Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/aef3b832-6d50-3100-bdc8-b0523eddb0b6.roa
File: aef3b832-6d50-3100-bdc8-b0523eddb0b6.roa (raw, json)
Hash identifier: eVpK99I/tKaF1uuL5mO89oFN+h/2fxLX3PZ7RA1F1Kk=
Subject key identifier: DB:F6:76:20:B5:67:44:6A:24:E2:5C:17:1A:B4:E0:86:AE:62:E0:35
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F43285848CDE10ECADA681868935B4100
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/aef3b832-6d50-3100-bdc8-b0523eddb0b6.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 7862
IP address blocks: 146.23.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:0e:ca:da:68:18:68:93:5b:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=1ce2c2d5-d1d0-480f-b5ad-0f08fdeaf14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:73:1e:6c:ca:b2:14:f9:02:87:a6:2d:05:
0c:f1:89:f1:2d:b7:ae:39:14:d7:02:f1:24:5a:2b:
a7:b4:d1:22:95:2e:61:cb:b7:f4:ad:e1:51:fc:8b:
62:62:4c:c3:8d:86:e9:54:13:69:e4:e6:ff:7b:a6:
c0:e4:b9:cd:99:d9:0a:8d:05:dd:be:25:eb:55:6c:
2d:ea:06:d1:37:ae:f9:14:91:b1:b9:7c:a4:dd:07:
d6:24:a5:25:29:34:2c:f1:65:4c:36:cb:77:48:df:
6b:e6:85:ea:f3:73:45:c9:c2:fc:33:06:82:62:d8:
12:fb:a1:b9:8c:34:2c:11:b0:4f:1e:52:b1:a2:dc:
6a:7f:4e:df:7b:e3:db:5e:41:15:a6:ad:2f:ad:fc:
49:a0:52:95:66:ab:fa:6e:a0:65:28:cc:40:2e:eb:
6c:2d:6a:53:a3:f7:3e:3c:9b:88:6b:16:46:45:50:
39:d1:34:5b:f6:c2:e0:a4:03:ce:b6:85:87:72:ef:
81:45:1a:dd:94:e0:d8:00:4c:ee:20:3f:ad:ac:29:
98:00:7a:c3:57:15:1c:d8:c4:93:32:9c:de:48:cb:
04:2a:8f:99:d3:cc:48:24:0f:d2:1e:1c:0c:2e:7b:
38:68:8c:78:57:5c:b7:fe:78:57:8f:1c:a7:77:66:
f2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F6:76:20:B5:67:44:6A:24:E2:5C:17:1A:B4:E0:86:AE:62:E0:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/aef3b832-6d50-3100-bdc8-b0523eddb0b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:a2:0e:fa:0b:ac:6a:50:20:9c:e5:a8:8b:fd:e2:6c:ee:04:
7f:de:fd:a7:1f:d1:58:e8:de:fa:82:c6:a4:65:79:50:d0:87:
25:96:98:1d:9f:11:d5:19:73:98:27:4f:c7:4c:b5:56:73:73:
25:b5:d5:d5:8f:d3:8f:a2:fd:53:34:78:59:8f:f7:09:dd:62:
53:6f:77:0f:f5:f8:e9:f1:ee:4c:65:90:d2:60:ce:88:8b:92:
1b:79:1b:6b:a8:db:1c:39:36:3e:7a:9e:16:0e:81:4c:6e:71:
70:8c:61:2f:88:1b:8a:5e:fe:76:6d:ff:b3:a2:b5:e8:37:94:
29:c0:76:49:21:19:3f:fc:df:55:0e:9d:bb:17:31:4e:a9:8b:
7c:03:32:64:a8:fa:51:68:a4:83:1e:49:4e:64:70:df:e8:6e:
2e:7c:fc:ac:01:bc:28:c2:b0:9d:f3:42:ea:6e:65:ec:fc:b7:
6a:a1:6c:8e:29:75:ef:af:e4:d4:6a:15:70:ac:82:ba:70:51:
a8:73:ea:f4:b1:82:55:ff:70:0b:d7:44:3c:fe:c0:1f:7e:11:
5e:ac:7f:f5:ae:12:49:9f:4c:74:00:68:f8:fd:8b:84:d8:80:
43:09:bf:1b:19:c3:81:90:4b:57:0d:62:a4:4a:03:6d:99:fc:
23:16:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:34:26 2025 by rpki-client