Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/571cbfab-46db-38c9-9e6c-a6d9b7760005.roa
File: 571cbfab-46db-38c9-9e6c-a6d9b7760005.roa (raw, json)
Hash identifier: trqZMddsHVHYw+K6MYJ130LiHEl41xWlciAYvYRfZGI=
Subject key identifier: 6F:39:C0:36:01:D9:D4:2A:0D:7B:C3:07:50:2D:EE:D5:7A:84:C7:D8
Certificate issuer: /CN=d6301b93-7acb-4494-b07b-a79f8d7740ea
Certificate serial: 010D0C9F432858490E16C82EE90AED0A31730800
Authority key identifier: C9:C5:3C:34:E8:02:6F:E2:05:1F:E3:4A:53:E9:85:67:DF:B7:2D:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/571cbfab-46db-38c9-9e6c-a6d9b7760005.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 63023
IP address blocks: 23.154.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c8:2e:e9:0a:ed:0a:31:73:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6301b93-7acb-4494-b07b-a79f8d7740ea
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=8a3b51b9-9f72-4e1d-8dea-60920f7dd543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:b0:30:2c:ca:95:67:14:98:b9:bd:7b:4d:
6e:97:42:a5:01:d1:c9:52:fe:42:8b:e9:3d:40:f6:
e2:41:c5:22:9e:8f:82:c3:e9:5e:39:c8:8d:74:a9:
de:0a:ff:95:dd:41:e4:4b:54:21:2c:66:ac:c1:17:
6d:b1:f5:75:94:8e:66:6b:7f:62:ff:ed:3f:a3:cc:
c9:1a:c2:c2:78:f3:4e:88:19:c5:c3:c8:21:41:92:
9d:19:6f:01:7b:19:79:91:44:cf:fd:a3:74:a8:89:
42:c1:88:90:98:8f:4b:99:70:17:93:ac:12:78:a7:
11:11:bd:5f:9e:9a:ea:da:ca:f6:a0:9f:16:d8:13:
42:55:48:41:e7:f5:79:94:da:1c:9c:20:05:6f:00:
3c:14:c0:6b:e7:96:7a:4a:af:bf:03:d6:73:e5:26:
70:3d:5c:29:5a:10:8b:c3:73:d5:05:50:f9:56:1f:
c6:fa:e9:8b:eb:9f:b7:f9:d8:0a:9a:5c:64:cb:ec:
c7:22:61:9b:82:43:60:75:25:fe:22:83:dd:ba:22:
93:4b:6a:63:36:db:85:bd:3b:61:89:ce:5f:ca:85:
22:a0:80:a1:ab:64:b8:dc:8a:12:0d:7f:74:6d:31:
53:89:9b:c6:25:45:bb:18:e1:06:d8:61:89:3d:1d:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:39:C0:36:01:D9:D4:2A:0D:7B:C3:07:50:2D:EE:D5:7A:84:C7:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/571cbfab-46db-38c9-9e6c-a6d9b7760005.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea/d6301b93-7acb-4494-b07b-a79f8d7740ea.crl
X509v3 Authority Key Identifier:
keyid:C9:C5:3C:34:E8:02:6F:E2:05:1F:E3:4A:53:E9:85:67:DF:B7:2D:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6301b93-7acb-4494-b07b-a79f8d7740ea.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:c6:54:b0:ca:80:0a:3f:0b:82:ea:87:50:54:92:25:f6:fe:
e2:23:90:4b:0b:33:2a:92:8a:e3:3d:23:b6:da:81:bb:c6:e6:
db:3a:74:c0:9d:a9:6e:03:6b:2b:75:35:7c:b6:23:24:d3:36:
44:23:04:6f:8e:ff:81:39:36:9f:ee:f4:4e:c1:bc:0f:18:b6:
6e:c6:1e:90:2e:21:aa:2b:d0:7e:76:ca:05:1b:a1:c8:3a:5e:
d2:55:7a:11:5d:c0:75:d5:22:d7:a2:5e:0f:27:92:67:d2:cb:
7e:78:82:80:9b:f8:aa:da:4e:d4:51:95:5f:5f:ec:c2:17:d3:
24:f1:d0:b3:da:c5:66:58:e6:0f:55:8e:ef:89:53:0c:50:34:
66:08:f7:3b:17:76:10:34:b6:1f:1d:0a:a7:89:75:3e:07:a3:
91:b6:dd:38:bf:9d:55:a6:0f:28:43:79:99:90:33:d4:a4:0b:
6c:ca:26:ba:4b:13:14:5e:e3:cf:e9:46:e8:4e:76:f7:5f:94:
5b:d7:0e:8c:a4:1f:40:c9:a0:ca:2a:94:01:49:8d:b3:e3:a5:
0b:f7:06:41:ba:9c:db:68:79:88:b0:b0:29:23:12:ee:02:62:
88:3a:19:1b:c5:93:dd:f8:b8:b3:83:c3:0d:ce:c0:cf:bc:6e:
b6:65:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:59:05 2025 by rpki-client