Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/2d68bd01-5230-3201-bfa0-352c95678320.roa
File: 2d68bd01-5230-3201-bfa0-352c95678320.roa (raw, json)
Hash identifier: OtE8ju+PzEItfTWYKiMRaUS5muX7KBbLmSMMRA/f8Rw=
Subject key identifier: A4:3D:19:41:12:C6:FE:4B:0C:5E:51:25:9A:4A:B2:C3:A6:B0:B4:14
Certificate issuer: /CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e
Certificate serial: 010D0C9F432858496FC982452BCBA1CCC34D95A0
Authority key identifier: 17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/2d68bd01-5230-3201-bfa0-352c95678320.roa
Signing time: Sun 06 Apr 2025 13:54:34 +0000
ROA not before: Sun 06 Apr 2025 13:54:34 +0000
ROA not after: Sat 05 Jul 2025 13:54:34 +0000
asID: 8095
IP address blocks: 23.177.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:c9:82:45:2b:cb:a1:cc:c3:4d:95:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e
Validity
Not Before: Apr 6 13:54:34 2025 GMT
Not After : Jul 5 13:54:34 2025 GMT
Subject: CN=845594c5-9610-4055-822a-0adeca105aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:1f:e2:85:db:3d:f8:16:88:c3:cd:bd:f9:
b2:65:0b:93:a9:85:10:e3:9e:ec:00:66:0d:f6:8b:
c1:46:b6:d7:ff:57:9a:56:92:2d:6b:14:a8:d7:65:
ae:48:5e:b8:65:cd:2a:ea:ff:9f:e5:52:02:c3:7e:
74:94:5a:ef:8a:cd:5c:af:03:c1:c5:79:9a:9c:4c:
f3:d9:ea:ee:2c:bd:40:6d:a8:45:99:36:86:cd:c9:
e1:6d:f7:2b:af:74:4d:67:d2:bf:c9:d6:5a:e2:49:
6b:5f:06:e8:6f:4d:a0:cc:e1:5d:21:48:b1:22:3a:
bc:b8:9c:df:01:ad:1e:fa:87:d3:71:c4:33:d1:6b:
9a:b5:9a:15:a4:26:09:67:d5:40:ea:e7:6a:62:f5:
30:7a:9a:0d:d8:a1:22:c4:d4:25:22:be:ad:b2:76:
d2:d9:a4:1c:bc:a3:04:7a:c5:33:e9:5e:cb:89:b5:
ca:a7:97:c5:14:4d:41:95:0c:36:2f:0c:1d:eb:02:
e2:d3:46:0e:7b:03:48:cc:bd:fb:a8:8e:75:8d:3b:
fa:98:97:1c:25:bf:6d:c2:38:cd:d5:7c:ca:d7:e0:
68:e8:52:a8:ef:37:51:1f:67:f8:b1:79:2a:3e:77:
ce:d2:2d:97:43:60:a0:17:ae:00:49:43:cc:61:c7:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3D:19:41:12:C6:FE:4B:0C:5E:51:25:9A:4A:B2:C3:A6:B0:B4:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/2d68bd01-5230-3201-bfa0-352c95678320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl
X509v3 Authority Key Identifier:
keyid:17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.177.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:a1:07:26:7a:90:98:43:c6:c0:ff:6b:a8:94:33:18:94:62:
99:76:a5:81:a4:30:65:8f:50:aa:86:13:63:6f:51:9a:37:0b:
ba:cc:24:aa:27:a5:1f:1c:7a:39:67:09:8f:29:ca:cb:02:78:
63:53:cc:a8:05:ce:e4:6e:be:3f:d2:29:a1:8d:36:c7:b8:72:
83:e4:2e:84:51:f6:a7:e4:b9:8e:e5:d2:69:2e:e1:42:6d:dd:
02:c2:4d:95:de:0f:22:12:80:06:4c:42:33:40:ec:de:3e:8c:
50:c9:75:fc:f3:0a:0b:f2:70:cd:a5:b6:3f:54:29:2e:9f:0e:
f2:5d:36:49:ff:db:66:7b:8e:cb:ac:61:aa:75:1b:e4:b3:3d:
31:35:d5:ac:ac:94:f4:d2:e9:d7:c6:c1:00:da:2e:60:13:f7:
d2:e4:2b:d7:fd:2a:fc:37:2f:f7:a5:6c:34:45:f6:ce:b0:06:
6d:a5:e9:b8:f0:f5:f0:36:f8:0a:94:e8:16:c9:cf:e7:0e:14:
2c:55:d9:5b:9c:13:0b:83:f4:aa:ef:2b:5d:08:62:91:5f:29:
96:5e:06:e7:46:b9:50:1f:7f:61:a0:68:b1:3c:39:bf:cf:c6:
4d:37:bc:30:1e:ee:63:83:52:b6:c8:31:29:4c:73:04:75:05:
1d:dd:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:34 2025 by rpki-client on console.sobornost.net