Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa
File: dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa (raw, json)
Hash identifier: lZxGuhFTKlAbmwMeg4Tt/ILWLZMYXdN6aKL1Dh4himw=
Subject key identifier: C5:C8:95:C8:B0:9A:0E:67:5D:9C:9C:27:AA:33:B3:8D:EB:3B:61:7F
Certificate issuer: /CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
Certificate serial: 010D0C9F432858492CAE8D15F9E6B9425053E0C0
Authority key identifier: F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 53654
IP address blocks: 23.171.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:8d:15:f9:e6:b9:42:50:53:e0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=d6a1100a-9d79-41ba-8391-2a47c0ba01a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:78:48:8c:1e:89:64:c4:83:3b:76:b7:2e:
7a:5c:d0:78:50:5f:ac:88:42:ae:00:18:4d:f0:22:
3f:30:2e:f1:e1:ea:d3:19:fb:d1:39:a3:82:82:ac:
9c:7b:3a:76:9a:4b:47:66:44:cd:fd:01:b1:3a:05:
cc:ce:21:f8:e6:be:fd:c4:70:e2:ab:02:12:b1:8f:
02:c8:d6:f9:aa:8c:cd:c2:33:5e:74:c7:ba:5a:25:
78:34:1a:aa:5a:9a:9b:7a:04:55:f2:90:ae:93:d7:
5c:eb:6e:6a:d6:99:14:9d:4f:f0:17:5f:83:20:fc:
e6:52:3f:20:ce:67:5b:54:76:ec:8c:a1:28:95:1e:
6e:bd:c0:f5:45:9a:25:d9:1d:59:25:fd:04:53:f6:
21:38:7e:ea:ec:d3:3c:e6:4e:ab:fa:f1:27:fe:51:
6c:b2:31:f7:de:7a:c5:5b:f4:1f:14:13:1e:1c:0d:
28:8e:85:38:ea:46:d8:31:44:73:1f:3f:4b:8c:00:
4d:d7:03:82:cd:e1:30:28:14:e0:ea:36:33:ca:56:
49:9e:16:48:08:f6:03:ea:06:6d:30:c4:d7:3b:97:
c5:a7:9f:53:37:9d:3b:79:bb:0e:64:32:b1:7e:b5:
d5:c2:bf:b4:92:96:3f:46:0f:6c:1a:45:16:3b:90:
24:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C8:95:C8:B0:9A:0E:67:5D:9C:9C:27:AA:33:B3:8D:EB:3B:61:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl
X509v3 Authority Key Identifier:
keyid:F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:dd:b7:db:52:4c:95:89:b9:0e:8f:d6:d3:c1:4a:67:5e:49:
a7:c2:6b:32:cf:bf:eb:da:9d:32:9b:4c:fb:a8:d9:45:e3:cf:
1c:04:37:ae:06:7e:24:bd:bc:c0:9a:22:46:52:1b:1e:f3:01:
79:dc:67:11:bd:02:0c:67:86:79:c0:9f:51:85:40:d5:b2:24:
58:be:71:f5:8d:13:6f:33:2e:95:0e:d1:f6:10:37:c4:89:19:
da:82:e0:16:b6:61:08:6f:f4:7c:e8:78:7b:e9:f9:54:70:12:
bf:0d:2b:be:d8:8a:00:b1:9f:75:38:40:f8:b5:d1:0f:90:2b:
c6:ba:b8:81:25:4d:e7:c1:50:fd:01:fb:f7:56:da:b0:1d:26:
2d:7e:43:45:db:63:f9:58:d3:d0:d3:d7:15:7c:73:a4:a4:63:
dc:9d:14:47:0b:de:69:43:4b:33:e8:6d:7c:3d:ff:04:df:5c:
0c:58:3f:dd:5f:4e:4a:3f:e2:6a:84:0f:aa:4b:12:45:19:56:
0b:01:ed:39:2d:0c:ee:62:7a:95:1c:31:66:cc:a4:fe:2b:4e:
c1:94:9d:d1:e4:a4:19:a9:99:b6:d5:40:aa:8c:62:11:6d:0f:
4f:1f:6d:66:b2:14:7f:3a:37:3b:a7:33:40:ea:7d:68:f7:fd:
54:dd:d0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:37 2025 by rpki-client