Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa
File: bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa (raw, json)
Hash identifier: nP64SOmz1uyO5c/cdnPQjVYiw1rcEBl+qWTc9Eg4+F4=
Subject key identifier: 38:52:62:F4:C9:E2:45:DA:D0:EC:FB:67:63:DD:C6:CB:91:7E:CB:63
Certificate issuer: /CN=ed14d35e-d16f-4ad5-82c4-5dcd3b569de2
Certificate serial: 010D0C9F4328584893409D482451245896429C80
Authority key identifier: 55:42:44:A6:EF:F2:01:59:61:93:69:92:0C:27:51:AE:B5:D2:67:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 8796
IP address blocks: 23.159.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:9d:48:24:51:24:58:96:42:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed14d35e-d16f-4ad5-82c4-5dcd3b569de2
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=df436b26-2339-4ad9-b019-eaccbafcf22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:65:2c:cc:1b:91:ea:3d:fc:f6:45:f6:c7:ca:
f2:3c:b4:65:1c:3b:17:ee:4c:e8:cb:1d:51:2e:e1:
82:b7:a9:70:96:57:b1:5a:f5:05:cc:d5:57:dd:76:
b2:c0:75:5d:34:8c:a7:cd:68:92:e9:5d:2b:7b:2c:
2e:a6:f3:b8:a3:7c:38:b2:0f:32:0b:f4:9d:f2:38:
e4:f7:df:3e:72:be:47:1e:32:d4:60:f0:f3:bd:85:
34:67:f6:ba:e2:ec:b4:30:81:ce:d4:a5:77:8c:2e:
0e:e5:78:0c:f2:0a:1a:94:8a:9d:97:a6:f2:47:51:
60:15:de:5a:92:5b:b8:ff:82:89:b0:39:43:2b:10:
73:1f:08:2f:f5:1c:cb:06:21:56:12:ce:9a:6a:0c:
31:d6:8e:00:e0:56:b1:b5:85:fb:42:4c:23:e8:ce:
81:51:f3:87:d4:cf:b9:bf:9d:69:9a:13:2c:42:c2:
8a:2f:d5:75:3c:03:d9:31:93:3b:68:07:f1:48:10:
49:02:b5:dc:5e:61:f5:e4:1d:fb:d9:c1:04:8e:d4:
bb:d5:a8:7e:45:0a:5c:6a:6b:ec:90:c8:17:bc:b4:
d4:4e:bd:67:f3:ea:23:f2:69:45:ad:d1:3a:fe:7f:
f0:38:2f:50:43:42:73:e0:6d:6f:80:c2:55:fb:4a:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:52:62:F4:C9:E2:45:DA:D0:EC:FB:67:63:DD:C6:CB:91:7E:CB:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/bd1955f4-ea6c-3961-8865-9c11c3d1ddca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.crl
X509v3 Authority Key Identifier:
keyid:55:42:44:A6:EF:F2:01:59:61:93:69:92:0C:27:51:AE:B5:D2:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ed14d35e-d16f-4ad5-82c4-5dcd3b569de2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.159.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:15:da:ba:27:0a:77:0a:d4:81:96:f6:de:14:40:fe:0a:92:
12:02:a4:e2:5c:f8:78:cd:25:03:5a:f4:18:13:a3:b5:e7:3f:
3d:04:e5:5c:dd:03:c0:17:d4:17:3c:4d:0f:d8:eb:47:b7:dc:
c4:2b:9c:7d:c1:e9:10:c2:ed:06:f9:d9:ac:60:90:6a:8c:fe:
bf:16:31:3e:ff:7a:3f:c0:0a:04:67:d6:01:46:51:00:ce:fd:
e1:a5:53:6a:b7:28:82:ec:b8:e1:b3:29:4f:fa:33:47:47:7b:
23:d3:73:03:38:da:b1:56:76:30:22:d3:c9:4d:e2:0e:1b:ca:
84:fc:ef:16:ae:a7:f1:02:5f:90:d3:96:72:35:80:11:ba:55:
a5:a3:b8:0f:f0:19:d8:48:42:99:2d:20:70:52:c7:e7:c3:69:
96:d1:19:cd:d4:ac:b4:29:8c:09:1f:7e:fa:b9:14:ea:83:24:
de:11:22:6f:5d:f4:60:3e:65:19:da:d9:25:1c:58:b6:7f:80:
28:bc:3a:9d:fa:76:12:b7:31:ef:dc:cb:2e:b4:1a:a5:0a:e4:
19:ca:ba:4d:75:d8:2d:27:a1:8e:50:0f:86:bb:d2:8e:0e:a3:
e3:78:60:f1:96:f2:16:0e:e2:2e:7d:ae:dc:68:3a:33:36:57:
02:2b:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:27 2025 by rpki-client