Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa
File: 2a28dd70-b06b-3843-af4d-73a9482b3961.roa (raw, json)
Hash identifier: MB5GkFl3ynL/2g9rDlu3OO2KcUOY2IpoEDAX3tX9wBU=
Subject key identifier: 7B:3C:20:37:08:42:21:24:D3:A5:EC:88:B7:31:63:FE:31:D5:8D:1E
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F43285848CDE10D8FE6717DD2D5CC5AC0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7862
IP address blocks: 146.23.58.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:0d:8f:e6:71:7d:d2:d5:cc:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=37fb8ef5-dd7a-4438-b94a-eec4a1cb0701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:2c:37:0b:7d:a6:98:76:f8:e0:74:a8:51:
15:1c:34:4a:98:bb:23:f3:9a:e6:4d:e9:aa:c3:dd:
e1:fa:b0:0d:c5:d9:a7:54:a5:95:a4:39:4b:ff:b0:
50:fc:96:25:8d:9c:fb:81:23:80:46:fa:6d:ff:9e:
c4:82:4b:34:8f:ee:83:7c:e1:73:4d:60:cf:7a:e9:
6b:bf:2f:35:79:8b:b4:de:b1:10:68:73:da:9e:28:
b9:76:e2:54:d5:72:6b:fe:32:ff:36:24:d0:37:13:
1a:51:8b:d1:be:5a:ca:25:80:88:d6:6d:83:fc:69:
b5:53:97:f7:96:b9:51:58:9f:d3:0d:ba:78:fb:e4:
84:c0:d8:e2:f9:07:70:b4:e2:7d:7c:e4:d3:17:5b:
f6:6f:58:d3:53:41:c0:98:bb:dd:3d:a2:c8:83:a1:
b6:6e:15:fc:3f:1b:dd:bb:be:8e:56:bd:3c:f1:fb:
c6:db:b9:7b:25:b7:94:ee:8b:30:df:83:f9:8c:08:
31:de:a5:ea:bb:2e:b9:cb:eb:19:15:06:18:ea:c8:
bd:a7:2b:07:69:42:7a:a5:95:90:02:d4:d5:b8:9e:
aa:29:9f:bc:14:0b:a6:c9:f5:e6:31:d0:e6:43:b0:
2e:6d:58:58:7c:05:53:a0:53:41:05:c1:d4:2b:8b:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3C:20:37:08:42:21:24:D3:A5:EC:88:B7:31:63:FE:31:D5:8D:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/2a28dd70-b06b-3843-af4d-73a9482b3961.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:5f:8b:63:19:4f:c2:33:c3:97:e3:fe:8c:90:0b:1f:91:c8:
4c:5a:d4:bd:94:8e:cb:ed:0b:4e:69:ec:d5:29:39:bf:ee:9f:
fb:72:47:99:08:9d:c6:a9:b1:47:92:24:20:47:95:63:a9:2a:
9f:94:cc:de:6a:30:b3:9f:b3:1f:9d:0b:83:d1:2f:78:08:46:
9e:af:8a:a4:9c:75:19:ed:26:70:7b:c5:27:9a:e0:e0:06:48:
8b:ed:ce:01:90:fd:d5:93:01:c4:74:ee:89:47:46:3b:6f:2b:
82:c2:8b:06:62:c1:71:be:09:ae:82:99:fa:c3:49:71:a5:76:
79:6c:cc:9c:9b:5f:30:b5:99:dd:e4:27:f7:52:ee:40:8a:45:
d0:2d:fd:61:9f:1d:04:58:45:29:c8:9c:3f:67:f1:e4:b5:ba:
98:ce:72:ad:a3:a0:4b:8d:a7:a5:94:fc:fd:c1:d4:94:54:a9:
c2:52:93:b7:81:fa:df:a8:b8:64:33:69:d2:bc:63:ea:c2:87:
90:d5:a9:ec:b9:a2:79:36:1e:f3:e0:38:9b:83:65:be:8a:6c:
f3:59:67:5e:a1:a1:47:93:6b:61:08:1b:32:f8:84:bf:7c:18:
c4:aa:cc:39:8c:70:cf:0b:25:05:b6:ae:b2:28:87:13:89:3d:
6d:d2:3f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:09 2025 by rpki-client