Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c52eefb8-44ff-3a80-a24e-0665d5a3ec15.roa
File: c52eefb8-44ff-3a80-a24e-0665d5a3ec15.roa (raw, json)
Hash identifier: lQxzOCXm3PUAnRX9kO5dC80DyafxeDb554paMKRYqF8=
Subject key identifier: AA:B8:EB:94:72:08:77:16:16:90:E3:50:2E:34:74:45:04:58:E8:D4
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F43285848F65BE5E89DB28894581EF100
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c52eefb8-44ff-3a80-a24e-0665d5a3ec15.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 19148
IP address blocks: 23.19.52.0/24 maxlen: 24
23.19.53.0/24 maxlen: 24
2607:f5b5:2::/48 maxlen: 48
2607:f5b5:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e5:e8:9d:b2:88:94:58:1e:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=353f6f35-f2f7-4fbd-8fc6-eb905c5f4c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:b8:8c:b9:5a:a6:b4:da:f6:8c:6e:e4:f1:
6e:7c:f2:fd:9d:70:59:4f:7e:23:e8:2a:e7:0c:4a:
df:7a:d1:b1:2a:62:b1:a9:ad:57:85:56:d2:7f:8f:
1d:e0:f5:0a:ea:9d:0c:9d:33:a4:d1:cc:73:8c:3c:
fe:94:de:78:99:3e:2b:1d:d4:4f:22:6e:7b:77:44:
2f:2c:1e:05:5b:39:0f:91:c7:e5:a3:51:9b:f5:eb:
85:bf:ea:fd:73:3d:03:25:ee:48:7f:56:97:dd:8f:
ef:8e:08:e4:6e:8d:02:0c:5f:da:27:43:6f:d5:7c:
5f:31:62:75:da:e5:35:c6:48:83:f4:c0:b8:98:87:
da:3f:4e:16:d1:44:c3:66:8b:e3:20:89:37:f7:0c:
6c:a7:e5:3d:b0:9d:c3:15:72:3e:57:28:a1:ec:06:
8b:01:ee:a8:27:c4:1e:b2:cf:ed:38:2c:2d:da:a7:
76:e2:53:4a:00:c1:f9:e3:d4:13:46:63:71:8c:bd:
6b:34:23:96:6a:20:73:53:cd:37:b7:ed:e6:7d:11:
92:b6:f5:4c:8c:e3:1f:7a:91:8a:59:51:6c:25:f5:
da:c9:75:fb:2e:d9:64:8d:25:ae:bf:10:c3:cc:ad:
b9:f2:fe:f9:2d:42:f2:29:b3:b1:64:35:e5:a1:0a:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B8:EB:94:72:08:77:16:16:90:E3:50:2E:34:74:45:04:58:E8:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c52eefb8-44ff-3a80-a24e-0665d5a3ec15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.52.0/23
IPv6:
2607:f5b5:2::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:6c:48:b5:c4:ba:61:2a:df:65:c9:bc:95:48:78:b7:5d:ed:
0c:f4:3f:db:00:4b:e2:fe:02:0b:1a:45:4d:67:48:2b:25:fb:
a6:ff:98:75:5a:91:63:98:d8:34:e7:84:bd:fc:e9:42:c9:7d:
d5:15:dd:63:c8:42:6d:4e:9a:18:4a:5e:da:98:43:ef:ad:f0:
84:56:63:cc:37:3c:f2:eb:43:db:b3:1d:b6:60:9e:a7:65:69:
36:c2:5b:34:83:f2:21:9e:f9:78:da:cd:9c:10:b6:15:2f:f9:
63:bd:27:f9:3f:40:79:54:2c:0d:b4:aa:f6:82:79:b1:7f:f4:
ef:18:a6:29:6d:7e:bf:51:b6:66:67:ca:1e:da:37:ae:c0:f6:
6c:10:99:34:85:35:22:47:7a:7c:2a:cc:40:11:f4:09:ae:9d:
da:e2:5e:1a:46:c9:bd:b8:e7:e9:f2:cd:e9:7f:81:e8:65:ef:
e9:6f:67:d5:af:3b:1a:62:a4:a8:86:d8:45:95:c9:01:73:3b:
23:a1:57:e6:02:dd:1f:46:03:e6:52:34:24:36:23:a8:0f:0b:
02:a5:03:9f:e5:e6:23:f9:d2:40:99:ce:7d:9a:7e:cb:c4:a4:
d6:50:96:8e:1f:12:b5:23:d4:ca:e0:e5:36:6b:3c:d0:21:55:
22:1e:9c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:57:31 2025 by rpki-client