Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa
File: 77adbc7d-1a74-3f6a-936e-813416ad3582.roa (raw, json)
Hash identifier: x9Y7OtWwSzYw2n5z7fLzJ6hcZoUIFwvb3tC9iPNM5Xg=
Subject key identifier: 1C:88:0C:CA:4E:43:58:F7:E2:78:D2:52:3B:7E:1B:42:FF:C1:E5:66
Certificate issuer: /CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
Certificate serial: 010D0C9F4328584913AC1AA485A62B39D53E0200
Authority key identifier: F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 397142
IP address blocks: 23.163.32.0/24 maxlen: 24
192.251.149.0/24 maxlen: 24
198.99.80.0/22 maxlen: 22
204.107.184.0/24 maxlen: 24
2605:b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1a:a4:85:a6:2b:39:d5:3e:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24a40f6-23ba-4adf-a2a5-42e2fff42c08
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=b7acc587-b883-4645-aeea-990df437e8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:0c:21:b6:78:b0:61:36:32:17:10:40:4e:
38:a2:b8:11:b8:ea:de:b4:ce:69:00:3b:37:39:a8:
39:77:30:ee:5c:03:df:83:11:b4:42:6c:6e:74:02:
b6:14:12:71:eb:ea:d8:7c:16:30:99:66:58:2a:d9:
5f:ba:ce:4b:41:21:34:fd:4e:2e:06:ec:a6:bf:b5:
09:a1:ef:74:b5:66:d5:4d:84:26:6f:0d:92:6a:2e:
dc:80:a8:f2:ae:87:c3:67:76:fb:72:d0:fe:2e:2e:
07:5a:ea:e4:a5:c2:62:76:3c:8c:b4:c4:9e:30:fe:
cf:81:8c:f0:47:2a:e8:58:d4:ae:f1:7a:00:6f:6e:
b4:49:de:44:f9:c9:96:01:39:83:81:f5:79:9e:b1:
c4:e5:9f:30:b4:8e:44:f8:bd:50:8e:34:4e:9a:fa:
b6:a4:8a:0e:1a:09:9b:17:41:94:0d:d1:43:2f:0d:
e9:8e:39:b7:26:28:7e:07:2f:4e:45:98:08:96:75:
f3:d8:f8:c9:c5:cd:10:ad:3b:04:04:74:07:d9:bb:
bb:9d:7a:dc:d4:02:97:ac:8c:fb:90:d3:86:3c:73:
31:36:a7:50:8b:62:9e:85:f0:37:46:47:90:d7:a3:
05:6a:aa:60:e5:79:16:84:d2:82:6d:44:b3:fd:15:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:88:0C:CA:4E:43:58:F7:E2:78:D2:52:3B:7E:1B:42:FF:C1:E5:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/77adbc7d-1a74-3f6a-936e-813416ad3582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.crl
X509v3 Authority Key Identifier:
keyid:F8:E4:B8:57:4D:A9:93:5B:26:69:C6:3A:4A:0F:C7:B9:E3:51:F9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c24a40f6-23ba-4adf-a2a5-42e2fff42c08.cer
sbgp-ipAddrBlock: critical
IPv4:
23.163.32.0/24
192.251.149.0/24
198.99.80.0/22
204.107.184.0/24
IPv6:
2605:b40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:64:6e:2f:3f:8e:dd:2f:1d:82:4d:2c:b4:e5:9d:76:05:c7:
a4:f9:1e:a1:4e:dd:f4:78:0c:4d:35:06:46:77:95:89:ed:98:
2a:f4:fa:a0:e7:f6:0f:d8:a9:d2:a4:5b:68:8c:80:21:31:7e:
c4:2c:4f:be:07:13:cd:0f:27:50:56:6e:f8:d6:16:f7:c4:40:
c7:14:3f:1e:84:03:7f:1b:11:6d:4f:66:92:75:7f:a6:32:dc:
aa:f8:16:ef:b6:14:45:95:31:a6:91:46:ee:70:14:4e:b7:7f:
44:21:8e:70:23:2d:93:ae:0c:d3:47:dc:31:08:aa:25:1f:fb:
a2:d9:33:19:dd:e2:e5:08:07:d6:db:30:50:5e:d6:ca:c0:79:
02:e3:b4:fa:52:ac:83:f3:68:02:81:36:51:bd:7e:40:e9:27:
2f:a6:ba:d6:8b:ee:e2:1d:02:26:ea:85:a6:fd:1b:37:bc:73:
38:9b:16:8d:06:12:40:e1:2d:a7:ef:04:e6:e6:3e:c1:a0:22:
d9:99:e6:1d:a3:c1:d6:a6:8c:0d:2e:2a:38:36:2c:7e:b2:e3:
1d:ea:f5:06:e8:b8:37:10:64:25:06:54:a6:41:14:85:99:26:
bb:97:71:86:9c:d6:e0:7d:a7:0f:5d:0f:bd:cc:9d:53:00:05:
8f:4e:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:58 2025 by rpki-client