Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/db29be60-58a8-3cdb-af85-ec200531b16a.roa
File: db29be60-58a8-3cdb-af85-ec200531b16a.roa (raw, json)
Hash identifier: +o59x314u+XUHBHxe7YjexN1QCjKKW0U20qord//VX0=
Subject key identifier: C0:66:D2:96:39:C6:B7:EC:A5:E4:24:31:FD:AA:97:80:E1:1C:F7:22
Certificate issuer: /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Certificate serial: 010D0C9F432858486530359D48DCCA7830EF1640
Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/db29be60-58a8-3cdb-af85-ec200531b16a.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 60021
IP address blocks: 23.191.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:35:9d:48:dc:ca:78:30:ef:16:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=ad4653bd-3cf0-4f2f-a4e5-faf4a20d720c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:f1:80:23:58:65:34:87:d0:f2:cf:d0:98:
b9:2c:86:b8:24:ec:fb:e2:f3:04:37:96:01:78:57:
fe:20:00:cb:fb:4c:81:4d:fd:f1:20:94:d8:27:b5:
48:70:20:b3:6c:b9:66:1c:73:7a:62:6b:f5:b3:c2:
f3:0f:4a:6f:aa:66:70:a1:53:d9:29:8d:8a:3c:e4:
8e:ed:80:b9:a1:50:af:bb:76:75:86:a4:d0:7b:09:
c6:70:8d:d1:2f:22:02:26:8f:08:b9:e2:4c:26:69:
01:96:24:52:a5:82:1d:b1:01:f2:ef:6e:f9:3d:e5:
b8:5c:82:63:4a:51:73:89:d6:4b:ca:15:3b:72:df:
f8:af:a1:12:57:b8:35:84:11:ce:b0:c7:be:24:2f:
2b:97:56:e4:85:8c:91:6e:02:ae:5f:a5:f1:96:fe:
9a:06:bd:31:11:27:17:89:8c:d9:c6:f4:b4:e7:7f:
f6:c6:b0:99:9a:77:53:6c:36:10:73:f7:ff:2d:36:
01:67:4a:66:97:31:c7:42:7f:cb:83:de:c2:43:af:
83:f3:03:23:95:4e:39:0a:e0:c3:9e:b1:a9:8d:80:
3e:6b:fe:df:25:71:f4:63:a9:94:cf:db:05:0e:24:
e9:e5:d5:22:86:5a:36:84:cd:3f:b2:e1:3d:d3:fe:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:66:D2:96:39:C6:B7:EC:A5:E4:24:31:FD:AA:97:80:E1:1C:F7:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/db29be60-58a8-3cdb-af85-ec200531b16a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl
X509v3 Authority Key Identifier:
keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:7e:b6:3d:81:8c:f7:99:2d:4b:a4:aa:29:c3:fc:4b:fd:c4:
fb:8b:37:c9:7f:0b:45:68:ea:f2:39:2b:b7:6e:27:b3:d0:41:
17:21:e3:ee:6a:57:f9:81:ea:76:d2:91:dc:44:30:65:b7:0a:
0a:62:83:cb:77:70:82:48:32:af:1b:fb:89:12:5d:56:a6:a9:
24:a2:c5:c9:46:12:86:2d:05:7d:b4:1f:27:5e:5e:9f:9c:6e:
0a:02:23:12:62:8d:96:ac:89:8f:e5:6a:fc:f8:30:76:35:f7:
13:5d:86:c2:d4:71:65:2a:a8:27:92:54:e4:c3:6a:62:7e:77:
f5:3e:0d:aa:c1:d7:92:3f:0e:f3:db:b4:33:92:93:ed:c6:ac:
53:15:95:2c:ad:62:57:ca:cd:bb:d2:ce:75:89:fc:ae:19:7e:
4d:38:5d:7d:5c:1f:21:d6:ed:cb:b1:f4:b0:f4:51:f6:6a:26:
47:37:b6:95:ef:4a:30:ef:23:06:5e:4e:f9:e1:ac:0e:93:d5:
0c:eb:72:93:d4:3e:de:1f:ff:77:bd:a7:b9:f4:0e:1a:fc:06:
14:cf:e7:ed:0d:75:8b:33:93:06:c0:b3:6c:2a:41:8a:42:a2:
2a:78:0e:80:f8:be:ee:c2:1e:df:6a:72:ee:48:d0:2a:1c:8d:
1c:b9:3a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:02 2025 by rpki-client