Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa
File: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (raw, json)
Hash identifier: 8mI1mAFvRjR7sgTriloSwnt7WlUx2giXk2PQpU+WO7E=
Subject key identifier: 24:3B:5E:E3:A7:4D:99:1C:81:C4:DF:60:8A:70:C4:B9:4B:3B:35:D4
Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3
Certificate serial: 010D0C9F432858492E13BF7DB7EE29522DC24170
Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 397646
IP address blocks: 23.137.208.0/24 maxlen: 24
2602:fdcb::/36 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:bf:7d:b7:ee:29:52:2d:c2:41:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=0a756c83-e316-457c-9fb3-a3d3e9f21a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:d9:8b:e6:ba:0c:8e:50:fe:9d:d8:ab:7a:
b6:03:3f:ee:04:f8:21:8f:bf:7d:41:0c:53:57:75:
8c:0d:8a:df:2a:bd:8b:e9:22:38:60:17:75:10:20:
a6:96:02:4b:30:ce:25:ca:ff:aa:97:36:99:b8:6b:
c5:c0:c6:58:5f:ed:55:6a:5a:d4:8c:2a:81:a3:09:
cc:54:d4:50:14:27:4c:9e:61:f3:7a:36:44:c6:02:
f5:55:72:90:55:31:d4:65:ac:ce:a6:a8:45:36:97:
e5:f1:48:28:f9:26:15:9e:7c:f7:ae:64:51:46:32:
33:90:2f:4c:ca:0c:ff:54:09:ec:e9:77:c0:a4:b2:
67:83:ff:36:16:97:4c:1c:81:ce:4b:10:bc:2c:14:
aa:f6:09:13:3d:a4:25:7e:ca:ec:59:0d:b3:fd:b5:
1f:d4:c8:f3:7a:b7:8b:95:01:45:d0:4d:69:3c:39:
f3:cd:41:a6:c1:98:60:c3:5a:f8:0c:34:47:0a:8a:
34:50:35:d8:52:9f:95:b2:1c:7c:fe:a6:32:02:e8:
7e:10:b0:c7:6c:a4:0e:c9:94:57:7b:8f:44:b5:3c:
a8:27:48:5e:07:35:3c:14:9a:93:b7:cb:a2:6f:d2:
54:df:50:42:00:d6:05:34:8c:30:9d:8a:9f:24:2b:
6e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3B:5E:E3:A7:4D:99:1C:81:C4:DF:60:8A:70:C4:B9:4B:3B:35:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl
X509v3 Authority Key Identifier:
keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.208.0/24
IPv6:
2602:fdcb::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:3a:0d:4a:0b:8a:d4:75:c8:c5:45:95:6e:02:6c:b0:2e:fd:
ff:2e:3d:64:27:a4:a3:2e:8d:07:bd:d1:30:6c:f3:c1:07:b0:
1d:36:13:9b:85:26:f7:35:29:c6:0b:ee:f1:76:78:43:3d:7b:
fa:44:97:44:3d:e8:d2:9a:6a:9d:33:ca:29:34:a0:74:4b:1e:
23:6c:39:b6:df:36:48:8d:d6:45:32:5a:78:c5:83:d0:e6:e0:
5b:b6:6e:f1:9b:e7:d9:73:14:e0:d2:d5:b5:70:7c:9a:dd:fe:
d7:3c:d8:10:60:58:3a:0b:d2:7a:f6:e4:4c:53:01:ff:a0:84:
d2:ae:06:a4:e7:05:c7:c0:01:02:6f:3d:45:0f:e3:d7:5f:1a:
df:78:77:6c:56:2f:44:f2:21:d0:38:2f:29:be:5a:2d:b3:d7:
27:80:70:0c:c0:2a:37:90:98:81:fa:0a:9a:ed:c2:b4:9b:3c:
ca:87:77:04:88:01:dc:bd:3c:9c:40:23:a3:16:7e:ad:68:91:
37:2c:5b:15:a7:ce:c7:c6:fb:34:76:08:5e:a2:f2:d2:46:43:
76:9c:fa:63:56:22:84:b8:5c:d6:5e:ec:19:1f:16:cd:e0:7f:
77:9f:c4:00:23:47:d9:45:22:36:e5:72:86:f4:7d:10:c8:53:
84:c3:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:36 2025 by rpki-client