Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa
File: 989d0448-cf0d-3fdf-a782-65bf875466d4.roa (raw, json)
Hash identifier: DEwmDq+CTJXBuxG11GAFAC6ziU/DLtsSljV65vem2Bo=
Subject key identifier: 27:63:1B:23:3D:04:52:27:2A:B2:6F:47:36:A1:9C:B5:3E:BC:44:B0
Certificate issuer: /CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a
Certificate serial: 010D0C9F4328584950F96DA3C948F00AEC0D6A00
Authority key identifier: 10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 395497
IP address blocks: 23.166.152.0/24 maxlen: 32
2602:f9d6::/40 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:6d:a3:c9:48:f0:0a:ec:0d:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb60fa2-8c1d-4a38-bdcf-15f53f276c5a
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=c05b47e5-a54c-468a-8c83-5deb4fb708e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:31:90:96:65:d8:19:0e:fe:bb:e8:7e:52:66:
47:54:6b:a0:b0:62:f1:e2:73:7b:29:62:19:a4:2f:
00:49:ff:4a:0b:53:86:50:aa:67:3c:d6:f7:92:4f:
c7:1a:6b:ce:28:b7:fa:53:ee:27:dc:03:d2:34:6e:
d2:69:d5:cc:67:5f:06:fe:04:3c:de:02:e4:f9:00:
fe:e3:a2:b7:bc:9f:54:a0:38:74:ee:ef:3d:a9:45:
ed:09:1c:2e:20:8b:5b:4e:3c:8a:7a:cd:8c:4c:1c:
3a:d4:c4:22:85:6a:83:50:63:63:38:15:2e:3d:37:
a2:b9:64:ac:ab:6a:67:36:22:57:10:96:d0:dd:83:
f8:96:0c:59:75:a5:c7:36:69:0f:ad:9d:9b:e2:81:
48:c7:63:18:88:4b:7c:46:09:5a:2e:83:5e:60:bf:
c3:c7:e5:87:27:3c:6c:24:f1:bd:10:af:fc:37:fc:
4c:90:95:d2:cd:09:76:74:a0:37:d7:ec:7f:be:9e:
af:77:d5:3e:f8:1e:78:e4:a4:82:5b:13:ac:ab:48:
a3:40:43:c4:97:2c:a2:d3:98:61:6e:70:7f:c6:ed:
87:4e:23:fd:4c:c7:d6:73:c0:c6:fd:c8:6e:13:33:
b0:a2:26:10:06:04:fa:ae:23:d1:0e:f8:89:b6:72:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:63:1B:23:3D:04:52:27:2A:B2:6F:47:36:A1:9C:B5:3E:BC:44:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/989d0448-cf0d-3fdf-a782-65bf875466d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.crl
X509v3 Authority Key Identifier:
keyid:10:65:EA:40:A0:AB:FC:06:15:35:EE:D5:53:3B:69:77:9F:5C:DB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/abb60fa2-8c1d-4a38-bdcf-15f53f276c5a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.152.0/24
IPv6:
2602:f9d6::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:44:74:de:10:db:0e:7b:18:de:47:a6:95:75:c3:17:6a:94:
9e:ff:04:46:ed:36:41:da:78:f8:e5:74:e2:15:fb:d9:b2:6e:
d3:3f:a0:b3:1f:9f:16:ac:d2:f9:c8:25:74:86:85:2a:7a:78:
70:14:46:a8:1c:33:4e:d4:bf:4c:8b:8e:3f:d1:2f:c1:5c:c4:
0f:89:fa:06:28:9e:50:ff:0a:4e:7b:4e:41:55:76:04:ca:05:
1f:af:15:f6:76:77:14:9b:44:fb:bc:3d:b1:c2:a4:8b:1a:4c:
d2:95:ee:59:02:fb:f6:37:80:93:a3:f0:ee:c2:df:a2:76:2a:
c5:c7:8b:07:89:b1:ea:58:04:45:66:ec:0f:b3:b9:79:81:65:
20:6e:7b:c3:a3:1a:d7:e2:cd:a1:43:40:a1:d0:d2:5f:75:15:
bc:c8:0c:bd:97:c6:5b:c4:9d:e1:27:64:10:c9:0a:b0:8c:bc:
c5:91:19:1c:d7:3c:cf:8f:d3:50:8a:6f:8b:67:77:28:d6:02:
fb:c4:5d:3c:b3:a2:a3:be:fe:23:79:49:35:0c:78:e1:73:b5:
3c:dd:fc:5d:64:12:bc:36:64:75:70:3a:95:c3:3b:2c:64:76:
8e:27:19:ce:3d:09:e2:34:ac:0a:a3:f7:84:29:7e:23:06:ee:
86:78:a6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:52 2025 by rpki-client