Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16/7ab407c4-0df1-37df-b8e5-6512bb272666.roa
File: 7ab407c4-0df1-37df-b8e5-6512bb272666.roa (raw, json)
Hash identifier: oY+yl5ji7g3vJ/KFqSVyI+lbe7/5OB+/AqkqP3vt7Fw=
Subject key identifier: A6:B3:56:E3:81:F4:85:4A:5D:28:05:0B:7F:F2:D9:EA:85:12:EA:C5
Certificate issuer: /CN=85048768-1ef5-4142-89ca-ff7c72fc8b16
Certificate serial: 010D0C9F43285848FD56CEDABA42A03A7B7CA998
Authority key identifier: B9:BD:B8:C6:A7:DF:F8:7B:96:23:58:AE:97:47:AD:72:2E:8A:75:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16/7ab407c4-0df1-37df-b8e5-6512bb272666.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 215376
IP address blocks: 23.188.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ce:da:ba:42:a0:3a:7b:7c:a9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85048768-1ef5-4142-89ca-ff7c72fc8b16
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=9d00cb5e-11ea-4890-bed1-5dcd7f4e34cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:7e:8d:d5:79:0c:bb:7e:d5:65:f7:6d:a6:
ba:ee:f6:14:a1:b9:08:0b:0b:fc:dc:81:71:0f:a1:
ba:a4:45:3a:f7:04:8c:3a:31:52:6e:9a:54:b6:26:
76:ee:11:59:ca:a4:9a:c7:91:3a:e2:fe:99:b3:36:
a0:b2:2f:b8:71:cf:9f:dc:c3:64:4d:0f:e8:0b:9b:
90:f6:db:a3:b7:89:ad:72:fc:e7:07:ac:2a:4e:21:
40:2e:47:de:90:e7:36:c0:3d:7a:c7:38:36:cd:bd:
d7:a2:94:25:7c:c6:e9:0c:29:65:6e:a3:76:42:a0:
26:d6:6e:b7:19:49:d9:0c:d2:6b:cf:1e:49:6b:8b:
d8:5a:0a:32:c1:02:bc:1a:b8:8c:ca:42:7c:71:17:
5a:cd:e4:b8:07:fc:97:6e:c0:27:36:0b:85:79:c7:
86:e0:7e:7e:48:1a:b2:a0:f9:58:13:1c:65:73:09:
0a:77:53:de:06:f4:ff:0d:cd:3a:cd:85:43:3d:6d:
1d:e9:fd:44:e7:39:e4:6a:c2:14:f8:0d:fd:f0:d7:
fa:b9:be:37:85:29:da:78:9d:93:ca:45:c1:53:07:
b7:fa:50:c2:27:f0:9b:9b:b0:30:af:45:df:04:3e:
bf:33:7d:74:24:4e:1e:d5:72:af:46:56:f0:dd:58:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B3:56:E3:81:F4:85:4A:5D:28:05:0B:7F:F2:D9:EA:85:12:EA:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16/7ab407c4-0df1-37df-b8e5-6512bb272666.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16/85048768-1ef5-4142-89ca-ff7c72fc8b16.crl
X509v3 Authority Key Identifier:
keyid:B9:BD:B8:C6:A7:DF:F8:7B:96:23:58:AE:97:47:AD:72:2E:8A:75:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/85048768-1ef5-4142-89ca-ff7c72fc8b16.cer
sbgp-ipAddrBlock: critical
IPv4:
23.188.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:a8:51:73:95:9b:26:ff:7e:2c:20:cf:f0:11:67:31:ae:3e:
04:76:60:8e:af:db:8a:22:b1:6c:c3:5b:87:b6:95:c2:71:3d:
54:6f:66:06:ef:ab:50:1d:d7:1d:af:6f:2a:5e:8c:52:ab:8a:
0e:99:af:80:3a:0a:20:71:1e:3d:69:37:54:03:60:e9:ff:14:
51:fb:06:d9:50:9d:14:00:f9:41:f3:c3:96:06:9e:24:a7:ae:
e5:0d:9d:da:53:d1:c2:6a:c1:14:69:e6:42:ab:6a:87:9b:d1:
55:d6:48:f7:fb:56:c3:95:c0:d5:4b:16:5a:98:89:aa:c7:be:
cb:77:6d:9c:de:77:18:76:93:0c:f2:42:3b:db:cf:fe:83:12:
61:68:d3:d3:80:02:85:1d:d5:19:c4:da:cf:c0:ac:88:c2:1b:
5e:4f:4e:9a:96:94:b3:df:8d:fe:30:09:ae:59:e0:29:88:a9:
0d:94:98:ee:3a:dc:04:e6:b7:19:c9:16:71:23:25:3d:0d:01:
b8:1c:49:cf:0c:40:1a:8a:3d:0f:f2:c1:20:76:37:0f:76:54:
83:6c:d0:ba:be:09:d5:d0:da:14:4a:f3:fc:a4:02:c2:dd:40:
4c:15:95:14:07:bf:0d:cc:9f:4b:e4:67:ce:48:39:55:66:f9:
ef:65:96:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:50 2025 by rpki-client