Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e/e67d2f59-104a-3de2-b1a9-c959919eaa4d.roa
File: e67d2f59-104a-3de2-b1a9-c959919eaa4d.roa (raw, json)
Hash identifier: 2YWs0fHGTrFpMPdfvK5QYAwjYHYEpqQFtdCzO9HSqx0=
Subject key identifier: 01:66:5B:AC:80:60:B4:45:86:5A:02:1E:6B:A7:78:95:E1:BC:E6:27
Certificate issuer: /CN=8230a7e7-95fe-4676-aaf3-5ede9bacff5e
Certificate serial: 010D0C9F432858488998E777E2392F581CB2EF80
Authority key identifier: 7D:BD:10:7D:93:B9:93:E7:DD:F6:23:99:06:94:7C:02:A5:C1:81:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e/e67d2f59-104a-3de2-b1a9-c959919eaa4d.roa
Signing time: Tue 14 Jan 2025 03:00:43 +0000
ROA not before: Tue 14 Jan 2025 03:00:43 +0000
ROA not after: Mon 14 Apr 2025 02:00:43 +0000
asID: 142433
IP address blocks: 23.161.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:98:e7:77:e2:39:2f:58:1c:b2:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8230a7e7-95fe-4676-aaf3-5ede9bacff5e
Validity
Not Before: Jan 14 03:00:43 2025 GMT
Not After : Apr 14 02:00:43 2025 GMT
Subject: CN=e956df0f-e315-4837-be1d-9e0dad2cdf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0e:2a:11:6b:c0:fd:3a:43:0d:05:af:47:50:
fc:09:60:24:2d:f6:c1:8a:ae:42:ae:0a:8a:83:91:
8c:c9:13:8e:7e:0f:20:02:64:57:88:e1:4a:7c:2d:
fd:e6:2e:30:2a:80:15:6d:64:5c:ab:4d:a0:75:b3:
2a:21:59:a4:26:11:ca:8f:20:bb:7d:e8:d6:ad:47:
b1:46:fd:e5:37:78:c1:2b:e5:97:0d:e6:c7:72:24:
48:77:03:82:fd:71:8b:ac:96:5d:73:ca:38:9c:38:
dd:d1:c1:a8:f0:f9:9d:98:74:cc:de:95:7f:db:17:
9d:b5:ad:5e:c9:2b:7a:3a:03:3c:d5:35:b4:4f:e6:
8e:f7:f6:fc:cd:95:a7:76:a8:0b:27:bc:7a:5b:79:
68:77:cc:4f:50:e7:77:b0:5c:df:10:8b:34:f7:1f:
0d:e2:61:b1:f9:03:bd:62:8e:52:c6:95:df:b6:30:
f5:91:d4:ba:5a:e6:17:80:9d:fc:2a:0a:09:bf:e8:
32:88:f7:e4:66:19:41:d4:c5:78:46:47:6e:c2:65:
4e:5e:ad:7c:0e:63:37:ae:b9:0d:3c:68:b0:22:27:
50:98:fd:18:f9:b6:8f:a9:df:90:46:c5:1a:9b:0c:
5b:c1:af:57:dc:fa:74:62:df:ed:57:52:1e:22:b7:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:66:5B:AC:80:60:B4:45:86:5A:02:1E:6B:A7:78:95:E1:BC:E6:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e/e67d2f59-104a-3de2-b1a9-c959919eaa4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e/8230a7e7-95fe-4676-aaf3-5ede9bacff5e.crl
X509v3 Authority Key Identifier:
keyid:7D:BD:10:7D:93:B9:93:E7:DD:F6:23:99:06:94:7C:02:A5:C1:81:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:f1:e9:c7:15:3a:ae:8d:bb:ec:a8:de:88:84:e5:81:3c:bf:
94:e6:1f:95:07:46:f8:8d:a1:90:c8:60:a7:e3:9f:6f:45:3f:
37:33:a8:73:44:44:a8:ee:36:c1:28:2a:45:94:78:8e:32:18:
15:ea:bd:ae:13:de:f7:20:e2:92:42:d6:af:f5:f7:c9:b2:8f:
11:be:d3:87:5b:29:4a:c9:a2:3a:d8:09:bd:5d:73:45:fc:06:
72:25:6c:2b:9b:fb:92:63:f8:ce:f6:23:4f:ed:22:5b:b5:4f:
55:09:53:20:a7:ca:c6:cc:ed:4f:4f:76:b7:ba:de:d4:41:b2:
da:79:66:51:98:d6:1b:0d:c2:fd:d9:bd:86:da:b1:50:d3:05:
40:63:dd:e3:58:06:a4:f2:fa:87:50:f9:4a:34:cf:9c:5d:4c:
08:70:24:d6:66:de:9c:fe:1b:20:c9:83:6b:d8:43:50:fc:42:
b9:70:97:34:d3:8a:7e:ea:3e:f3:0c:06:bc:84:74:8b:d8:67:
50:6a:72:51:13:e5:74:8d:5b:7e:03:7a:47:a6:ed:6c:27:0b:
e9:c4:9f:41:83:25:40:b2:cf:4b:8c:eb:d6:6a:b8:2e:dc:33:
0e:fe:2c:8f:3a:57:50:4a:c1:3f:41:83:02:6f:d8:47:7c:6e:
f4:dc:81:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:21 2025 by rpki-client