Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa
File: 19601375-8b5a-3c05-9dfe-bdc6f601106d.roa (raw, json)
Hash identifier: z9wGZyCsxcUo2wd/1QXye+1+gNaZ2/P/oIxVJzjAyGE=
Subject key identifier: 75:76:32:93:F9:9A:61:27:AA:07:19:E4:FF:4C:75:67:D7:1F:79:41
Certificate issuer: /CN=a1853cd3-3329-4b61-a321-f6705ea74197
Certificate serial: 010D0C9F43285849350EA7C1E41C81BCA03728C0
Authority key identifier: 2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 400554
IP address blocks: 23.134.120.0/24 maxlen: 24
2602:fb9d::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:a7:c1:e4:1c:81:bc:a0:37:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1853cd3-3329-4b61-a321-f6705ea74197
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=e3e94a27-c93c-4087-9db6-2c4386db8009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:98:ff:94:54:62:64:76:d9:dc:c9:9b:69:59:
bd:10:39:f0:e9:30:2f:37:87:6c:41:16:c5:8e:79:
68:96:e8:b2:29:d7:04:04:be:4d:32:72:f1:f7:c0:
b2:fe:e9:7a:d0:dc:4d:9a:ec:eb:8d:a3:84:9f:93:
7b:86:4f:30:61:63:bc:ab:5c:fb:a9:13:79:d5:74:
ed:8c:02:9f:61:f9:18:0e:c3:fe:62:3c:de:e1:00:
5c:3a:ea:90:c4:cd:70:92:98:bb:7f:b9:86:55:41:
f1:21:68:68:6d:3f:41:69:0e:64:d8:74:0f:2f:09:
0e:d5:a1:25:50:5a:45:ee:63:b2:0c:30:66:ad:e8:
3c:47:b0:ec:74:eb:e7:52:43:db:09:fc:a0:76:b8:
f9:fe:b1:dd:a5:94:ae:ac:cb:0b:48:a5:85:f7:88:
03:3e:cc:c7:14:fa:c8:ef:04:10:8c:75:a4:15:e3:
15:dd:f6:0e:da:d7:92:c6:2a:82:08:8d:f7:f2:2b:
4c:b8:14:85:62:63:82:b9:2d:6b:7a:60:c0:28:c2:
f6:69:ff:e2:47:ce:23:ad:b4:19:20:bf:b8:83:e1:
dc:75:6d:ad:b9:21:dd:c4:14:a5:48:ce:5c:bd:49:
31:9a:dd:6e:53:11:2e:5c:e1:b2:36:26:37:25:5e:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:76:32:93:F9:9A:61:27:AA:07:19:E4:FF:4C:75:67:D7:1F:79:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl
X509v3 Authority Key Identifier:
keyid:2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.120.0/24
IPv6:
2602:fb9d::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:d7:e1:e4:05:39:61:58:9b:55:f3:4f:4d:b8:6d:21:d9:aa:
4a:fd:aa:3b:33:cd:2a:02:b7:0a:78:26:c8:f1:55:80:30:3c:
f1:b7:cf:d0:b1:02:b2:22:c0:60:f9:ce:37:d5:3d:8d:31:1c:
2c:30:e9:f6:d0:d9:30:98:3d:5b:e3:de:5e:ab:34:a1:cf:45:
24:06:e4:25:1f:f3:ef:ca:9d:a8:86:b4:f5:08:8e:11:d4:12:
e1:c8:56:ef:e7:f5:ce:2b:fc:b7:ae:58:e0:23:61:13:64:7b:
fc:4c:f0:73:8d:40:73:dd:0b:e0:29:4d:a3:1d:be:ed:3a:d0:
29:d6:4c:04:4e:e7:b7:ca:11:69:51:35:20:26:9a:ac:1e:f7:
b2:ab:6b:6e:bd:6e:c0:94:da:4e:51:3a:e3:ef:14:7b:f1:03:
88:17:eb:af:f4:40:0d:b5:31:29:36:1f:c6:dd:49:93:fe:46:
ec:64:f0:99:57:f7:e8:6d:f8:95:8b:01:71:f1:2d:28:a6:1f:
dd:e1:ef:e8:52:ff:92:0b:7e:2c:59:96:4a:d9:93:b4:bd:9d:
9c:55:73:c2:7a:99:06:f2:5f:88:6c:73:e5:69:8e:b1:90:31:
7a:58:41:70:80:95:87:a0:85:66:c0:b4:11:d6:c9:a5:ad:04:
c9:06:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:43 2025 by rpki-client