Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
File: cfaae5c8-a32a-3937-8b38-0909380010e1.roa (raw, json)
Hash identifier: cg1D5GncV8uaa5clVZ6xA8KJ6J00bmTBfnbBNWdjSd4=
Subject key identifier: F8:D7:A7:F8:15:79:E8:59:4B:53:EA:47:24:84:71:14:6D:6C:95:10
Certificate issuer: /CN=8deb6383-7043-43c4-b39c-395a97ee0114
Certificate serial: 010D0C9F432858496054173AF1DC8F120C98BEC0
Authority key identifier: E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
Signing time: Tue 01 Apr 2025 01:00:47 +0000
ROA not before: Tue 01 Apr 2025 01:00:47 +0000
ROA not after: Mon 30 Jun 2025 01:00:47 +0000
asID: 13925
IP address blocks: 23.131.160.0/24 maxlen: 24
23.131.161.0/24 maxlen: 24
2620:138:5000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:60:54:17:3a:f1:dc:8f:12:0c:98:be:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8deb6383-7043-43c4-b39c-395a97ee0114
Validity
Not Before: Apr 1 01:00:47 2025 GMT
Not After : Jun 30 01:00:47 2025 GMT
Subject: CN=73de8928-e30e-4049-951b-2e57f12ec33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:b9:16:4a:20:7b:b9:ca:24:8e:6a:f6:44:
ad:2b:28:75:d0:01:86:76:6a:d8:1f:81:09:2a:3f:
1f:3a:3c:dc:3f:49:39:12:ec:6b:9a:6e:83:01:39:
1b:0c:93:05:36:b3:6d:2a:6d:b6:dc:f9:99:90:d6:
8c:10:ce:45:8b:c9:47:2b:a2:14:24:c1:5c:ca:94:
58:46:98:70:3a:e3:03:92:d0:72:ea:ed:34:2f:64:
98:ae:81:d2:91:2d:9d:1a:11:50:30:8a:98:d1:d0:
fe:2d:6b:93:2f:43:c0:1e:e3:7f:01:e2:54:2a:09:
23:c7:d5:c7:2a:10:ff:54:b0:36:ef:5a:56:02:43:
c4:7f:09:b2:6b:fa:a8:6f:f9:34:ef:00:6f:08:f6:
03:24:e6:09:8d:19:ac:f1:da:6a:ca:9a:b6:2f:a6:
9e:1e:29:02:f6:78:1b:e1:57:b8:80:f0:38:22:ee:
79:c4:4b:ac:e1:09:ee:f3:6c:49:46:31:3b:3b:c6:
fa:d0:5d:58:b5:1e:f6:2a:d7:38:41:7f:df:50:de:
1c:dc:8a:97:00:3b:f7:75:cc:ec:59:1e:90:f3:84:
be:16:04:5f:c2:0d:56:60:86:50:e3:61:4d:55:06:
4b:53:cb:df:84:24:23:71:20:58:23:4e:85:c8:d9:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D7:A7:F8:15:79:E8:59:4B:53:EA:47:24:84:71:14:6D:6C:95:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/cfaae5c8-a32a-3937-8b38-0909380010e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114/8deb6383-7043-43c4-b39c-395a97ee0114.crl
X509v3 Authority Key Identifier:
keyid:E9:6F:FF:46:73:D9:F6:E1:34:56:E9:8D:8F:04:8D:D0:60:1C:E8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8deb6383-7043-43c4-b39c-395a97ee0114.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.160.0/23
IPv6:
2620:138:5000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:68:cb:1e:db:9c:0a:19:83:07:c7:10:3e:b9:70:f9:a9:d4:
7d:ea:0f:87:f7:ff:44:3e:ef:15:19:62:95:e6:d4:64:82:aa:
0e:f8:8f:9e:25:a8:9b:5f:29:b8:ec:3b:a2:ea:22:de:b1:8b:
30:28:8d:66:f0:1c:55:4b:da:d1:d3:c1:31:7e:49:55:ef:4e:
32:69:16:da:ba:89:1a:49:9d:b1:80:9c:63:2e:2a:3a:16:1d:
3c:85:04:76:ed:8a:7a:3c:0d:b1:31:c8:5c:a4:58:23:7f:ce:
3a:03:74:44:1e:91:70:c3:41:e1:98:c0:08:29:bd:5e:aa:6e:
8e:c9:1f:e1:75:84:f0:d1:5c:c5:6a:bd:ed:2d:67:74:9b:eb:
41:9a:58:f0:8b:47:42:16:4e:33:d6:fb:de:cc:dc:05:34:c4:
bb:be:66:02:95:09:8b:29:a8:60:62:d9:25:2e:a6:55:51:74:
1b:e1:da:0b:57:f1:5f:eb:1f:ee:8b:0a:e8:73:22:48:03:09:
da:59:7a:91:29:47:03:75:87:a3:e6:62:b3:9c:b4:a3:d2:4c:
97:f0:16:43:86:9e:8d:f4:6a:8e:3c:18:fa:4e:a5:0a:b1:6c:
23:45:a1:2f:aa:2c:3f:35:f9:6c:c8:22:8d:cf:7a:e7:c1:b8:
aa:5f:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:08 2025 by rpki-client on console.sobornost.net