Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa
File: 4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa (raw, json)
Hash identifier: HUq4W/ZvQcplvTXKHu9LY261x9Wsb/kxMxkT8OtVPWQ=
Subject key identifier: 96:79:4D:68:2D:D3:5D:D7:F1:03:81:C3:D7:26:50:E8:3A:21:55:24
Certificate issuer: /CN=1496e1f0-76eb-4e96-9a74-121b9e2d3a1f
Certificate serial: 010D0C9F43285848A136181942898194A6619380
Authority key identifier: B6:CE:63:1A:D1:1C:0D:C4:48:F1:02:2E:39:1B:C4:D5:2B:EE:C8:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 399055
IP address blocks: 23.173.16.0/24 maxlen: 24
2606:22c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:18:19:42:89:81:94:a6:61:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1496e1f0-76eb-4e96-9a74-121b9e2d3a1f
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=892a1e26-86dc-44f7-a5d4-727e5401479b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:82:48:a0:86:86:3e:2d:0e:79:37:b0:d0:f8:
6f:bc:86:0d:53:e6:7f:d2:d5:cc:de:ef:a1:c1:41:
ef:58:2a:ce:a0:54:8e:c2:ce:61:2d:16:aa:25:76:
57:f2:7e:04:1f:dc:d1:bb:e3:5f:2b:60:df:de:b6:
b1:44:14:e5:60:e8:2b:4b:04:20:ab:5e:bc:ae:0c:
1f:f1:41:6e:ba:13:f2:2a:b5:f8:00:d0:18:c3:41:
1f:a9:7d:9d:ed:7a:ec:1e:a7:e3:b1:a2:1f:06:25:
0c:0a:fc:fb:2d:af:e8:f3:63:25:04:83:e2:f6:30:
17:fd:5d:87:df:9e:cb:3d:21:0e:6b:9a:0f:ef:72:
b0:71:20:f8:11:fa:8b:95:8c:bd:52:a6:1f:6d:38:
12:5e:da:e6:7e:57:ff:37:b1:a8:b6:db:11:ea:cd:
86:34:78:2b:e7:67:17:48:95:ce:b1:79:4e:50:09:
22:ef:e7:1b:ab:20:93:60:f4:6d:af:62:2e:81:0d:
44:fd:22:22:77:da:e6:f5:5c:5a:28:cf:6b:20:33:
ae:2f:ac:41:4c:be:44:13:63:aa:84:0b:c7:ea:c1:
34:8c:fb:ef:9a:4f:f1:5d:cb:cf:6a:72:ae:3c:91:
c0:7e:75:fa:b3:fe:bd:9d:10:6d:6e:8a:6c:a3:45:
d3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:4D:68:2D:D3:5D:D7:F1:03:81:C3:D7:26:50:E8:3A:21:55:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/4a07fed4-5bc8-3b93-8f3a-f1bb4472123f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.crl
X509v3 Authority Key Identifier:
keyid:B6:CE:63:1A:D1:1C:0D:C4:48:F1:02:2E:39:1B:C4:D5:2B:EE:C8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1496e1f0-76eb-4e96-9a74-121b9e2d3a1f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.16.0/24
IPv6:
2606:22c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:c6:13:f6:ce:d7:f5:c6:80:e4:fa:b5:cf:b3:f2:ee:13:61:
47:65:5f:e2:6f:7c:cf:91:70:df:3a:76:b8:c1:31:b0:84:f7:
20:2b:e2:a5:89:b5:0a:9a:77:a5:6c:b9:c0:a2:a5:b2:d5:c6:
ab:ea:ea:05:ec:eb:a0:ea:7a:04:c5:5a:22:cf:48:96:2e:cf:
5f:22:87:03:3d:73:2d:5c:f9:29:4b:ae:71:a5:56:da:12:8d:
41:d4:e6:54:7d:ef:bb:90:89:53:95:4a:1c:91:93:09:6c:bb:
31:02:2a:7f:7c:ff:91:a9:df:a1:cb:89:60:65:0f:d0:95:9f:
15:e6:88:c7:81:10:86:79:4b:84:dc:e9:09:41:c0:0c:db:72:
3c:5e:4d:1b:83:2a:c6:82:98:33:17:4f:02:6b:9f:da:19:18:
a4:81:42:2d:d2:3e:b5:3f:3f:c6:ce:3f:88:5e:47:e6:b8:21:
62:eb:1a:5b:79:1d:22:eb:cc:b7:e8:5a:bc:34:3f:1a:6f:0a:
56:b5:13:a3:e6:cf:c3:98:84:be:02:4d:eb:23:5e:f9:61:bc:
a0:16:e3:43:68:6d:4d:c6:c6:02:0f:75:9a:cc:0d:68:52:84:
52:27:f8:65:19:7d:f4:c3:64:04:76:69:4f:2e:3c:00:9f:3a:
8d:89:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:27 2025 by rpki-client