Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa
File: d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa (raw, json)
Hash identifier: eDFuIUK1EsTPAcTH9Jfk1ywY9IvB6g9hIA7n9qEI4cM=
Subject key identifier: 04:91:4A:A4:FC:F5:CC:AB:63:E5:8E:39:5C:3B:27:06:BD:A5:4A:D0
Certificate issuer: /CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
Certificate serial: 010D0C9F43285848D0ABB56944FA50B03FFF8C80
Authority key identifier: 0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 133199
IP address blocks: 23.155.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b5:69:44:fa:50:b0:3f:ff:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f7d642-12c0-4585-8981-7b7b7a058b8c
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=cba927d8-926e-411c-8fee-50f773034d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:a1:e9:03:2e:f5:b2:98:67:59:a3:a9:88:
f8:f4:5d:a5:d3:02:ea:a4:fa:75:9b:c2:f2:38:38:
83:1e:08:bb:08:8e:22:36:db:0a:2f:4f:fd:d3:c9:
12:74:0b:d3:b1:0c:f3:96:2b:be:c1:24:7d:1e:4d:
c8:6e:34:6a:c0:66:1b:34:72:18:cd:23:f7:b7:50:
6c:65:d0:df:d6:31:95:99:da:6b:94:68:04:b3:91:
99:09:d7:5b:ef:73:f4:68:e1:9e:ea:fa:75:b4:25:
75:60:8f:29:a5:9a:94:62:6c:66:dd:61:64:56:dc:
14:09:b7:98:3d:90:b9:45:38:92:ee:bc:32:24:49:
ed:e4:08:1d:87:b8:bc:fc:f5:f5:01:77:e6:cb:cc:
1c:d0:52:35:9e:2a:90:21:95:71:d8:f9:09:cb:85:
b8:1f:3d:95:4e:43:0e:a7:f6:ee:c3:12:3c:7c:58:
42:02:fe:9f:d1:f0:d1:d3:db:55:93:6c:37:19:95:
c4:14:db:b1:8b:bc:88:0f:73:99:a9:e4:57:91:f3:
6c:4b:0a:5b:e4:2c:f3:c1:c8:d8:91:b9:b6:1a:b5:
9d:88:12:a2:e8:f1:48:13:9d:a1:8f:58:5f:0a:7e:
ab:5f:47:2f:1e:ab:c6:6f:b1:c7:f2:be:d2:8f:05:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:4A:A4:FC:F5:CC:AB:63:E5:8E:39:5C:3B:27:06:BD:A5:4A:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/d9fb1872-f68e-3a61-a722-998e0f6dfd54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c/a8f7d642-12c0-4585-8981-7b7b7a058b8c.crl
X509v3 Authority Key Identifier:
keyid:0D:77:E3:0F:D1:94:46:4A:AD:8B:4E:F8:CC:0F:3D:DF:9B:9F:F6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a8f7d642-12c0-4585-8981-7b7b7a058b8c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.155.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:7f:78:c2:53:f2:db:2c:00:2e:87:97:88:f0:89:f1:e8:4d:
07:bf:ea:07:f3:5f:fd:03:16:04:6e:1d:97:c1:67:17:8c:ea:
f5:4f:e3:86:2e:47:99:65:49:65:b1:f9:a6:3c:04:6f:67:97:
1b:9c:50:2d:a6:d4:0f:76:a2:95:c1:8f:d0:8c:8e:3d:24:7d:
95:51:28:9d:e5:30:95:02:65:bd:36:49:00:60:30:15:60:3d:
fd:fe:d0:59:d3:b7:0c:c2:c3:ad:be:35:2d:7a:79:a9:5e:23:
65:47:27:44:8c:d9:6c:0d:7d:61:2d:58:6e:fc:55:ca:c9:8a:
de:ee:c4:46:be:52:1b:a8:14:a7:7f:73:23:00:50:47:2d:ce:
28:2d:8e:63:42:9e:64:c1:47:73:df:a0:81:fc:d9:b2:73:ca:
77:db:12:08:28:5c:63:f4:ff:71:8d:65:61:38:08:70:40:12:
e3:50:65:68:a3:ab:70:1d:3c:b0:7d:1c:3c:39:f8:d7:d0:44:
17:b4:2b:6a:46:f8:9b:88:74:2f:21:99:da:10:d8:30:6f:2b:
27:04:fc:1e:6a:a4:17:cb:8b:25:68:1c:7a:56:da:b8:13:c5:
5d:e8:77:7e:f9:5a:13:50:fc:5c:f8:11:86:0c:96:78:74:95:
ce:f7:37:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:11:29 2025 by rpki-client