Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c662f7d8-c24d-390b-9355-6a8ebd7fa4ac.roa
File: c662f7d8-c24d-390b-9355-6a8ebd7fa4ac.roa (raw, json)
Hash identifier: BfxI1jAs5saxsay3tC4CvaXpgou3mA1fD9fOanSGGIc=
Subject key identifier: E6:AA:4E:7B:A4:EB:C6:6F:AB:D9:65:71:A7:C8:66:30:E1:BC:54:EF
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F43285849071BEA5BD24A9017C3AC0410
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c662f7d8-c24d-390b-9355-6a8ebd7fa4ac.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 271
IP address blocks: 142.231.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:ea:5b:d2:4a:90:17:c3:ac:04:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=a47eb137-b111-45ea-992f-8e16667acb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:74:65:14:b7:9d:d2:6d:82:84:6a:fa:30:
93:4d:69:05:a6:94:03:69:47:cd:f9:da:8f:18:1f:
90:4d:47:1e:51:3c:2f:79:b3:f9:07:cd:93:58:f5:
d5:5f:84:44:db:f5:b6:f3:79:e6:ee:7f:fb:e6:14:
5c:43:67:30:74:ef:df:40:3b:2b:1e:26:88:8e:e7:
82:99:7a:06:cf:c5:6e:9b:98:b1:34:b9:fa:c1:bd:
98:99:c8:0f:b2:0b:0e:56:7a:28:39:a2:e1:e3:bb:
63:c2:f4:30:a4:42:bb:06:c4:cf:43:2a:08:35:2f:
07:c5:40:5d:26:b6:45:d6:4a:08:45:8f:63:6f:ae:
9e:74:9d:61:8d:c6:0d:6d:81:27:02:32:30:42:cc:
ce:c9:2d:cd:d2:c3:e0:e1:35:07:01:8c:a8:e2:73:
46:04:fe:97:d2:2e:20:d2:e2:32:2a:62:53:d9:fe:
0f:a2:70:17:cf:60:80:8b:2d:f3:ec:4b:c3:11:20:
ff:95:b6:94:93:36:19:4f:e2:c7:1b:88:d8:52:46:
cf:88:d2:64:a4:6e:38:26:7b:61:23:c2:e0:4f:45:
a2:0f:41:86:68:ac:53:84:c3:94:8c:92:74:bc:35:
c9:73:94:03:6b:01:01:a8:24:1f:d5:04:55:92:34:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AA:4E:7B:A4:EB:C6:6F:AB:D9:65:71:A7:C8:66:30:E1:BC:54:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/c662f7d8-c24d-390b-9355-6a8ebd7fa4ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.231.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:56:bd:8c:05:36:65:cd:65:03:e6:a6:5d:55:02:05:e9:e4:
d4:22:65:67:bb:25:96:9f:45:a4:70:b1:a4:db:66:bf:17:e9:
dd:46:fe:ec:5f:be:76:ab:24:a1:69:41:99:e6:d4:3b:e3:3d:
ab:9d:25:85:ad:04:2d:33:78:1d:da:49:2d:a8:39:72:cf:76:
75:1b:d9:17:5a:cc:a6:3f:30:43:32:4b:6f:95:59:9d:4c:4f:
94:45:b7:9a:d6:43:f6:aa:7a:04:ae:fc:c3:1d:6d:a1:59:fd:
89:2d:e7:78:19:6f:cc:92:13:26:e9:35:95:3f:06:d7:9c:7a:
9d:f1:a7:0c:23:05:02:83:f2:72:b6:0b:35:fd:b3:dc:2f:19:
dc:2d:f4:52:fb:63:b5:ba:8d:dd:ec:6d:ef:7e:bb:01:92:0a:
3b:50:3e:d9:f7:a6:d1:88:f4:e1:c0:1a:11:d7:4a:c9:be:ca:
bb:a5:b2:ac:0b:ff:9d:a2:39:e6:fb:1a:4b:c4:fd:e2:52:1e:
75:c4:51:f1:c0:27:b0:c4:e6:ec:b5:7e:7b:29:0d:b7:40:b5:
1f:cd:23:82:2e:6f:ed:ed:8e:ce:f0:df:9e:ff:e5:38:f2:58:
c3:35:03:1d:d5:cc:64:88:7e:ca:08:1e:c0:d7:3a:43:32:ba:
17:ad:d7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:27 2025 by rpki-client