Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa
File: a4f9f1e8-30bc-3b04-a50f-256889a98473.roa (raw, json)
Hash identifier: 931WMORS5TymxLLP/vD0xK+SZ7N1qFCayN2nItiFf5g=
Subject key identifier: 77:D4:E6:92:04:F3:91:BC:E8:3E:C4:C0:26:67:23:BD:E5:5F:22:65
Certificate issuer: /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
Certificate serial: 010D0C9F432858487CEB348CEA9A434E5BEB6AC0
Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 32826
IP address blocks: 23.159.24.0/24 maxlen: 24
2602:fa53::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:34:8c:ea:9a:43:4e:5b:eb:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=ffb32f1b-766e-47e7-a71e-a5ebee0d3190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:95:29:34:3e:6e:67:73:37:b2:57:8a:33:
80:4e:36:82:6a:9b:50:a3:0d:7f:1d:16:03:70:b5:
b5:33:68:70:fc:10:9e:dd:e4:77:5a:dc:72:6e:99:
57:dc:20:cf:97:94:af:04:a2:40:e1:b2:26:53:1f:
d2:f7:7f:88:86:8c:bb:ca:02:1c:dc:73:84:c9:7c:
02:33:1f:ee:ef:cd:8b:ae:64:94:24:52:3b:35:8c:
3d:a3:a3:53:b2:45:bf:6e:44:fd:3b:06:d3:c4:4a:
68:75:18:3e:a3:d6:46:54:63:6c:5e:cf:90:49:a3:
ce:b2:ac:f2:05:25:2a:7b:1d:a8:b4:0a:13:fd:eb:
d7:f0:9e:b1:1a:13:d1:4b:4b:7f:57:7c:ec:53:df:
7a:97:99:7e:85:7b:2f:13:a6:b5:2e:05:4e:61:1d:
e6:5f:e7:33:5c:a5:70:f2:6e:74:25:78:21:6a:a4:
d2:b8:aa:63:b6:55:20:3f:1f:44:89:97:1e:7e:50:
82:b0:80:50:a5:78:d2:ae:b9:6c:13:3a:43:87:49:
e4:a3:2b:cb:06:eb:59:4c:75:80:8b:b4:31:0f:fd:
74:07:29:ef:02:7f:4d:4d:3f:58:28:c9:21:dc:c8:
21:34:c6:93:1a:a4:e7:34:a9:34:18:50:b5:4e:53:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D4:E6:92:04:F3:91:BC:E8:3E:C4:C0:26:67:23:BD:E5:5F:22:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl
X509v3 Authority Key Identifier:
keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.24.0/24
IPv6:
2602:fa53::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:4a:6f:61:5d:ae:c3:49:e9:26:99:b3:6a:c2:3d:8b:b6:61:
69:6d:4d:9d:53:8c:05:a7:9c:c1:30:a6:9d:16:43:c8:4e:db:
b6:6a:5b:c1:6c:de:33:6f:3b:5b:be:06:8d:dd:10:3a:5e:dc:
cf:ba:70:d9:2b:51:1f:2a:24:2f:39:6b:b4:55:3a:d9:cb:0b:
01:76:3c:4e:9a:e0:54:08:d0:ad:d0:98:eb:a8:9a:47:4d:38:
ea:45:5a:99:41:45:10:23:69:5d:5e:f5:b5:6e:39:08:4c:ae:
63:4f:00:48:00:95:67:f3:e4:9d:f5:4a:65:ee:2f:c1:3c:d0:
cf:61:59:ab:17:bc:45:f9:b0:ee:ea:da:62:26:7a:b0:e4:ea:
3f:e2:05:2e:b3:4d:ee:8e:b1:11:b9:5c:e2:8f:fb:40:bd:74:
38:85:f9:d9:d2:cd:c3:61:51:f7:95:4f:66:01:7d:b0:b7:92:
71:e5:dd:7b:54:d4:f3:ef:0f:b8:a6:3a:07:c0:a1:5d:84:98:
36:d7:64:7e:59:7f:a8:88:aa:2f:82:af:b4:3c:80:49:d3:d2:
9d:6d:41:3f:69:49:89:ff:06:53:6d:87:d9:14:31:17:d1:21:
14:d2:bb:9f:e1:b2:3c:36:f2:73:84:fb:8d:f9:43:53:dc:08:
e8:e1:8e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:49 2025 by rpki-client