
31:5e:8e:f8:4f:ce:27:94:4f:55:2d:0e:52:98:33:
14:0c:78:19:b4:75:f8:13:6e:67:af:84:10:91:f6:
8a:91:cd:c3:6d:83:e2:fa:51:a3:35:72:a1:bf:60:
fb:eb:63:e0:83:34:1a:c4:ac:f4:a2:52:9d:af:34:
73:fb:02:6e:ea:23:23:7a:db:cc:f3:57:d1:d9:e9:
98:17:68:4c:a3:18:e2:11:8f:33:14:26:ed:42:96:
68:2e:6f:60:32:6f:d3:f1:a5:a2:12:2f:a3:b8:3f:
b6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B9:04:43:65:41:BE:77:F0:1A:9D:EC:AB:FC:06:F4:03:0F:A3:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0f3af2bc-0a9f-3728-a0ff-3b1326aaae16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:28:da:25:5a:a0:93:0f:22:d9:9a:d9:48:1b:19:a7:96:f3:
06:fd:51:bb:bc:d5:c4:e0:b3:49:45:11:2b:b3:d4:ca:5c:b0:
14:f9:53:6f:8e:66:44:fe:85:5e:dd:e3:d8:50:f8:77:d0:25:
24:c7:e9:42:f0:be:ac:d1:99:b2:31:cf:ec:98:21:be:2b:97:
e5:61:9b:3f:5a:68:35:de:e3:52:6d:9c:eb:cb:c2:d2:21:bc:
f3:15:cb:07:99:fc:53:53:fd:ff:85:df:22:bb:da:ad:ad:fc:
fb:7b:48:b7:ea:21:45:b3:e8:47:f7:97:be:d6:05:70:6e:50:
ab:43:a7:70:03:d5:53:c6:84:0a:9b:78:c7:3b:f5:7a:94:f5:
a9:cf:39:be:c5:1a:fc:e9:74:48:85:a1:1e:18:75:34:62:8e:
27:f4:91:8c:e0:51:e1:f8:c7:fd:fe:de:cc:eb:56:dc:c0:af:
be:77:8e:46:16:c1:69:22:04:84:2c:80:9c:ac:86:3e:22:b8:
f3:82:67:d0:bb:eb:28:e3:db:2f:84:9c:17:a5:70:80:a9:63:
33:5b:3e:51:48:10:22:b0:be:17:90:73:cb:c8:fc:d6:3f:7e:
53:1c:c7:74:09:68:e4:19:b6:ca:e7:56:27:fd:65:88:27:b0:
3a:2c:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:42 2025 by rpki-client