Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa
File: 14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (raw, json)
Hash identifier: xT/2haW4LzGnDmDXbOL/VQuPv9rn0WUW3WJJSYEmnnY=
Subject key identifier: 54:A2:4D:E2:26:FE:90:A5:7B:CA:1F:60:B8:4A:CC:B7:23:36:7C:66
Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
Certificate serial: 010D0C9F432858491AA6D119EAB123A173980C00
Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 40569
IP address blocks: 23.171.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:d1:19:ea:b1:23:a1:73:98:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=6caeb3ee-ce60-4ad9-b935-b4e3097b3b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:72:3b:4b:28:b8:e9:f1:d0:84:7a:63:89:
7a:e8:12:a4:e2:58:5d:0c:29:14:b0:9d:0f:36:9f:
e0:30:a0:95:b5:a8:a5:30:49:89:01:94:f4:46:18:
52:d2:bb:60:58:08:66:0c:1e:f7:f4:cc:00:9d:50:
1e:49:15:10:9a:0a:6f:cf:16:36:b8:cc:72:30:bb:
11:62:c9:69:26:eb:52:49:8e:62:d9:d6:9c:ec:be:
79:d8:bd:4b:db:a7:b4:cb:ad:eb:59:d2:25:27:a2:
e6:d2:ce:53:d9:0a:b2:5b:fa:bb:86:44:ec:6b:26:
fd:65:f0:a8:14:d4:21:1a:16:db:b6:1c:9d:9c:c7:
93:9d:d4:38:c5:e0:15:85:38:7f:27:73:8f:67:8b:
29:9a:40:37:86:8f:a9:cc:da:f4:8a:0f:6c:a5:43:
a7:ca:67:e6:9a:65:7a:54:14:1a:95:aa:76:5c:4c:
e9:ac:12:b3:2c:c8:97:e8:c5:49:f3:cf:6a:a1:65:
89:bc:0a:bd:f6:b0:d9:dc:c6:ad:27:b3:84:84:7f:
46:a9:69:87:1c:f7:ca:52:fe:08:b1:6d:14:5f:85:
1f:cf:6f:39:0d:97:9d:bb:f5:30:0e:56:a2:1e:b7:
e0:c2:10:d9:fd:f1:6f:18:35:de:a9:82:1d:c1:3b:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A2:4D:E2:26:FE:90:A5:7B:CA:1F:60:B8:4A:CC:B7:23:36:7C:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl
X509v3 Authority Key Identifier:
keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:9f:a2:1b:fa:72:0d:ed:7d:56:a9:7f:71:97:d4:b5:7f:7c:
ae:95:61:8b:69:bd:d7:a8:e3:7c:10:ce:ba:5e:83:88:bc:b0:
65:90:3f:06:9d:cd:aa:65:82:41:8d:7f:7d:b9:71:ed:23:d0:
a2:73:97:88:f2:f9:e0:1b:3e:6d:1c:40:09:b7:a5:8d:01:c4:
67:78:7d:79:75:89:25:ac:1e:c3:0a:35:8d:6c:8c:03:7f:2a:
77:06:05:3c:0d:a6:97:c4:3a:df:72:7b:43:cc:3f:81:74:73:
02:b8:bf:0e:01:2b:58:3c:e6:44:98:7c:b9:db:08:81:ab:1d:
5b:4b:4b:45:67:54:6c:ee:96:5c:d6:d6:1d:7d:a2:e2:1d:c4:
08:72:7b:4b:3e:ca:db:94:5f:32:ef:d0:7d:d1:e5:aa:93:32:
7f:f8:69:70:6a:62:d7:54:5f:d2:20:dc:36:d8:d2:ea:d9:e0:
86:ef:a9:51:2e:47:f6:7d:b3:26:76:bc:60:a5:d0:11:62:1f:
bd:db:1a:04:b0:bc:bf:4c:e0:11:94:d6:1f:da:6f:bd:2e:9f:
c1:98:b2:55:6e:c0:82:db:62:bd:18:b3:16:5b:ce:ea:f5:48:
70:ff:a2:b6:32:40:98:a2:62:e8:15:d4:6b:6d:54:c8:c6:16:
77:e2:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:44 2025 by rpki-client