Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa
File: 6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa (raw, json)
Hash identifier: cvSy8pr6Qxg3WMYTjCkCM/oTFLVPMQMyclA2wgAvXN8=
Subject key identifier: D4:7E:0D:D8:54:FE:6C:02:35:9D:12:E4:3B:51:21:F6:70:E1:55:FE
Certificate issuer: /CN=f027bb88-b09d-4fcf-abe2-4ad5024aa3cd
Certificate serial: 010D0C9F432858491AA6D1C53338217947532C00
Authority key identifier: 44:D1:14:74:18:75:8D:E0:EF:9B:C0:84:5B:87:AD:9F:F8:E8:09:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 16827
IP address blocks: 23.131.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:d1:c5:33:38:21:79:47:53:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f027bb88-b09d-4fcf-abe2-4ad5024aa3cd
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=417f1251-3d8a-4555-8ba1-a61ffcc93e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:95:43:a0:4f:32:a9:6c:1b:b0:0e:13:0f:4e:
9b:26:2e:a2:dc:1a:46:14:2c:d8:c3:bf:6c:5d:0d:
05:9c:ce:dd:b5:e8:7b:f4:06:55:b6:79:1c:f7:a7:
9f:70:21:a4:99:ef:72:69:4e:1c:8a:f2:d2:f6:a0:
49:80:c3:de:d9:c2:46:e7:c9:ed:01:60:6d:37:2a:
e7:55:60:97:99:88:1e:9f:85:1b:75:90:c4:dd:1c:
1c:4f:56:b1:cd:22:7e:08:54:aa:cf:10:4f:55:51:
80:bc:84:82:9d:25:7e:f6:88:17:13:e2:05:35:ec:
dd:ef:65:89:2a:27:fb:ad:3c:c4:44:8d:97:ea:38:
4b:4c:3f:03:6a:19:ce:fd:dd:48:ac:c4:7a:ac:39:
15:18:c5:80:01:ac:92:8e:f7:19:ef:2f:c6:57:c8:
3e:89:59:3a:92:05:07:65:60:6a:69:c1:38:8a:c2:
f2:06:ac:74:7c:27:34:67:d8:20:f8:1b:38:56:50:
b8:5c:47:22:d3:9f:30:78:70:eb:28:7e:6c:4c:8b:
b7:15:21:8f:6a:74:1d:58:f2:20:fe:9a:a8:d7:55:
fe:2c:35:89:97:4b:ee:50:ee:6b:cf:8d:1f:55:d9:
f1:c6:34:eb:b8:87:56:8a:cd:04:8b:94:b5:12:e4:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:0D:D8:54:FE:6C:02:35:9D:12:E4:3B:51:21:F6:70:E1:55:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/6cfc056a-a1da-3ca7-87a4-b6fd7d5d522a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.crl
X509v3 Authority Key Identifier:
keyid:44:D1:14:74:18:75:8D:E0:EF:9B:C0:84:5B:87:AD:9F:F8:E8:09:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f027bb88-b09d-4fcf-abe2-4ad5024aa3cd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:40:9e:c4:e4:b2:46:88:52:b5:ad:56:c1:a0:0f:1e:51:53:
00:9d:7c:6d:70:fd:65:ed:8c:e3:06:9a:81:05:79:cd:e0:98:
f5:1f:da:da:0d:bd:47:db:1d:d3:06:70:78:f7:d6:63:4c:93:
9b:33:a7:f9:f4:5f:96:86:46:a4:81:44:19:2c:96:f6:4f:8a:
6d:a3:32:2f:dd:6d:37:ac:21:88:df:5a:e4:26:7d:d4:2e:02:
0b:55:f8:5c:b5:23:62:be:5f:25:0a:89:71:4c:81:22:b6:21:
fc:60:cf:d7:9b:09:a0:07:b7:19:9d:6c:9b:df:f6:30:63:32:
e0:30:44:e0:6a:fb:e0:74:12:d8:63:61:15:70:62:18:65:0f:
e3:07:ca:7e:a3:60:99:1b:63:60:da:27:8b:4c:d9:13:0e:75:
2b:20:dc:09:b5:d0:33:c1:bf:6b:b6:00:ff:8e:d7:ff:16:2a:
ed:4c:36:f4:61:15:34:38:2a:d2:5e:08:91:9b:c6:7f:16:b0:
2a:9b:67:6f:0d:2e:55:be:41:71:cf:58:3a:0e:99:c6:57:28:
6e:44:52:e5:69:7c:71:4b:bb:09:40:44:bd:ad:26:45:1d:9c:
54:f3:4f:6c:ed:f0:46:2f:0c:1a:82:fb:66:d6:a0:a5:6d:be:
57:fd:4c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:07 2025 by rpki-client