Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa
File: 31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa (raw, json)
Hash identifier: 0gRD7AZ8aK7QxZTY9E3wiJm3LGwMtZYQ0O/t4eI80QQ=
Subject key identifier: E8:AB:46:9A:A4:BD:9C:05:E5:BC:83:CA:6F:67:2F:DE:75:30:F3:02
Certificate issuer: /CN=dbb1226f-fd99-41be-a461-4cbad0381988
Certificate serial: 010D0C9F4328584921841005978F1F175AE95BB0
Authority key identifier: DF:51:B7:F5:5D:AD:FC:71:1E:63:10:E7:83:2C:53:B1:B5:75:31:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 396997
IP address blocks: 23.155.96.0/24 maxlen: 24
2620:54:2000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:10:05:97:8f:1f:17:5a:e9:5b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb1226f-fd99-41be-a461-4cbad0381988
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=414c563d-8878-46b0-9773-86c0f7a2fbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:5c:dd:4c:8d:af:5a:14:16:9d:78:2b:a1:
07:fb:79:25:41:57:ad:a2:fb:6f:37:7e:23:7f:82:
ae:f8:b5:ba:44:57:32:99:34:7d:70:22:1a:d1:2d:
d7:86:c5:5f:40:ce:9f:f3:2c:b4:a3:b7:4d:ce:a1:
38:0d:6f:86:fa:93:84:b9:03:b2:af:42:b2:af:b5:
18:e2:7e:e9:19:38:fc:57:08:ae:66:dd:e7:14:05:
ed:37:de:5c:5a:d2:bc:4f:30:3a:79:fe:70:06:97:
65:ff:d3:4d:f6:bf:30:ba:0a:20:26:d7:ad:4c:dd:
6c:be:c3:76:63:c3:e7:86:ae:e6:c0:7d:c4:ad:9d:
66:36:59:36:70:9f:ba:12:24:f0:02:32:20:3f:24:
8d:0f:2c:7e:91:46:4a:9d:a7:08:8b:b8:2a:35:24:
75:ce:ee:6f:1c:1c:10:da:a0:fe:e3:08:bb:f6:f1:
94:67:17:9b:27:0f:96:98:b2:2a:86:02:63:02:04:
29:6e:d5:18:bd:70:db:fc:9b:b7:61:1f:80:ac:8e:
94:d5:6e:51:94:36:f0:68:92:7e:be:2b:53:c3:cc:
6f:ac:1e:b0:82:2b:d9:d2:99:34:2c:8e:d9:8d:c0:
4d:6e:7c:b2:4d:9a:f8:4e:07:a0:8e:a9:c9:95:15:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:46:9A:A4:BD:9C:05:E5:BC:83:CA:6F:67:2F:DE:75:30:F3:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/31b0138f-6e8b-3a2f-bdb6-6ab629047770.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988/dbb1226f-fd99-41be-a461-4cbad0381988.crl
X509v3 Authority Key Identifier:
keyid:DF:51:B7:F5:5D:AD:FC:71:1E:63:10:E7:83:2C:53:B1:B5:75:31:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dbb1226f-fd99-41be-a461-4cbad0381988.cer
sbgp-ipAddrBlock: critical
IPv4:
23.155.96.0/24
IPv6:
2620:54:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:8c:98:7b:6f:fc:fc:8d:ff:02:0a:26:ad:9f:c7:01:8d:3b:
eb:7c:23:7b:d1:9f:87:f3:a1:e6:f9:ea:ed:77:97:55:97:00:
19:25:e7:37:61:4e:8b:3e:72:3b:89:56:75:73:f7:d5:ce:60:
24:d8:dc:b0:72:31:3e:b0:e1:1c:5a:5b:a3:2c:3a:41:1b:92:
ab:f1:b8:8b:55:e9:d0:a1:00:aa:10:58:ca:ae:65:73:9e:a8:
fb:14:cd:a6:52:b8:01:69:1f:5f:5f:19:73:34:5a:ce:62:00:
0d:bf:f8:af:05:69:33:2e:34:f2:55:7b:12:7f:4f:d7:97:f2:
bb:aa:06:8d:33:e8:9c:dd:9e:be:0c:7d:0b:87:0a:6f:b8:ca:
00:e5:d0:b0:ff:72:06:c8:cb:9a:1d:fd:e7:17:e9:30:21:9c:
03:73:52:4d:88:5a:b6:cb:d7:89:99:39:3f:f5:1c:2d:2b:04:
7d:89:1b:71:2c:8b:4a:44:5f:24:f4:dd:81:0b:bd:ac:2f:8c:
e4:c4:f9:f4:c7:2b:50:69:f0:dc:b3:30:71:36:cb:6a:c4:ab:
ce:8c:32:db:14:ff:b4:c3:ed:5d:06:d9:7f:e3:98:b1:f9:c9:
db:5a:f1:8c:6c:6b:75:9b:88:27:2e:bc:cd:02:bc:21:c7:0c:
07:44:e6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:27 2025 by rpki-client