Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/80d58c62-259d-3869-b8c1-d9be9521f3ef.roa
File: 80d58c62-259d-3869-b8c1-d9be9521f3ef.roa (raw, json)
Hash identifier: kVLpBaP8Mx/wmuyMyYpcSGTPdD+gGtODrKc575qeE4s=
Subject key identifier: EC:3D:FD:44:E1:4B:FB:DA:73:AA:9D:A3:2B:B8:77:6E:69:8A:98:30
Certificate issuer: /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial: 010D0C9F4328584913AC1D09127059C670A7FC80
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/80d58c62-259d-3869-b8c1-d9be9521f3ef.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 46918
IP address blocks: 23.161.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1d:09:12:70:59:c6:70:a7:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=0b0ed36a-1838-424f-989a-ec5a4b715d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:73:28:45:9e:24:03:24:6e:5d:75:07:a5:
25:03:6d:66:59:99:2d:95:95:5e:26:2a:38:ad:cd:
c7:a4:79:82:1e:22:86:26:e4:cf:0c:56:a5:7d:22:
6e:98:31:d5:c8:6f:73:a5:20:b9:ef:d0:ea:36:bc:
29:ac:a4:90:72:7b:6c:7c:c7:5d:42:c2:f8:4c:17:
eb:d7:55:97:b8:75:35:19:7a:60:5d:1e:7b:1a:db:
a1:46:f3:0e:31:ef:a4:f1:34:53:52:0a:a3:2f:e0:
5f:6c:bc:ec:9f:64:ba:a2:3c:58:29:1d:7a:a9:1d:
6b:23:0c:b0:d9:3e:d4:83:45:4d:29:53:19:d0:a2:
02:18:3b:31:e4:d0:99:4d:a3:3e:1d:3e:25:db:15:
91:81:67:d6:a9:bf:78:6c:39:01:a1:ed:12:c5:6b:
40:c3:6f:d3:18:e8:8c:52:e0:46:c0:1c:0a:93:a9:
e6:a5:5d:0e:e9:7a:9c:20:68:b8:67:3a:d0:03:8d:
16:63:b4:b0:15:da:e4:4b:e7:e1:df:80:5a:2d:4c:
15:4d:78:94:05:f0:76:b0:bd:e7:ae:2a:7d:31:d8:
3d:85:91:52:a7:9f:9c:23:d8:b6:04:75:5f:e2:01:
ce:50:d0:52:e5:83:69:31:18:5f:da:5d:0c:b5:aa:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:FD:44:E1:4B:FB:DA:73:AA:9D:A3:2B:B8:77:6E:69:8A:98:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/80d58c62-259d-3869-b8c1-d9be9521f3ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
X509v3 Authority Key Identifier:
keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:23:82:2c:23:2a:a2:b5:f0:c2:e8:9f:ec:a9:55:b0:f2:b9:
61:82:07:9c:ae:27:64:50:e4:4e:de:7e:b9:d1:40:33:c2:3a:
2c:07:1e:e9:39:ae:a7:d0:c9:94:bc:ae:64:24:c8:bc:b3:fb:
ec:2f:30:d0:7d:6e:fa:09:99:88:08:b4:38:ac:d6:f1:8f:6a:
20:4c:87:7e:a1:8e:1b:5d:d6:5d:ca:17:46:5c:aa:8d:46:75:
b1:2e:73:72:bc:46:c1:52:bc:78:f3:b6:a3:66:dc:10:8f:a7:
01:cd:99:05:86:c7:de:ac:a6:d2:67:4e:ed:35:b6:b7:22:10:
7f:5b:84:15:0d:fe:58:ee:c6:0a:53:73:b7:f4:dc:58:b4:f9:
97:f2:46:0a:75:fc:2f:33:7d:b4:a2:10:39:ae:3d:fa:47:6b:
fa:dd:33:f3:02:d0:b0:aa:3e:4a:a0:57:b4:41:65:2c:af:54:
e0:e6:fb:8b:9f:f5:94:d9:d6:56:d4:1c:d1:ce:22:cf:e3:02:
50:22:de:c7:88:7f:db:5c:61:b2:22:e6:51:73:68:c0:16:8f:
21:e1:38:8b:b4:37:de:71:bd:67:26:7d:ca:af:e8:bf:ab:a1:
27:31:21:88:20:3a:6c:52:20:e5:ae:51:e9:ad:05:4d:8c:30:
b3:a6:1e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:49:37 2025 by rpki-client