Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/a564119c-b73e-30e1-b1b8-fd4ec242c992.roa
File: a564119c-b73e-30e1-b1b8-fd4ec242c992.roa (raw, json)
Hash identifier: 41nxTuVnHZm4asoqDZibOEuD9RuMVHl4Ev31o3WnDWo=
Subject key identifier: 1F:5E:C2:AC:39:EE:E2:3F:FD:87:F8:E2:81:97:F6:B0:CC:CF:62:F4
Certificate issuer: /CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Certificate serial: 010D0C9F4328584818DD093D8A384BCB8727D080
Authority key identifier: 56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/a564119c-b73e-30e1-b1b8-fd4ec242c992.roa
Signing time: Wed 04 Dec 2024 17:51:39 +0000
ROA not before: Wed 04 Dec 2024 17:51:39 +0000
ROA not after: Tue 04 Mar 2025 17:51:39 +0000
asID: 53356
IP address blocks: 23.189.120.0/24 maxlen: 24
2602:f805::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:dd:09:3d:8a:38:4b:cb:87:27:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6a95b3-dd3c-40de-9bd2-84357b74f801
Validity
Not Before: Dec 4 17:51:39 2024 GMT
Not After : Mar 4 17:51:39 2025 GMT
Subject: CN=a776ddb5-38d0-440d-b449-b614d0a3c830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:06:39:77:a1:cb:f3:3f:1c:6b:d1:3c:5c:01:
d8:87:97:15:c3:33:db:57:ba:8f:24:ac:39:97:57:
c6:33:0d:5a:a6:67:73:68:9b:db:a1:ce:e9:de:70:
f6:e5:d2:5a:8a:68:d9:93:28:81:80:54:a1:20:26:
32:1f:e2:58:a0:34:d8:6f:e8:2c:e6:98:6a:e1:45:
31:9c:b3:36:c2:c1:85:80:20:b1:da:e9:e6:f7:73:
40:cb:4c:73:fc:3c:e7:d1:9f:1c:8f:3e:15:f2:dd:
ad:d1:34:26:1b:04:16:55:65:b1:08:ea:fc:fa:ad:
45:24:31:25:2e:f1:0f:bd:a7:29:e3:1c:bf:b9:aa:
bb:12:15:f7:28:bf:1f:b9:35:47:eb:e3:54:66:11:
4e:0f:f9:d7:43:c8:0e:dd:a3:b5:d7:58:5e:0f:d0:
69:b0:25:9b:a7:d5:92:f6:20:77:74:1f:22:e3:cf:
a1:a0:10:5f:a9:61:82:86:c4:cf:37:d9:11:e0:78:
e7:60:83:66:c5:10:25:ae:8a:12:f0:c8:40:60:89:
f9:cc:bc:da:1c:21:0c:0f:13:20:7e:77:bf:2f:16:
8a:f2:f2:4c:55:93:5b:ca:41:06:49:d1:24:91:54:
fc:6e:44:08:5d:57:e3:24:e3:a4:85:c2:e3:30:39:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5E:C2:AC:39:EE:E2:3F:FD:87:F8:E2:81:97:F6:B0:CC:CF:62:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/a564119c-b73e-30e1-b1b8-fd4ec242c992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801/ba6a95b3-dd3c-40de-9bd2-84357b74f801.crl
X509v3 Authority Key Identifier:
keyid:56:83:39:F0:DF:32:B7:60:C5:65:26:B1:9D:69:1F:6F:6C:44:A1:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba6a95b3-dd3c-40de-9bd2-84357b74f801.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.120.0/24
IPv6:
2602:f805::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:76:e8:12:a9:3a:2c:e6:9f:6f:75:82:1f:ce:0f:d2:ca:7e:
74:db:dd:ce:fe:ce:7a:55:ec:af:2a:d5:06:de:76:fc:2c:55:
4f:e2:38:12:66:e4:2a:79:b5:69:52:e9:4a:4d:3a:97:0d:b6:
89:80:f2:61:bf:5b:30:09:73:3d:a9:ae:f8:2f:51:bb:e8:7b:
6d:f2:7e:af:c8:c5:71:0e:8f:19:61:ae:3d:df:ae:1b:3d:46:
f3:6a:fc:b8:3f:5f:b2:fa:e0:5f:44:3e:d9:70:86:e8:d0:bb:
c0:de:48:6f:f1:d2:c8:d8:a9:12:50:3d:01:6d:3d:94:a9:cc:
2b:7b:16:78:d2:4a:e7:ea:c1:a5:73:b0:0d:af:97:2d:fb:27:
8b:14:eb:46:86:2e:d8:d5:db:ec:c5:8e:66:82:c2:8f:12:7e:
03:fe:a9:96:be:fe:b8:d0:86:48:a5:55:62:8b:77:01:99:8e:
db:b4:ef:0a:98:81:2d:c3:3b:80:05:36:0f:0f:e9:8e:5f:bc:
2a:80:66:62:77:84:e5:f6:2f:34:50:dd:ce:1c:f2:62:c7:13:
2d:4f:ab:71:83:de:b6:6a:a7:ab:04:c3:b4:f1:a2:4f:17:2e:
5a:d0:16:7b:5b:99:ac:35:cd:45:8d:5f:95:91:c4:7f:08:6c:
0f:61:56:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:39:27 2025 by rpki-client