Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa
File: 663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa (raw, json)
Hash identifier: gTiKS7lD0I63uhw7kBPCUWC3AWCiaN2WH5Jix7QrGEM=
Subject key identifier: C3:A9:71:ED:09:32:34:CD:B6:6B:04:94:74:A0:2D:8F:65:D2:40:4A
Certificate issuer: /CN=d884379a-447d-445c-b465-3fe894aa66ec
Certificate serial: 010D0C9F43285848F546EE90494736E18FF35480
Authority key identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa
Signing time: Fri 21 Feb 2025 16:42:51 +0000
ROA not before: Fri 21 Feb 2025 16:42:51 +0000
ROA not after: Thu 22 May 2025 15:42:51 +0000
asID: 40712
IP address blocks: 23.134.244.0/24 maxlen: 24
2602:f6e2::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f5:46:ee:90:49:47:36:e1:8f:f3:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d884379a-447d-445c-b465-3fe894aa66ec
Validity
Not Before: Feb 21 16:42:51 2025 GMT
Not After : May 22 15:42:51 2025 GMT
Subject: CN=322b4ba8-460c-4252-9d7d-0a8f583033b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:15:92:fd:49:5f:71:4c:84:9a:36:4e:db:72:
3d:cb:a9:ba:9b:bd:6e:b2:2e:f8:bc:09:e7:de:34:
68:a5:84:7d:11:c2:17:a7:8e:fa:8f:8c:3d:33:1c:
00:ce:3b:03:ff:e7:81:a6:b1:fa:73:9e:b9:28:44:
c0:00:32:8c:8c:e5:fb:f3:96:7b:62:85:51:55:90:
25:9b:ee:ec:f5:06:20:b7:bc:8d:10:2a:7f:b4:4c:
02:e3:76:b5:48:a0:94:cd:65:4e:94:24:b9:a3:6d:
96:cd:dc:94:f7:08:b4:e9:1d:bb:8f:e3:b0:e7:50:
a6:50:86:58:ad:b5:63:ae:cd:be:ec:39:1f:54:f3:
5d:4e:6c:84:d0:2a:cf:99:13:b3:dd:87:c8:7b:06:
66:b8:51:f0:23:91:dc:18:28:c2:29:d8:e5:50:bb:
96:e2:5b:82:09:8c:52:4d:5b:a6:9d:96:14:ea:61:
3c:e5:a0:51:f3:22:89:54:20:59:f2:88:bf:4c:af:
21:f8:d3:45:47:54:23:9e:d8:f0:9f:46:84:ab:8f:
48:34:0c:fd:7e:7a:32:a4:16:18:0f:13:50:df:41:
6a:57:1b:e4:1c:22:a9:4d:8a:b9:57:c2:90:73:8d:
80:a3:46:32:6b:e6:c9:83:3f:2a:c7:ba:bd:0e:ff:
d2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:71:ED:09:32:34:CD:B6:6B:04:94:74:A0:2D:8F:65:D2:40:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl
X509v3 Authority Key Identifier:
keyid:09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.244.0/24
IPv6:
2602:f6e2::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:3f:77:1c:e2:fd:32:c4:f2:ec:42:28:3c:f5:d8:05:6a:6a:
73:30:6e:4c:1f:1a:bb:22:78:8b:b4:af:9a:50:5d:93:5f:68:
8e:c4:06:da:5c:7f:72:a0:a3:09:aa:f3:8c:80:2b:54:0a:7e:
da:c7:df:be:d6:a0:da:44:88:bc:4b:fb:03:9a:27:39:2f:75:
f3:c7:a6:2b:30:5b:5f:67:be:15:06:51:ee:93:c7:20:b7:1d:
1d:26:29:9c:93:ec:93:71:b6:5a:64:07:f8:9c:4a:1e:4c:6f:
43:e6:49:ac:d8:55:14:51:4e:21:8a:57:e6:7e:29:08:5c:f1:
10:fa:40:6b:b3:22:1a:6f:92:12:67:a6:ac:f1:41:6d:0f:21:
7c:e3:19:9e:5d:87:56:89:5d:aa:96:c8:45:c7:92:1d:4d:33:
60:40:7f:51:85:f2:a1:74:db:55:bb:99:2e:b2:de:71:30:d3:
b3:17:65:b6:63:02:d5:ce:d3:d2:a0:46:73:91:58:4f:c1:2d:
da:70:cc:74:e0:0c:3a:65:f2:6e:76:e5:9c:0b:6b:bd:6c:f8:
60:66:15:87:4a:fa:02:84:82:17:8f:3e:51:ae:df:33:68:64:
97:ee:86:c3:e8:10:d9:8f:fe:5e:bc:a4:4a:58:b1:43:f7:b1:
2e:21:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:05:51 2025 by rpki-client