Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa
File: 38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa (raw, json)
Hash identifier: QVWc//86vGHTXi5pjyXx3bvO4yJcPn9NyZjL2CcT5aM=
Subject key identifier: B3:32:BE:69:30:DF:EC:EA:F1:2C:CC:37:19:09:BE:51:85:C2:B4:A8
Certificate issuer: /CN=68de9da0-8f7e-4231-9340-c37abafc3714
Certificate serial: 010D0C9F43285848E16BEA10E51F61F3AF420D80
Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 1030
IP address blocks: 23.166.200.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:ea:10:e5:1f:61:f3:af:42:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=1ebd8d61-4b37-421c-a941-8a163d4abf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:fd:40:f8:93:e7:5d:67:58:c5:20:74:2d:
de:3e:f1:3a:5d:fe:c9:b3:b4:ce:4b:12:4c:54:e0:
b4:46:43:7a:a9:bf:1e:8a:9b:f2:84:7f:bc:20:d4:
5a:10:3b:28:42:66:03:1c:fa:c1:5c:e6:6b:e8:6e:
be:35:88:9e:be:9c:4f:76:21:84:f6:75:bb:24:35:
3d:f1:d7:93:cf:cd:0b:21:06:91:9d:df:84:74:74:
91:67:57:89:56:bf:c1:bf:43:8c:81:67:1b:c2:dd:
0b:cd:54:5a:39:8c:be:cd:e8:f6:ad:45:dc:43:8e:
9b:cf:1c:54:3f:53:fd:9b:06:93:71:98:da:b3:f8:
ce:d3:fa:8c:29:26:3b:77:a6:d1:7f:48:60:81:37:
d8:85:01:5e:25:c3:92:a6:4e:df:bd:75:c6:ef:4c:
13:90:56:e1:37:6f:4c:fe:de:26:fa:c9:be:7c:59:
ca:05:95:d4:16:e2:81:5a:70:cf:de:e1:73:7b:72:
1f:3e:4d:cd:80:c7:e9:b8:25:5d:91:bb:ad:93:14:
f7:42:f1:2a:7e:19:1b:26:ad:f5:45:e8:f7:5f:8a:
b5:a5:e8:c3:92:a0:b3:18:76:d8:c2:a0:ae:ad:6f:
5b:00:6b:6c:fd:93:d0:69:f4:5e:25:e3:bf:23:f5:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:32:BE:69:30:DF:EC:EA:F1:2C:CC:37:19:09:BE:51:85:C2:B4:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl
X509v3 Authority Key Identifier:
keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:c4:af:1b:69:f4:1d:74:50:ee:bc:90:17:5b:c2:c6:66:99:
0a:6d:fb:0c:dd:62:b4:c0:89:ea:b7:a7:e5:c0:39:27:f8:1d:
31:22:39:51:86:52:06:51:7b:0a:39:7d:48:24:4d:5a:bc:45:
ae:82:a2:9d:62:09:ce:4e:0b:9b:0b:4c:eb:13:8f:b2:18:0c:
c7:0e:ad:64:1b:dd:c6:42:fb:94:71:48:ac:c0:6c:5d:fe:ec:
b5:ea:e5:97:90:87:2c:c5:82:c3:8c:c1:87:cf:dc:f4:6b:04:
8b:96:04:9b:52:16:6e:cf:91:8c:fb:c4:71:b0:a8:dd:e2:3d:
3d:16:22:65:5e:5e:c2:c8:0e:72:2c:a7:87:72:0d:ce:34:09:
19:c8:63:63:5e:86:1d:0d:04:1f:92:68:41:9f:09:f9:03:83:
04:1a:12:03:70:3d:a0:6d:17:6d:59:82:b9:59:be:6b:7c:58:
99:a9:fe:09:1d:de:20:35:fb:a7:5f:10:62:67:ce:19:df:24:
fa:90:28:9d:b0:76:bc:d2:ff:f0:54:ca:5a:2c:cf:3c:e5:e6:
b5:fd:97:a6:97:93:d3:71:ad:7d:ca:13:af:ba:07:69:36:b0:
2a:97:e3:98:9e:ea:60:04:76:21:0c:e0:cf:5e:bb:61:0c:dd:
38:03:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:26 2025 by rpki-client