Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/b6734533-e711-33ae-911c-56d7a3139610.roa
File: b6734533-e711-33ae-911c-56d7a3139610.roa (raw, json)
Hash identifier: NBgFA3K6wRjRFhO7xR1IVG/x7qtlb/JcUaIBMKdZu8w=
Subject key identifier: 5D:4F:69:C6:1F:AD:06:F8:5F:84:D7:78:FD:90:5D:40:2F:7D:09:AC
Certificate issuer: /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial: 010D0C9F432858489075F5D1720F3B4D89991780
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/b6734533-e711-33ae-911c-56d7a3139610.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 393336
IP address blocks: 23.163.208.0/22 maxlen: 24
23.163.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f5:d1:72:0f:3b:4d:89:99:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=9a8388a3-e70d-4244-94b3-f77df44e2aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0e:86:99:63:49:1c:5e:8c:11:20:ce:8e:d7:
70:67:1e:42:3a:b2:d8:cd:90:59:21:8a:aa:41:f2:
74:c1:d1:82:b4:da:1e:2d:dd:56:f6:d0:89:c0:3f:
11:2a:6c:3c:a5:0a:98:16:b1:13:f9:54:fc:8d:70:
78:97:17:75:3e:4e:d9:b1:0c:d9:a6:e0:1a:f0:ab:
75:83:d3:85:1e:13:92:8e:b8:63:1a:1e:7b:8b:fe:
5c:ce:a6:d4:57:32:49:2f:d4:3d:92:0d:d7:a9:ce:
ec:cf:4b:a0:2a:cf:d2:da:38:e7:05:6a:6d:77:c8:
3a:73:89:26:33:2f:f3:ab:b9:de:20:7c:67:5d:9f:
bb:7b:75:dd:b2:d4:c1:95:eb:1d:a4:7e:74:36:9b:
f7:3a:d5:dc:bd:9a:cc:a9:6b:40:c7:4d:95:d9:52:
1b:d1:21:35:6f:7a:1b:d1:58:5f:09:76:52:3d:41:
18:1c:26:c2:a8:73:0a:3b:fa:95:36:f8:f0:71:09:
ec:80:70:e0:8e:32:21:68:1a:6f:eb:44:6f:55:ed:
b5:ea:d1:80:ba:28:e7:e8:a9:62:58:56:3e:02:9a:
bc:0f:97:3f:26:7a:5c:59:60:29:79:44:de:fd:9e:
b1:1a:69:fa:d6:68:fc:ee:97:38:d3:af:2e:51:b5:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:69:C6:1F:AD:06:F8:5F:84:D7:78:FD:90:5D:40:2F:7D:09:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/b6734533-e711-33ae-911c-56d7a3139610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
X509v3 Authority Key Identifier:
keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.163.208.0-23.163.213.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:9e:d2:df:87:ae:b8:a5:ca:08:29:66:39:f1:05:2e:00:b0:
e8:4f:16:a7:49:81:6d:60:f7:bb:f0:79:dd:4f:2e:e0:1b:bf:
33:0e:23:51:80:52:27:6d:cd:8f:6b:ec:30:f9:9a:91:fa:28:
b6:6a:d3:e5:d7:69:df:a9:a8:2a:36:ae:e7:90:47:35:d2:f8:
cf:6c:08:5b:cf:b2:78:63:b3:c8:05:47:0d:b2:aa:3a:1c:20:
26:9a:f2:f3:3c:54:a1:77:b3:29:ca:3b:a9:a3:cb:2e:0a:f9:
a8:bd:9d:d0:65:46:8f:1a:c6:7e:d1:79:15:64:17:ea:d9:eb:
1b:23:39:0b:a3:f6:ce:42:10:96:34:e7:e2:4b:5f:c1:33:28:
48:90:3f:b2:b5:50:ac:b4:7a:aa:18:95:b2:0d:a4:14:0a:a3:
98:59:10:ce:a8:76:b0:ab:fd:8e:6e:d3:e4:23:b8:90:cd:bf:
6d:45:6a:f7:dd:7d:c1:41:3c:5d:8f:b9:e0:5e:91:a6:ee:a2:
37:d9:38:b6:06:fc:69:41:97:ae:c5:96:63:83:f3:7a:20:b7:
11:1c:78:3e:4d:9a:81:9d:29:d1:d3:c4:94:1e:2e:79:58:5a:
8f:ee:74:3c:9c:25:ae:7d:32:3e:31:69:89:28:b6:0d:30:fe:
24:80:1b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:46 2025 by rpki-client