Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/bda139a8-8afc-3912-9a45-3703bbfa8a28.roa
File: bda139a8-8afc-3912-9a45-3703bbfa8a28.roa (raw, json)
Hash identifier: m8elS/oAuEE6men+j2363+9c1b3eMpH4uNY/VIisk3s=
Subject key identifier: DF:CE:B7:45:57:F6:C6:64:41:18:D8:58:52:26:43:AD:45:5B:C9:A5
Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial: 010D0C9F43285848B35B6AA920C8D795D726E100
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/bda139a8-8afc-3912-9a45-3703bbfa8a28.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 7018
IP address blocks: 23.143.104.0/24 maxlen: 24
2607:340::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6a:a9:20:c8:d7:95:d7:26:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=925703a1-b651-414f-9f8d-8c2fc43aa910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:d0:ca:77:ed:2c:c2:9e:5a:fc:76:ac:ae:
83:36:7a:54:ad:f6:b5:ae:23:70:31:46:df:0b:51:
73:73:e2:38:d4:c0:76:18:47:f1:a3:2e:51:e6:e4:
0e:50:1a:c9:89:8c:47:5a:ce:34:3a:9b:1e:28:81:
38:b2:ef:90:3c:f0:55:5a:a9:87:0e:28:d8:3b:20:
63:e7:66:54:50:d3:5b:e4:ea:43:ca:ea:a5:c3:0a:
1e:1e:41:7a:46:db:a0:4b:4f:e6:0d:33:9b:e1:01:
9e:75:c9:96:50:f0:3a:e5:0c:68:a6:0b:4b:d0:2f:
99:71:7f:df:8e:29:dc:8f:f1:ff:15:e2:1a:84:6e:
5b:78:25:31:99:cb:b2:e0:14:46:bc:8f:7e:bf:e8:
69:ae:02:a6:c9:35:bd:f0:26:29:e7:5b:aa:b2:50:
62:f0:dd:a9:5f:9b:8f:c6:f8:9c:d9:80:b4:02:24:
be:82:a6:71:e8:5a:84:98:62:78:7e:b6:63:f2:b7:
03:18:a4:ea:ad:fb:d5:5f:5b:2c:f6:38:6a:25:23:
6a:2c:e9:0a:9b:e9:99:3a:89:8d:8d:6a:b5:ab:98:
00:7f:a1:fd:04:37:f1:2f:c5:83:c5:7f:de:3f:11:
7e:5e:f5:99:fc:01:bf:79:80:37:c6:e4:fe:cd:e5:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CE:B7:45:57:F6:C6:64:41:18:D8:58:52:26:43:AD:45:5B:C9:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/bda139a8-8afc-3912-9a45-3703bbfa8a28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
X509v3 Authority Key Identifier:
keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.104.0/24
IPv6:
2607:340::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:12:4f:fa:56:33:97:53:ba:9a:70:26:9f:9c:45:3c:c4:62:
7f:6c:30:b6:62:cb:db:d2:db:7f:44:e3:d9:6f:dc:58:f5:08:
39:93:98:bd:cd:31:30:2e:bf:58:8c:94:68:f2:47:61:5a:e8:
6b:ff:49:b6:0e:4f:15:e1:2c:33:9b:b6:33:5e:ce:03:58:aa:
76:fe:5b:9b:51:20:50:53:90:5a:67:f1:f8:4d:e0:9e:07:b0:
31:aa:7f:d4:36:f7:6e:2d:b2:3b:f2:5c:71:9a:60:2e:e7:05:
0e:0e:1b:db:61:e1:12:6f:6f:88:a1:cc:8c:dc:2f:c8:38:66:
38:c8:8a:56:3c:60:21:b4:a8:3d:ef:10:e1:05:6f:77:f4:16:
11:f3:de:1d:a8:56:77:ad:12:59:57:d5:75:89:fa:f9:0f:cb:
8b:b1:73:b0:25:f0:5b:e6:0f:54:c7:8d:2f:60:7a:69:fe:02:
bf:35:1f:a1:99:c3:53:6d:5f:8c:e8:50:25:ab:99:c1:2d:20:
c1:97:46:f9:eb:5e:f7:bd:10:89:51:2f:72:a2:ad:e3:f8:29:
28:5d:a3:0b:1b:8a:6d:17:f3:47:62:5d:32:c4:fd:b1:86:d2:
a4:4f:a9:b1:b7:8d:a3:e1:7e:e8:af:4b:18:2c:55:70:a5:ca:
18:33:0a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:52:46 2025 by rpki-client