Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/7b4949cd-e07d-3fe7-b451-318e4e4169d1.roa
File: 7b4949cd-e07d-3fe7-b451-318e4e4169d1.roa (raw, json)
Hash identifier: U/6GJXFicK5nB8Hzx3TFA1Kk60HqXL2mfB8NRSnRT/0=
Subject key identifier: 3F:D6:EC:E3:29:C8:F9:53:EA:2A:D5:FB:8D:4F:B5:64:C9:D9:AC:6E
Certificate issuer: /CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
Certificate serial: 010D0C9F432858489D05E9DFA6B0647DB3808300
Authority key identifier: 88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/7b4949cd-e07d-3fe7-b451-318e4e4169d1.roa
Signing time: Tue 21 Jan 2025 02:00:39 +0000
ROA not before: Tue 21 Jan 2025 02:00:39 +0000
ROA not after: Mon 21 Apr 2025 01:00:39 +0000
asID: 400476
IP address blocks: 23.132.248.0/24 maxlen: 24
2606:b740::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9d:05:e9:df:a6:b0:64:7d:b3:80:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3440eeb-3d7a-43e3-a0a4-fa9a993798be
Validity
Not Before: Jan 21 02:00:39 2025 GMT
Not After : Apr 21 01:00:39 2025 GMT
Subject: CN=cad495d1-3dba-4b51-9e1b-43b4a53d0eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a2:9b:03:7a:96:48:15:7d:40:33:e8:ae:6b:
0f:d2:4a:5e:95:e4:39:9e:a7:b5:c8:26:fc:96:49:
76:7c:08:90:84:12:a3:0f:05:7d:0e:e8:87:40:0d:
ae:58:11:7b:e4:24:7d:24:f8:1b:e8:a4:db:12:7f:
37:8e:b4:bf:bd:ac:6d:9a:1b:05:d8:a8:02:57:0f:
aa:23:ce:f4:0b:0f:7a:04:cb:94:18:7b:aa:07:14:
3b:5b:e7:f9:8d:e7:1e:99:38:33:69:34:94:2b:24:
6c:ac:a4:3c:99:0f:7e:f5:82:4c:73:03:87:02:fb:
82:4b:7b:2e:82:4e:3a:27:1d:0d:17:fa:61:25:39:
88:d6:50:8b:9a:9e:e7:1f:55:2c:e9:65:dc:41:b4:
bf:35:46:98:e2:4d:95:7f:4c:56:71:22:db:23:76:
79:a1:e4:53:e7:51:18:6e:b6:fc:0f:7e:71:8d:3f:
b7:46:7e:28:e0:13:21:10:7b:64:03:97:61:9e:a7:
06:2a:68:12:2b:b0:79:d0:13:39:0a:a2:06:f9:cf:
0f:e1:4b:c6:be:28:56:52:b1:a3:a0:b3:fb:52:c4:
85:ea:50:a4:a9:16:f6:54:73:56:73:a0:82:75:34:
e6:1e:68:38:1e:28:be:8e:71:df:48:16:14:7c:9c:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D6:EC:E3:29:C8:F9:53:EA:2A:D5:FB:8D:4F:B5:64:C9:D9:AC:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/7b4949cd-e07d-3fe7-b451-318e4e4169d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.crl
X509v3 Authority Key Identifier:
keyid:88:37:1F:6A:8B:BF:03:AC:B8:22:6A:5C:29:99:F1:0C:DF:88:BD:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c3440eeb-3d7a-43e3-a0a4-fa9a993798be.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.248.0/24
IPv6:
2606:b740::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:a4:52:07:07:ca:dd:68:8d:31:20:d9:6d:86:00:e8:be:70:
b7:ba:56:66:0b:5d:f0:28:7c:6e:87:fa:fc:3a:8f:aa:e6:37:
38:fa:5c:ed:70:35:ba:9c:8f:b6:73:e0:ce:a4:2c:d3:22:17:
d3:04:f8:82:60:56:ce:9f:b3:e7:32:d9:d8:8f:5d:c7:a8:93:
fc:9a:23:75:62:4d:b4:8b:71:5a:a0:59:3c:5b:9f:6e:ac:97:
a4:d0:92:19:b8:96:f6:61:cb:8c:e5:b9:d5:ec:8e:b1:85:bf:
d4:0b:25:33:a1:2e:a6:0e:ed:65:6e:6a:7e:5e:54:6c:e6:a4:
36:7d:62:dd:9c:14:7a:c6:11:7f:ad:5e:6e:7c:75:80:43:4d:
fa:79:ff:ab:80:0f:bd:18:bb:2d:d4:19:1c:d9:51:fa:58:a2:
1c:56:21:12:d2:16:58:4a:d0:a7:e2:09:25:84:44:c8:82:86:
73:cc:51:4e:08:42:a4:c3:00:98:94:3e:f3:0f:49:2a:85:5a:
a7:80:5c:26:76:82:7d:5e:b8:70:57:73:65:e7:4b:53:9e:20:
8c:ca:c1:e9:a6:0c:51:3f:12:bc:e3:8a:fc:79:c1:d3:e4:0e:
97:90:8e:35:ae:6f:76:9b:d8:d9:46:20:7d:d3:31:00:57:34:
8d:13:d4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:02 2025 by rpki-client