Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/86e38769-1633-3d65-a283-eba0aeb2853a.roa
File: 86e38769-1633-3d65-a283-eba0aeb2853a.roa (raw, json)
Hash identifier: trdR1HGmcYqV30aG42Id0S4dGD3qpOqSwq6XzGZo2oA=
Subject key identifier: CE:23:88:D4:10:F0:C3:5C:D9:EF:B2:75:AA:C9:09:1A:2B:8A:F8:DD
Certificate issuer: /CN=d8efa6bf-6e74-4780-a80d-cf85d80c97ca
Certificate serial: 010D0C9F432858427E6F1EE069031A378DFE3380
Authority key identifier: DF:F8:64:A7:2D:1C:EA:15:63:CB:A7:32:9C:AC:00:33:B5:71:3A:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/86e38769-1633-3d65-a283-eba0aeb2853a.roa
Signing time: Sun 09 Jul 2023 22:21:00 +0000
ROA not before: Sun 09 Jul 2023 22:21:00 +0000
ROA not after: Sat 07 Oct 2023 22:21:00 +0000
asID: 8075
IP address blocks: 23.148.120.0/24 maxlen: 24
2602:2a5::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:42:7e:6f:1e:e0:69:03:1a:37:8d:fe:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8efa6bf-6e74-4780-a80d-cf85d80c97ca
Validity
Not Before: Jul 9 22:21:00 2023 GMT
Not After : Oct 7 22:21:00 2023 GMT
Subject: CN=321b6e7f-4ee0-45f0-a1e4-aade7b53fb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6c:af:b1:b7:a1:e5:6a:64:ab:a8:17:15:c4:
1e:7e:73:12:a0:59:df:7c:c0:df:85:f9:67:f4:2c:
75:ee:11:5f:4d:48:9e:52:a2:34:52:97:8e:f4:c4:
b3:2f:db:28:3d:0f:36:be:02:18:73:a4:0b:40:36:
06:1f:2c:bf:be:51:d4:da:88:3d:df:bd:f2:9c:62:
12:4c:d3:dd:38:11:ae:1a:60:1e:74:92:aa:0e:03:
50:7f:6f:46:f0:d0:76:02:3f:0c:27:d9:69:fb:15:
77:91:6b:75:b2:58:f4:8a:bb:3f:88:79:a0:7a:75:
0c:5c:27:21:a5:17:b1:4b:83:48:79:6e:dd:51:ba:
ff:f3:64:20:6b:24:2e:35:80:fe:07:4c:5a:4c:55:
97:9c:68:b1:9c:ff:32:5a:62:86:49:68:44:bf:af:
d8:e2:01:bf:46:d5:d5:4f:a5:26:f8:29:d1:76:a2:
e9:77:ab:31:20:8d:f6:4e:e7:ea:05:4b:de:94:b9:
18:6b:0b:65:f1:3c:c2:b8:19:86:19:2e:20:64:1e:
71:79:8a:35:1c:22:34:a3:31:5c:ac:74:50:5d:ac:
5a:2c:61:cc:52:60:32:4c:05:f2:0e:b7:5c:f6:18:
6d:06:38:bc:86:d1:f8:87:c4:85:3a:7d:56:95:d7:
7e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:23:88:D4:10:F0:C3:5C:D9:EF:B2:75:AA:C9:09:1A:2B:8A:F8:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/86e38769-1633-3d65-a283-eba0aeb2853a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.crl
X509v3 Authority Key Identifier:
keyid:DF:F8:64:A7:2D:1C:EA:15:63:CB:A7:32:9C:AC:00:33:B5:71:3A:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.120.0/24
IPv6:
2602:2a5::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:12:fa:ac:ee:41:fa:aa:3f:ac:5d:09:85:17:a1:2c:32:ef:
ec:4f:2b:87:e1:e2:79:91:3d:68:59:7e:41:4c:2f:18:da:f4:
11:cf:fb:8b:0c:f7:40:9e:bf:08:6d:b9:06:1d:ff:f6:c6:b0:
35:c4:89:b7:e2:d4:6c:d4:f2:f8:bc:89:f7:f8:a4:d3:12:7a:
f0:0a:3b:ee:d7:0a:18:a0:6e:7e:86:61:cc:52:45:f6:16:66:
03:1a:06:05:cd:30:8d:50:5b:59:94:8c:60:bc:15:82:6d:32:
15:b9:fc:3e:81:db:3e:88:59:4c:fd:de:95:de:7e:fc:66:b7:
5b:fe:2d:fd:eb:86:07:a0:cd:77:ce:23:c6:1b:15:d2:c1:1e:
b5:53:4e:8e:9d:e7:13:16:98:7a:bf:c8:dd:09:b7:06:c0:8b:
79:f7:3d:cb:cb:a5:53:f3:ca:1f:2b:75:98:8e:77:39:2f:fb:
ab:da:dc:7c:fb:1d:01:25:a0:61:ad:67:ab:26:2c:8d:57:ce:
38:56:94:72:68:9e:79:d7:3c:2f:9c:b4:37:c1:f1:9d:e9:43:
6b:e9:3c:5c:15:06:68:75:15:71:dd:eb:c0:09:94:b6:f0:57:
40:6b:73:16:50:9c:84:6e:25:1d:c0:bd:1c:0d:c9:d0:ee:c5:
38:94:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:34 2025 by rpki-client