Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6db7d794-a7c6-38ad-935d-5abaa18d8002.roa
File: 6db7d794-a7c6-38ad-935d-5abaa18d8002.roa (raw, json)
Hash identifier: 3BApaBn/f1JfE+z3RhVaCKpZpw9c5gzcRNmDtzxbKlY=
Subject key identifier: 47:42:EA:B8:A3:BB:35:0D:E6:71:C6:38:01:B8:D1:AE:A3:F1:3B:10
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F432858487E506AF995BE25562B8F1D80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6db7d794-a7c6-38ad-935d-5abaa18d8002.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 31898
IP address blocks: 23.239.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6a:f9:95:be:25:56:2b:8f:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=0772e95a-b361-446a-9624-f45240c4112c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:29:ca:6c:77:62:c2:2d:c4:09:c5:86:70:
ac:8c:7d:fe:01:ac:78:c8:97:66:c1:b7:03:66:97:
b7:3b:c6:ba:ab:bf:5c:4f:f7:cd:24:f2:ee:55:68:
62:a6:d0:33:53:76:69:2a:9c:de:be:a7:59:ea:b6:
d3:05:aa:21:b4:95:51:00:3e:e4:be:7c:48:1b:3a:
ef:44:02:76:44:41:47:42:37:02:fd:37:6d:bf:cc:
71:08:88:82:74:e0:40:a5:e7:1c:91:cc:0e:46:8f:
c8:1b:16:85:a4:72:38:ae:cd:2c:19:c5:6c:c9:c1:
1e:b4:6f:1c:e1:51:a5:52:05:58:a4:59:aa:6e:85:
ab:dc:2f:45:5b:39:3a:7b:02:a6:61:18:f8:39:6d:
d2:7a:b9:5d:a3:b9:7f:81:70:66:2d:57:41:67:0b:
1b:e3:62:1f:8f:85:07:8f:00:25:62:90:c9:06:68:
79:d1:cd:18:b9:24:81:ec:08:5d:ad:31:0b:ca:b9:
e9:c4:ce:1a:13:3a:cf:1e:57:34:5f:ed:35:84:fd:
bc:bb:59:27:a8:3c:b0:11:4b:e2:0d:9c:59:1b:5a:
af:76:08:30:b4:26:39:6b:e4:5d:76:97:fd:d5:c4:
89:0c:23:1b:5a:69:61:30:2d:85:04:30:07:90:d5:
59:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:42:EA:B8:A3:BB:35:0D:E6:71:C6:38:01:B8:D1:AE:A3:F1:3B:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6db7d794-a7c6-38ad-935d-5abaa18d8002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.239.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e1:4c:ba:c6:c6:d2:f3:8d:fc:1e:b9:c2:18:ea:01:ce:33:64:
3e:c2:4c:4d:1d:fa:cc:23:85:33:f8:37:df:3a:c2:0a:8d:a0:
f3:d1:35:34:e6:d4:d8:fd:08:38:61:ea:1e:39:3b:8b:a0:9c:
81:ac:1a:bc:6f:c9:63:73:bc:78:49:83:72:ce:b7:3e:28:2a:
93:e7:7f:5e:37:e9:34:29:a4:98:97:40:c2:e5:10:26:f6:a4:
d8:d1:87:cd:9a:75:d0:45:b2:1d:97:c6:37:d3:78:be:99:da:
61:12:00:da:25:66:5b:ef:d2:64:11:6a:10:b6:65:41:d2:08:
c0:a9:c7:5a:19:3a:23:17:1f:38:82:38:a7:51:21:c7:5f:22:
6e:42:68:70:52:23:ef:29:3e:39:36:62:72:ff:fd:66:97:0c:
4c:d9:a0:21:96:cb:04:b3:95:4d:1b:e6:c0:0b:69:f9:4d:4c:
f1:c2:63:7a:1e:38:56:d2:30:e2:fb:42:f2:43:34:df:55:f5:
3c:4f:a3:9d:ff:47:c4:7b:28:d0:7b:59:bb:ba:15:d0:cd:9d:
39:29:28:59:a4:ce:1d:e3:98:81:06:5d:f2:0b:20:b9:5c:9e:
23:29:55:0c:4d:e1:6c:e9:6d:82:c9:cc:77:cf:1a:8c:b3:8c:
18:61:91:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:05 2025 by rpki-client