Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa
File: 96785cf8-7262-32e6-b7e6-3db134e27f1c.roa (raw, json)
Hash identifier: dO++Yy6TtDJRyIL6y5p5C4fnQj6XMmo2Ji7iVT8sNF4=
Subject key identifier: 56:53:14:4B:C7:E3:66:D9:D4:C9:68:D2:2E:0F:13:1E:3B:66:B8:27
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F43285848CDE10CED41241D3941A51FC0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7862
IP address blocks: 146.23.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:0c:ed:41:24:1d:39:41:a5:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=70eaaedc-1242-4483-9f76-17c6e85552de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8c:96:f9:22:06:cb:83:02:93:23:00:a7:59:
1e:33:76:cd:12:25:a5:e4:b0:04:00:39:7a:78:90:
df:c9:45:70:c8:c4:1d:78:05:2d:9d:72:8e:b4:67:
6f:67:39:7d:17:06:63:73:e2:9b:3c:f8:bd:e4:90:
6b:fb:30:25:4b:00:2b:d0:ab:79:4f:d7:ff:8d:1f:
fb:2c:8a:a9:05:fb:01:35:bc:6f:73:e8:a4:dc:b3:
c1:5c:21:38:27:0f:78:bf:5a:6f:e1:ce:30:9f:99:
47:ea:f7:70:22:5a:75:b4:24:ae:ed:94:8b:6e:68:
19:dc:b3:53:a5:c4:d8:67:14:be:66:f0:91:56:93:
4f:e6:e4:d3:32:b2:31:75:38:11:fc:0b:0b:b7:f5:
f4:36:a2:2a:93:3e:3b:1c:08:d6:2e:f8:bd:0b:0e:
6b:1b:d7:db:98:c4:cf:36:7e:b8:33:82:2f:48:35:
8c:7a:d2:09:09:c6:9d:b6:aa:f2:4c:dd:5d:3a:f1:
e3:ed:f1:d7:83:3a:f3:fa:be:db:26:33:8a:3e:c5:
8c:80:c2:3c:dd:68:3d:92:03:d6:f1:8b:b3:fd:33:
ba:ff:db:5c:ab:7c:95:a3:0e:fe:6b:4e:bb:0a:75:
eb:fe:af:d5:f8:9a:79:14:67:66:ef:52:96:f3:b4:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:53:14:4B:C7:E3:66:D9:D4:C9:68:D2:2E:0F:13:1E:3B:66:B8:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/96785cf8-7262-32e6-b7e6-3db134e27f1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:67:8f:b6:7a:66:6f:19:1d:94:c3:98:f7:ce:9a:18:73:fd:
d8:2f:bc:d1:e3:f8:69:47:db:ac:bf:d7:b7:55:f3:c4:88:2e:
6e:4b:75:33:c9:7c:81:34:0a:66:45:ae:4d:6e:cd:75:de:1b:
1c:7d:9f:4c:4b:d2:d4:66:20:61:16:d1:ca:64:de:af:c6:74:
99:20:cb:50:13:c0:a7:b3:a6:20:65:9f:3c:22:33:38:bf:68:
8a:94:20:01:3d:10:71:90:4b:8d:56:32:f1:4a:e2:7f:1b:58:
cc:d8:f0:3c:bc:ca:0c:a3:b9:a2:a6:02:2a:c5:6a:01:de:69:
7c:48:b6:9c:bb:73:4a:62:15:58:b6:7d:7f:84:c7:59:d4:ba:
9f:ce:6b:25:17:5e:d7:e6:de:5f:bd:9a:04:52:72:ac:db:20:
00:53:e2:84:48:05:a3:9e:38:5f:90:cb:e1:cf:db:e9:5a:92:
97:5f:ed:96:d7:19:28:37:ba:ce:f8:87:6c:b2:88:97:dc:5f:
66:4a:b7:d1:14:e1:98:64:6c:3a:e7:43:2a:fb:79:7c:72:d3:
e4:fa:81:26:c6:fd:7a:3e:3c:a3:97:0c:2e:c7:1d:48:2d:d8:
46:d5:67:59:2c:ea:81:bb:24:01:b7:da:3a:e0:70:e7:20:2d:
e1:40:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:28:16 2025 by rpki-client