Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa
File: 29949da6-8cb5-3545-95c6-65e47a0cc103.roa (raw, json)
Hash identifier: 19Rr70R7QaSQpyXLjLYxqv2dGGDdrxPctD5hfp+/GUI=
Subject key identifier: C7:54:F8:0D:9C:FD:0A:E7:C0:AF:B0:3F:2C:08:26:70:B6:D5:DC:33
Certificate issuer: /CN=68e273c1-e39f-464b-8c1f-b45c8df2b148
Certificate serial: 010D0C9F43285848926AC87DFC657975B5023440
Authority key identifier: 4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa
Signing time: Fri 17 Jan 2025 06:50:04 +0000
ROA not before: Fri 17 Jan 2025 06:50:04 +0000
ROA not after: Thu 17 Apr 2025 05:50:04 +0000
asID: 26886
IP address blocks: 23.167.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:92:6a:c8:7d:fc:65:79:75:b5:02:34:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e273c1-e39f-464b-8c1f-b45c8df2b148
Validity
Not Before: Jan 17 06:50:04 2025 GMT
Not After : Apr 17 05:50:04 2025 GMT
Subject: CN=f7dacdc7-9903-49de-9d04-e3fbb127d417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:8c:7a:24:c6:59:87:e6:3e:7a:69:53:72:
0c:ea:36:8d:4d:75:0b:4e:13:29:8d:94:74:db:33:
1f:2d:a5:f1:25:8b:a5:e6:c6:2f:87:29:cd:07:81:
7e:1f:ab:de:43:a7:97:21:a6:5f:a0:83:c9:d7:f4:
3d:c6:16:bb:16:c3:00:bb:0e:a3:0a:0b:6e:36:f9:
22:8d:10:a4:ae:b5:f0:36:93:59:9c:76:d6:10:14:
90:37:dd:72:0f:04:2d:a7:68:24:99:ac:a0:0c:57:
55:c5:fc:e1:a9:48:ea:73:d2:4d:60:d9:93:ed:57:
0a:73:cb:2f:7e:33:90:43:60:17:72:7c:22:c7:9d:
00:11:75:f3:bd:79:e5:86:2e:27:5c:9a:e1:4c:ee:
3f:78:c5:a3:c8:83:99:3c:b9:99:c3:02:8a:f3:ac:
9c:43:65:a5:9c:7c:45:3d:a1:2c:ac:3e:57:d3:60:
c4:a4:07:f3:bb:73:64:4b:ef:86:50:da:04:ac:af:
a7:0c:4c:a1:aa:2d:75:01:e0:4d:7a:70:de:5c:9d:
c0:8e:67:53:eb:67:66:bb:eb:3d:e1:20:26:f6:83:
f0:3f:e8:27:02:95:a6:9b:a6:30:42:0e:af:6e:e4:
9d:a5:c4:3f:27:e5:8e:48:ec:70:57:62:5c:9c:43:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:54:F8:0D:9C:FD:0A:E7:C0:AF:B0:3F:2C:08:26:70:B6:D5:DC:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/29949da6-8cb5-3545-95c6-65e47a0cc103.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148/68e273c1-e39f-464b-8c1f-b45c8df2b148.crl
X509v3 Authority Key Identifier:
keyid:4D:2F:8B:7D:51:9D:D1:11:01:55:3B:73:1B:DB:9A:7A:BE:62:BF:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68e273c1-e39f-464b-8c1f-b45c8df2b148.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:79:1b:91:60:2f:03:c8:dc:06:1c:0b:db:42:c8:b8:28:6f:
b0:a3:9f:c2:cb:d6:1e:18:57:8f:ed:81:6b:21:75:b1:ec:bc:
6f:f3:41:08:94:83:26:4e:51:de:43:34:91:24:13:8a:2c:5d:
e3:5c:b8:c1:16:88:23:09:b5:c5:55:d5:80:38:91:95:c8:82:
35:02:d3:d5:f5:7f:7c:e4:53:c5:ff:73:e0:6f:cb:20:bc:59:
e9:c4:53:4e:72:a1:92:10:ed:49:ef:cd:b9:84:0e:bb:91:28:
ce:a2:c2:6f:9f:37:32:c0:78:f2:4f:c4:86:75:8d:e2:6a:67:
11:31:8a:5f:40:dc:24:b2:a7:2c:56:1a:3b:40:aa:1c:7e:d8:
f6:cb:8d:e8:c4:23:db:20:ea:c2:06:f2:f8:3c:92:e0:4f:53:
96:0c:6f:7d:86:1f:31:48:cd:e0:f4:f2:5c:a2:8d:f3:f8:22:
67:58:fd:12:ff:b9:ac:e9:b4:d5:d5:ef:ec:9d:77:12:fb:5b:
25:93:a1:22:38:31:cd:94:65:43:4a:45:ec:f0:08:12:c5:a8:
22:3d:47:ac:07:91:a2:fd:28:55:fd:ef:b8:ea:81:3e:2f:d1:
08:9e:f0:34:b6:f6:6b:41:6c:f6:1f:a0:60:45:a9:01:22:b6:
f7:eb:b5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:20 2025 by rpki-client