Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa
File: a05edcb1-cd53-3361-9a4a-f92812c5008e.roa (raw, json)
Hash identifier: mV7PImvFYXDC1EypdBSmvF6j8cX8alIlGWrw3LJfLwo=
Subject key identifier: DA:31:58:25:BE:4E:A8:11:33:8F:7B:A8:86:9D:CA:F4:34:0A:99:44
Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
Certificate serial: 010D0C9F432858492CAE7F39679804D77FEE8900
Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 400312
IP address blocks: 23.131.168.0/24 maxlen: 24
2602:fbf0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:7f:39:67:98:04:d7:7f:ee:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=02c3a6d0-271f-48cd-843c-ea55d8e0a54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:97:ef:4a:d9:6a:cd:59:c9:1c:15:04:44:
ad:4f:04:54:9c:a4:68:de:29:4f:0c:a7:18:c5:ec:
67:74:b7:72:9d:f6:ce:25:32:09:d6:70:39:8e:cb:
71:5c:f4:d1:08:98:7f:9d:d0:02:82:3d:31:eb:de:
60:cc:ff:07:f1:1f:14:ff:ca:36:03:aa:73:ec:eb:
71:aa:8f:14:2d:9c:32:5b:43:96:16:8e:35:7e:3d:
af:07:6f:35:d3:04:77:ec:bf:ef:d3:44:c9:b3:76:
2a:dc:e5:e1:d0:b0:d5:50:35:5e:c0:f7:92:68:ac:
fa:60:a7:62:60:f4:6e:34:cc:67:9f:0e:83:0f:dd:
bc:a8:0c:5c:75:ce:74:b4:0b:80:2b:b0:b3:a0:3a:
61:88:ae:0c:08:29:b7:22:80:2d:bf:44:73:56:82:
c4:7b:d3:f2:74:13:0a:b0:ed:2c:4a:a4:22:88:e6:
36:3f:ee:9c:fa:91:47:0a:28:17:d8:bf:85:62:85:
b2:47:e5:0b:04:09:ca:15:98:2a:5b:c4:95:3b:8e:
51:73:14:0f:61:3e:b5:22:98:66:eb:23:ba:3f:9e:
72:d8:bb:83:e2:2e:f6:a1:19:20:e1:04:24:7e:3f:
2d:84:6e:78:b7:77:9d:3f:b0:ed:d6:36:92:3a:09:
c6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:31:58:25:BE:4E:A8:11:33:8F:7B:A8:86:9D:CA:F4:34:0A:99:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/a05edcb1-cd53-3361-9a4a-f92812c5008e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl
X509v3 Authority Key Identifier:
keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.168.0/24
IPv6:
2602:fbf0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:b9:7e:d1:d1:bd:03:1b:f6:c5:a4:fb:90:54:ce:0c:c6:dc:
33:51:9a:9b:f6:d1:cb:0a:a0:fc:7b:a7:d1:74:52:74:0a:c6:
a6:89:a2:35:bc:e2:22:7c:36:46:c7:31:58:4b:3f:30:d7:0c:
98:75:cf:d4:7b:d8:2d:15:2f:8e:af:3a:b9:db:20:91:56:d8:
21:8f:67:80:96:01:c7:96:47:66:77:f7:04:0c:e9:43:5a:9c:
f1:01:e0:df:c4:bd:79:50:3c:83:0b:65:a5:45:66:05:cf:72:
59:22:f2:4d:a0:45:df:a0:ad:a9:88:d5:8a:7b:59:50:c6:28:
34:81:64:e6:70:99:9c:45:3d:b6:8b:1a:97:d6:9d:3c:38:0d:
ae:a4:10:14:32:b4:5b:6d:1f:a3:8f:2f:db:88:6f:0c:96:a5:
17:e1:c0:ec:99:b4:fe:3e:8d:18:d2:fa:b6:89:ef:d3:a0:1e:
d5:d7:29:82:a5:fa:e0:d2:8b:2b:a6:dd:30:f8:8c:ca:6e:92:
d9:a5:fd:88:12:ce:8c:4c:bb:77:d4:c5:7d:c1:f8:72:28:24:
99:b5:fd:0e:8e:3e:8b:6f:e4:a7:ef:28:04:b1:8f:25:43:86:
33:19:56:8c:fd:d1:50:df:45:79:dc:b6:8f:2c:b8:55:55:17:
07:bf:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:50:41 2025 by rpki-client