Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa
File: d4df3a08-c899-316f-abc6-b58548efce04.roa (raw, json)
Hash identifier: NFyHEt7E5yMvBHt6avVWdBjq+Cwp1WWtGy1PRihsrEg=
Subject key identifier: A7:D3:F9:7B:EF:2C:0A:5E:D5:92:36:FC:F6:E2:79:55:37:01:E5:60
Certificate issuer: /CN=d7396eb8-1550-4d28-9285-c71c97fd087d
Certificate serial: 010D0C9F432858491AA6B2A67F7B0406C9308780
Authority key identifier: FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 31959
IP address blocks: 23.130.252.0/24 maxlen: 24
2602:f76a::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:b2:a6:7f:7b:04:06:c9:30:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7396eb8-1550-4d28-9285-c71c97fd087d
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=b08686c0-e909-4969-ab71-2ff796d0efec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:3a:37:ba:d5:55:15:8f:3f:28:54:43:bf:
3d:d8:50:3d:ce:d1:d3:bc:02:03:f1:aa:04:54:76:
13:7c:6e:3e:70:fa:53:a0:eb:8c:fc:e8:b0:a1:7d:
75:40:ac:e0:ad:6f:14:05:d8:b6:7c:e9:28:bc:29:
11:06:c4:95:27:81:e4:5f:e7:50:12:75:c4:0e:e3:
b7:79:ff:ae:99:3a:ce:9f:f5:8b:2f:18:79:40:63:
f5:cc:71:bb:bc:a7:47:e4:00:e2:02:e1:7e:e3:49:
fd:81:71:ea:4e:98:fe:9c:3e:87:d3:8d:b9:ea:c9:
4a:68:f5:65:57:3b:f3:42:23:09:fa:4e:70:76:30:
9b:34:52:e2:71:70:f3:2e:58:1f:bf:87:91:fd:de:
b5:27:f4:f0:97:b9:d4:5f:c0:d7:49:7c:36:78:26:
8d:8a:22:22:3a:95:db:21:89:d9:9b:18:ab:0e:52:
4f:7d:6d:44:31:67:89:7f:95:49:cb:1f:cf:ff:bd:
10:69:7e:79:67:3b:5f:d0:41:77:34:a5:e9:29:a5:
f7:40:cd:7d:25:c5:55:44:d4:95:ec:a3:ed:ee:59:
6d:7b:cc:85:ff:b2:7b:28:62:97:35:db:49:3b:3d:
95:99:23:b8:e3:01:7d:a5:9c:33:b6:1a:66:11:af:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:F9:7B:EF:2C:0A:5E:D5:92:36:FC:F6:E2:79:55:37:01:E5:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl
X509v3 Authority Key Identifier:
keyid:FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.252.0/24
IPv6:
2602:f76a::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:6c:1f:d8:03:03:7f:72:d6:ef:73:63:3b:78:b1:69:99:13:
a8:df:16:d2:51:eb:3a:3d:5a:2a:4d:be:57:ad:b3:6f:43:4b:
52:7d:77:3a:fd:73:5e:0c:75:42:0e:39:dc:04:da:ec:09:3f:
76:14:ea:33:62:e9:60:49:1b:cb:65:f0:ef:dd:c1:5f:bf:25:
89:11:57:05:48:66:57:e5:ed:08:09:fe:61:0e:2c:32:1d:2a:
30:79:c2:3e:d1:38:af:1e:86:2f:4d:7b:30:e3:15:b6:35:b6:
a4:77:a1:a5:06:82:dc:05:23:84:70:ae:21:0c:70:32:bd:79:
e6:d5:d6:68:3f:c8:8a:05:f2:5d:b0:42:1d:32:bf:c1:c7:a8:
3f:90:23:eb:61:2f:91:3e:29:f7:7c:db:14:17:27:71:80:ee:
dc:23:ed:4d:26:7a:ae:d3:bc:10:f9:d6:b1:b9:0e:01:2a:9d:
44:61:07:f3:21:9e:91:f2:3c:7f:82:f5:c1:51:d2:ee:29:87:
d7:b8:ae:6d:c1:1d:a4:6c:14:d6:81:19:ee:b7:c5:99:3a:1c:
71:0c:98:c3:0b:95:93:96:28:19:fa:54:46:54:16:90:12:44:
27:83:e6:89:38:48:23:0f:39:d6:e0:58:9b:ec:5a:72:fc:2f:
f3:05:7d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:45:24 2025 by rpki-client