Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/33a015a4-095e-3a50-a4a9-f2c123ee9c71.roa
File: 33a015a4-095e-3a50-a4a9-f2c123ee9c71.roa (raw, json)
Hash identifier: YdbmrVb1cCMdipd5a8g41knEkC4O/0KXqr1/nW65PoE=
Subject key identifier: 5C:39:4F:4A:9F:31:9A:CA:9F:17:20:35:9C:F7:4E:CA:2A:3F:8D:3E
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584886B070B64670C144EEDF3B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/33a015a4-095e-3a50-a4a9-f2c123ee9c71.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 401152
IP address blocks: 23.27.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:70:b6:46:70:c1:44:ee:df:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=af047559-529e-49e7-8609-4e893504dc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:a1:93:67:4b:cd:90:7a:b1:78:3f:f6:9d:
69:68:48:44:43:c1:2a:eb:60:2f:4c:48:95:2e:93:
39:ea:f1:36:39:73:00:e7:71:c1:35:75:8b:d0:e2:
90:37:e9:0a:ea:7c:0b:7b:46:15:11:3a:ff:42:e6:
28:f0:57:df:94:61:e2:70:43:2c:ce:27:de:8a:91:
8f:dd:e2:f6:0a:6f:6f:02:f1:dc:30:3f:f7:ba:e5:
c0:79:c8:41:93:56:05:cd:3b:ce:87:1f:c0:bc:c3:
f5:21:ec:7d:ae:dd:6a:47:35:ee:05:a2:b0:f5:8d:
e4:2d:fd:70:36:84:25:1b:de:3c:4d:7e:33:2e:d4:
22:9e:57:dc:df:55:9c:a4:ff:cd:32:bc:6a:90:7a:
e7:d9:38:9c:a1:00:05:eb:ca:ba:69:b6:92:48:64:
1f:fa:54:d0:5f:33:31:f8:da:d8:5f:5e:a1:d3:60:
7f:98:b4:cd:26:cf:ee:8d:35:16:e7:b1:b7:39:df:
aa:14:f4:07:c5:c0:15:c5:f8:97:74:7d:9c:3c:d1:
b7:90:54:e1:b4:f0:ec:38:4e:a5:52:52:a3:cf:df:
a3:0e:8e:b4:20:f2:2e:4b:16:71:f1:61:d3:cd:f9:
b6:1e:7f:61:17:98:a2:b5:57:ec:f7:02:e6:66:90:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:39:4F:4A:9F:31:9A:CA:9F:17:20:35:9C:F7:4E:CA:2A:3F:8D:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/33a015a4-095e-3a50-a4a9-f2c123ee9c71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:dd:ba:f1:de:0e:81:7e:9c:83:29:fc:29:7b:19:c1:85:60:
fd:cb:58:71:90:61:06:46:a5:0b:14:6e:93:35:9a:9c:72:00:
9e:37:bf:42:64:6a:7c:d3:86:9d:6b:26:0a:f2:02:ce:06:ef:
99:95:ab:ef:73:90:b4:b1:8f:91:d2:0d:c2:02:b8:58:a6:87:
df:7f:60:45:01:bf:6b:2f:4b:24:76:f1:bf:ce:b3:33:d3:8d:
4f:75:90:22:04:ee:96:a5:d7:44:20:70:9c:87:df:b7:f9:af:
6c:de:51:c9:d1:01:00:c0:e8:d8:ea:a2:0d:42:8c:f0:e6:be:
05:47:a0:08:b1:0d:23:1f:da:80:2b:c5:c7:8f:30:9f:62:9f:
36:cb:64:01:b3:a6:90:ec:d2:d3:87:79:3e:2c:0d:37:10:b2:
25:0a:10:53:7a:72:fb:43:96:c3:83:fa:b7:65:60:ec:c1:57:
ed:6e:77:d9:c6:2b:aa:61:5d:84:34:32:20:3a:04:29:ac:f6:
fd:0d:01:53:22:bb:49:c9:75:d2:82:fe:8e:c3:e4:84:74:ac:
e5:a3:96:3a:b0:77:2c:8f:dd:28:78:32:c3:e0:97:8b:51:9e:
0c:07:14:6f:e0:58:f5:55:65:99:8f:19:89:ee:1f:4e:79:47:
f4:8e:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:54 2025 by rpki-client