Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa
File: 38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa (raw, json)
Hash identifier: DShP6HgXfOf/YkrNNarV6xGyAF3xkU0N0N9uXrjrIo4=
Subject key identifier: E6:A0:FE:34:7E:D7:2D:B7:E7:2E:13:2F:05:26:41:D4:A7:00:74:3E
Certificate issuer: /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial: 010D0C9F4328584909E6964718BBB7B1CC583CA0
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 63008
IP address blocks: 23.169.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:96:47:18:bb:b7:b1:cc:58:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=2580801d-78ff-43f9-9f66-eb420b1f1426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:92:dc:d3:6a:e6:14:6e:c5:e4:30:58:0d:
7d:82:de:56:c5:34:05:31:a5:ca:d2:40:13:99:4b:
e5:ff:f5:5f:25:11:38:09:96:61:99:a9:dc:d6:3f:
e5:7c:2a:a2:56:e9:b4:8e:69:a1:91:25:1c:4e:98:
b8:a7:7f:76:2a:3e:8c:a5:72:48:9e:9b:a3:ed:06:
a3:4e:03:0d:de:a0:23:87:ad:cf:30:a2:4f:f2:2e:
c2:2f:30:e8:69:90:66:2d:3b:38:a1:56:09:f7:55:
45:d0:2f:fd:09:d0:3f:f9:9b:36:99:d2:8d:08:7c:
84:ac:6f:ad:13:6b:19:ff:2e:da:d6:11:10:fc:2a:
f8:dd:e9:38:38:10:da:b1:08:fb:08:a3:13:96:9f:
66:b9:06:48:17:e4:a0:44:44:80:80:4c:ef:e2:f9:
d6:23:2f:ad:ad:64:61:ef:73:9d:d1:cd:82:c8:0a:
c0:a3:98:a7:a7:6a:ba:ed:0b:76:3c:3c:f5:80:f5:
c7:46:80:c4:43:61:be:69:ed:15:0d:43:f9:c0:e2:
65:60:65:e6:78:e5:e5:d6:cb:32:d6:00:66:57:80:
ad:30:87:90:bd:4b:e2:b2:1b:ab:1a:2e:1d:37:59:
bd:9c:95:2f:f5:69:5f:6c:7f:27:26:3f:3d:a5:e3:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A0:FE:34:7E:D7:2D:B7:E7:2E:13:2F:05:26:41:D4:A7:00:74:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/38ce5e9f-0136-3c2e-a301-b3f29126f64c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl
X509v3 Authority Key Identifier:
keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:fe:52:d7:e0:8b:1f:cc:5f:8a:7b:a4:18:9d:2e:2b:3d:b2:
31:db:74:3b:6d:fd:40:48:72:00:02:55:3e:70:a8:59:ee:23:
6e:10:3d:f9:d8:48:c6:16:0c:ea:19:82:b4:99:18:6f:f4:b4:
fa:96:3a:46:f0:9e:4f:4f:1f:90:27:53:02:17:c5:44:78:08:
f0:e7:b3:c2:e1:f4:22:b7:cb:52:96:59:1e:6e:27:73:ed:ee:
7c:ec:d4:1d:55:db:b1:ff:b3:e6:f0:b1:cd:c6:e0:4d:39:9c:
d3:da:ac:37:27:8f:a1:c6:ed:6d:18:c5:53:94:81:88:b1:77:
1b:a0:38:46:b0:d6:64:45:43:1a:6a:3e:99:94:77:f1:52:05:
00:ae:10:c7:e8:3f:27:50:e6:d2:28:4f:e1:86:d6:79:fe:b0:
9d:b6:72:1a:d4:b9:48:6a:a9:4e:b4:e2:d6:5c:ac:10:fb:6b:
f8:00:62:9b:a2:d6:80:c9:56:63:38:c9:fb:ea:ca:22:14:f1:
dd:40:6a:16:12:27:ad:c0:08:47:4d:98:36:82:9e:77:df:6e:
f9:14:46:9a:20:bb:22:58:7d:f1:bf:b8:87:3e:c7:c0:9e:d1:
e5:57:72:c6:5a:07:88:f6:b9:3e:c4:d1:96:2f:90:1e:8f:89:
03:29:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:47 2025 by rpki-client