Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa
File: ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa (raw, json)
Hash identifier: IGVbxY8Qpz8vhi5ijgUS/KRrnAT4xhTTHeR3g2b5oAg=
Subject key identifier: 85:64:C1:42:6D:A8:69:9D:66:25:9D:A7:B6:75:F4:30:0D:16:92:F5
Certificate issuer: /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
Certificate serial: 010D0C9F432858489075FC241C99B9AB2312AC60
Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 8796
IP address blocks: 23.185.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:fc:24:1c:99:b9:ab:23:12:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=e7505aa2-5745-43b5-8996-96b1c924b86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:81:6d:89:48:98:b4:1b:5a:58:47:49:e4:01:
02:c1:10:90:80:fe:f1:3e:99:4b:ff:f5:85:dd:ea:
78:90:cb:e8:1c:07:af:6a:51:43:a5:7c:40:f4:3d:
e4:b2:b8:de:49:6f:85:a6:10:fd:1a:39:ce:24:f4:
1a:06:1a:00:f4:6a:00:d7:b8:69:a4:70:65:9d:c9:
16:cb:2b:25:6d:0c:96:9d:16:03:15:21:3d:45:a3:
5f:8c:d3:b0:13:e9:7a:f6:ee:16:d3:29:e4:dd:40:
5f:e5:ba:c5:02:82:5e:28:d2:9b:d0:28:b9:38:ff:
51:47:e2:9d:cf:cb:88:23:39:61:23:8e:3e:00:d4:
3d:d9:59:ca:9c:66:94:24:91:92:af:bd:ac:0f:9b:
53:30:21:bd:76:78:a0:f3:c1:db:89:95:66:62:0a:
1e:9b:55:d1:c1:ef:4b:7f:e8:fc:1e:19:82:10:ef:
94:2e:9f:b4:14:24:a9:55:76:75:a4:62:6b:fe:b7:
0a:8b:b1:46:9e:9a:7d:29:b7:81:60:ba:12:04:df:
d8:e4:6d:c0:5e:e7:30:6c:b7:e7:43:45:2f:70:49:
7e:ce:a2:18:d2:eb:c6:6b:a3:41:8b:75:b3:a5:44:
94:47:fe:ce:98:6e:83:d7:66:d9:d7:c3:60:a4:57:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:C1:42:6D:A8:69:9D:66:25:9D:A7:B6:75:F4:30:0D:16:92:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl
X509v3 Authority Key Identifier:
keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
sbgp-ipAddrBlock: critical
IPv4:
23.185.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:c6:4b:20:26:78:f1:04:a5:95:0d:4c:18:17:05:c0:4e:a7:
40:50:ce:98:d9:cd:51:db:52:b2:d6:68:b3:dc:c9:e9:a1:1b:
e7:0b:bc:a7:58:7b:b6:58:0b:e9:7f:42:0d:42:d1:a7:20:db:
a4:bd:1b:0e:3b:78:b0:57:51:5c:d4:37:eb:fc:02:ff:7d:2c:
b7:75:58:0c:e6:1f:82:ee:17:dd:13:ae:0c:c7:5b:70:79:b7:
c4:8e:bf:9f:f8:a0:6f:bd:48:92:d7:5d:2a:6d:4b:16:a9:65:
f3:2b:9c:73:6d:43:92:cd:f0:52:38:20:b5:74:20:ba:09:3d:
bf:c0:e0:cd:e3:1d:a4:52:e8:7d:f8:90:89:69:f5:81:96:3b:
d3:05:60:15:c9:9d:81:e1:2e:3a:45:64:53:7e:f1:af:96:c6:
48:cc:c7:08:81:21:5a:1f:fc:0f:01:09:32:8f:25:90:19:b6:
31:bc:4e:3b:b2:db:c6:79:e9:d8:3f:ff:a5:f5:b9:fc:f3:9b:
b3:6e:fe:47:55:7f:6d:d2:00:b4:06:43:0f:0c:54:23:b2:3e:
01:e8:e5:2b:10:aa:1b:79:27:0b:ae:41:f7:c9:ee:b9:58:84:
bc:cf:d0:5b:0f:f0:51:da:1c:11:c6:22:1d:89:f3:ef:1e:37:
c6:3b:83:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:24:54 2025 by rpki-client