Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/d44967c2-66bc-333c-a074-0781737fb57c.roa
File: d44967c2-66bc-333c-a074-0781737fb57c.roa (raw, json)
Hash identifier: j04KLEaBsTMurZBbU9b++fU8/TrFOGbu/0xlhM74LXk=
Subject key identifier: 1F:2B:14:5D:9F:12:D3:FB:69:75:89:9D:84:4B:AF:DC:BE:4A:EA:9B
Certificate issuer: /CN=0f9fa158-6175-4fe8-be8e-bcfccfc26553
Certificate serial: 010D0C9F432858492183FF02638118D109955E80
Authority key identifier: 19:36:54:0C:48:D0:41:BD:2D:39:05:04:5B:DC:5A:9E:05:85:10:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/d44967c2-66bc-333c-a074-0781737fb57c.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 398565
IP address blocks: 23.161.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:ff:02:63:81:18:d1:09:95:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9fa158-6175-4fe8-be8e-bcfccfc26553
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=94ff0b0a-5e9f-4003-832c-e0f293adad1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ce:81:b4:9b:5b:bc:01:f1:7c:1d:bf:3d:2b:
c5:74:66:78:4d:28:26:97:28:4c:80:bc:32:71:79:
47:7f:b5:63:94:b0:a5:4a:3e:12:c3:a8:16:99:a5:
68:2d:80:cf:7a:b8:a8:89:ad:5a:f8:00:47:60:75:
f2:a0:42:59:26:04:96:e8:27:83:75:43:a1:75:24:
bc:8f:01:a2:1d:ad:fe:9c:79:0c:ef:13:a6:b9:e3:
c9:b1:fe:f8:f2:98:d5:35:93:3f:60:8a:57:8b:12:
87:61:a2:04:af:36:ec:6d:f5:fa:2e:89:f6:b9:14:
11:63:f0:e8:a9:fc:e9:95:bd:06:8d:bd:b5:28:f8:
79:b1:4f:99:51:d8:ed:94:b1:6c:e1:0e:8a:62:71:
e9:0a:d0:dd:75:c2:b0:52:2a:b6:4f:9c:01:f3:71:
b4:41:10:64:0e:6b:91:f9:bc:a3:e4:4f:00:9e:54:
00:59:3b:be:ca:30:12:5f:4a:4d:68:4c:ad:6a:88:
fd:a1:af:f6:23:29:e6:a4:9d:c6:a3:78:2d:e4:da:
09:2a:69:c6:94:3f:67:0e:cf:96:44:1b:a4:7e:f4:
9d:ad:31:3a:ad:29:9d:25:bb:fd:9b:7f:08:58:66:
fc:63:1f:eb:80:62:b7:a3:7c:d7:d4:08:a5:20:ab:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:14:5D:9F:12:D3:FB:69:75:89:9D:84:4B:AF:DC:BE:4A:EA:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/d44967c2-66bc-333c-a074-0781737fb57c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553/0f9fa158-6175-4fe8-be8e-bcfccfc26553.crl
X509v3 Authority Key Identifier:
keyid:19:36:54:0C:48:D0:41:BD:2D:39:05:04:5B:DC:5A:9E:05:85:10:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f9fa158-6175-4fe8-be8e-bcfccfc26553.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:90:4e:cb:ce:01:71:bb:f1:1b:90:31:3b:a5:8b:30:d2:81:
20:ba:7e:aa:e5:f6:d8:7c:7a:e4:26:6a:93:17:95:24:66:1c:
33:2f:74:09:d3:54:15:f0:ed:bb:10:e2:3c:bc:bd:a9:28:8c:
ab:61:23:27:1f:f9:a3:fa:58:51:de:ae:26:bb:16:72:12:66:
60:2f:64:ee:92:78:0b:5c:0e:c6:d7:7a:24:3f:74:78:6d:83:
8c:58:71:e3:c3:0c:a0:6e:59:28:8c:ab:71:8a:87:71:35:6e:
6c:cb:ea:21:9b:8a:5e:ae:01:6a:f8:72:e4:f5:43:6e:55:c6:
88:5b:b6:3d:53:dd:bb:09:9e:89:b3:be:19:29:f0:3c:8d:cb:
76:30:a0:30:88:82:9c:0a:6a:16:48:e3:8b:89:de:06:3d:79:
5d:c7:99:1c:71:a9:04:2f:04:69:0f:7e:7f:be:aa:35:3f:97:
c5:ec:de:7b:4e:1c:0e:51:96:15:2b:e4:3a:78:e3:ec:1c:c5:
e4:7f:45:d2:49:9f:46:05:67:d8:28:7d:c0:f4:52:a2:73:10:
3e:62:15:a6:f4:b4:ce:71:6d:bd:3a:96:94:0e:17:b5:b3:6e:
4b:9a:29:95:d6:32:06:3e:f6:3a:c0:bb:16:96:17:7d:66:90:
d0:35:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:10 2025 by rpki-client