Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa
File: 543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa (raw, json)
Hash identifier: xjRGhWsxTSrekPWlOZuPKnjX8IGxr7166FRUk/U13Gk=
Subject key identifier: 7D:E7:D4:B7:04:4D:D0:63:84:66:65:89:F2:40:18:71:E8:7C:13:58
Certificate issuer: /CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed
Certificate serial: 010D0C9F4328584894A5ED447E2AEA81D0672FC0
Authority key identifier: 06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 46109
IP address blocks: 23.156.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ed:44:7e:2a:ea:81:d0:67:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=c6bfb390-b238-455f-a31f-e7ab20ce0868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:5b:5d:bf:8e:b1:e9:c3:70:e7:37:30:69:
a9:ce:df:b9:47:ec:ba:1b:d3:c2:fd:1a:74:88:1e:
e5:a2:53:e8:b4:16:50:80:d4:9f:d6:5c:52:89:ee:
de:30:55:38:24:ed:5a:43:05:9e:fa:d5:ab:20:d1:
d2:48:6d:5a:23:44:d4:d6:69:74:0d:1d:85:6a:5a:
f5:59:3f:7e:5d:4a:5c:72:1d:2d:ab:d4:9e:28:7f:
7f:53:21:92:ec:59:81:74:2d:f2:de:40:ae:89:92:
b1:64:e7:38:6b:67:cb:56:39:10:b7:78:aa:d0:21:
26:58:a5:a9:82:b7:25:29:c2:41:2c:1e:5f:4e:16:
75:14:81:a2:b4:d8:97:46:e5:36:f1:a5:76:54:7d:
3e:90:8e:46:c4:d4:96:9d:cb:58:73:3f:24:1c:4f:
60:44:13:8a:4c:e4:93:0d:05:f2:04:9e:66:11:97:
ae:95:90:c1:69:8d:a5:b7:87:a1:7c:6c:6f:f6:bc:
1c:1f:67:77:5f:02:b1:23:3c:55:72:e4:b7:a2:68:
76:66:67:c9:bd:58:74:a4:d1:06:46:83:87:12:de:
7a:9b:b9:2d:ce:c0:ac:2a:93:cd:32:37:49:1e:00:
1c:46:0d:cf:85:a3:48:ae:2a:5a:1f:aa:2a:96:9e:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E7:D4:B7:04:4D:D0:63:84:66:65:89:F2:40:18:71:E8:7C:13:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/543f2b9a-3539-3d5c-9557-9b937fc9f7a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.crl
X509v3 Authority Key Identifier:
keyid:06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:34:ba:b5:03:65:bd:d9:51:e1:94:dc:b3:fe:a8:12:d1:59:
b5:06:af:58:cf:b7:f0:75:60:24:dc:70:fc:90:91:45:7a:44:
ec:9c:b1:ca:a2:72:dc:67:4e:cf:5e:77:3f:48:09:54:22:96:
85:ea:1c:5b:2d:05:bb:97:d6:5a:b3:0d:68:fd:69:a7:3d:a1:
2e:4a:fc:f8:fc:7c:a0:dd:64:69:52:03:03:97:0d:ed:ac:a9:
34:c4:36:c8:33:95:10:c5:d2:7e:a6:64:87:ab:7a:14:9a:3d:
cb:b4:2e:e1:2b:b3:15:78:7b:f4:01:36:05:34:af:df:4a:b8:
ca:de:6a:4d:a1:87:83:77:3f:f5:ec:f8:df:80:af:a2:51:aa:
4d:75:04:56:d2:9e:ff:f4:82:a1:75:c5:a2:8d:ab:91:6a:88:
b6:ad:79:df:69:78:4e:d0:e0:6e:ce:f5:ac:a1:fe:47:58:76:
86:9c:93:68:f2:2c:c4:b5:e5:bc:c3:b3:15:4b:76:c2:f1:5a:
f3:0c:da:1a:bf:d0:5a:2c:0f:c2:a6:24:0e:80:2c:3b:ea:d9:
23:66:d4:19:5e:b1:65:fb:29:36:d2:7d:2c:ae:31:5c:15:04:
6d:74:7e:7f:61:99:0a:8e:f6:3e:49:61:4a:03:58:7d:fd:8a:
c2:98:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:12:26 2025 by rpki-client