Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa
File: 34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa (raw, json)
Hash identifier: pKCJo1U0moMP3Qw/UPK88qMqVnivYBabdzCGAiTJbm8=
Subject key identifier: CC:14:42:F8:C8:51:CB:66:7D:21:54:73:82:E8:08:65:13:19:E5:05
Certificate issuer: /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial: 010D0C9F432858491246A9D1C1547DB721F50020
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 396982
IP address blocks: 23.227.56.0/24 maxlen: 24
23.227.57.0/24 maxlen: 24
23.227.58.0/24 maxlen: 24
23.227.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:a9:d1:c1:54:7d:b7:21:f5:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=51189c69-6b33-4e1f-bd2e-309625e8c1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:43:73:c8:dd:79:79:ab:b0:c6:86:5f:53:6e:
27:cb:56:a1:76:dc:de:d9:7d:4c:3e:65:b4:e0:0d:
2c:6d:a1:c8:79:36:97:fd:7e:e4:d6:22:f4:fa:08:
b5:1d:89:2d:b0:bf:11:6c:b4:2b:57:71:a7:38:18:
7a:08:af:af:97:85:9e:aa:83:38:18:33:59:9a:c6:
ee:03:1e:d6:74:c3:b5:9a:93:45:a7:5c:b6:ed:e8:
1b:b5:31:68:4b:1a:6b:53:d5:e8:de:25:c8:ef:d1:
e4:98:97:fa:37:97:69:35:ed:f1:a0:e2:69:de:9a:
38:c3:a5:0f:a6:66:92:fd:ee:a6:a5:8e:d0:2e:21:
b2:38:d9:d1:d4:3a:12:26:22:4d:ae:b7:52:06:ee:
59:cb:b2:f1:47:82:0e:3c:54:49:ed:9e:ae:ae:9f:
b4:c2:c9:f2:1e:e2:78:6c:1d:6d:37:5b:68:7e:24:
67:82:82:18:a2:b7:fe:d4:0f:39:5b:f7:e1:e3:6c:
f7:78:a1:73:2a:af:f0:c5:2b:da:ba:ed:87:9d:ea:
3c:29:9a:f4:4c:c2:de:17:05:b9:cb:8c:04:be:7e:
66:30:87:6f:e8:70:43:41:6c:1e:e3:bc:5e:12:98:
86:e5:48:2c:76:d2:b9:20:8d:d8:be:4f:72:34:cc:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:14:42:F8:C8:51:CB:66:7D:21:54:73:82:E8:08:65:13:19:E5:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/34d5b2cf-fe8c-3a23-80b2-aac6d65f948e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
X509v3 Authority Key Identifier:
keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:4d:dd:99:37:64:4e:e7:15:9b:42:5c:d5:b9:00:76:43:b2:
59:cc:c6:91:c9:01:15:69:06:20:ee:df:e6:18:b1:a3:99:4d:
1d:ff:03:f7:77:b2:60:76:61:13:43:11:19:74:6c:1e:3e:d7:
82:a9:95:c8:48:fa:94:a2:9e:dc:cc:97:41:8a:4c:4f:75:f0:
d6:eb:70:d2:c8:1a:51:41:37:ca:ae:13:c8:68:b8:a7:b3:f6:
1a:1d:28:57:f5:9e:80:0d:c3:f9:29:39:25:c1:1a:a5:c9:c4:
fa:92:81:76:cb:27:73:c1:1d:50:28:42:d5:88:6f:11:39:62:
0c:b1:f1:82:ab:c7:4d:bb:3a:86:ca:07:c8:89:88:65:86:a5:
a6:bf:73:7f:f7:93:8b:8a:bb:5d:0f:9b:7c:06:62:62:ae:56:
89:bf:09:fa:f0:6f:19:2a:59:b3:70:8f:23:21:11:e4:8d:7c:
91:d4:4f:7f:16:4f:2d:44:d4:fb:68:40:af:29:10:91:30:7e:
76:3a:70:c9:dd:39:d9:85:07:e5:b9:16:d7:d0:db:66:ba:b7:
21:b7:d6:1d:e2:5e:42:7e:15:e9:e1:16:dc:bf:07:42:34:7a:
bb:50:f1:41:01:9c:1f:23:92:c7:40:cb:fd:a9:47:88:21:6b:
f2:99:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:49:56 2025 by rpki-client