Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa
File: 897adddb-a309-3fc0-b793-ccbf5388c1bb.roa (raw, json)
Hash identifier: 3EQ+KOKFMjXNAfPGWEZ2w67ibTmrARXqNIwiiQ8KXbY=
Subject key identifier: 2C:49:F4:DA:AB:ED:5F:F1:BE:22:C5:CC:64:6E:CF:41:3B:51:44:3F
Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191
Certificate serial: 010D0C9F4328584981D45481D12C4B7A9063B880
Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa
Signing time: Sun 13 Apr 2025 01:00:44 +0000
ROA not before: Sun 13 Apr 2025 01:00:44 +0000
ROA not after: Sat 12 Jul 2025 01:00:44 +0000
asID: 400442
IP address blocks: 23.133.168.0/24 maxlen: 24
205.236.99.0/24 maxlen: 24
2602:fbc7::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:81:d4:54:81:d1:2c:4b:7a:90:63:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643914aa-5306-4352-8a01-3ac381827191
Validity
Not Before: Apr 13 01:00:44 2025 GMT
Not After : Jul 12 01:00:44 2025 GMT
Subject: CN=c5c8a477-34d5-4981-9e52-56233f6c5b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:4c:1c:b5:78:ae:97:3f:96:0e:b2:f6:53:
99:83:f2:e8:f3:2e:cb:6c:cb:3f:fc:e4:19:0e:e1:
5a:a5:e7:a7:7c:4d:2d:b3:f7:96:2c:e3:c0:ad:a0:
54:94:39:bf:78:0f:74:4d:50:e6:1a:a0:3f:f4:17:
5c:55:c5:6c:c0:d2:5e:23:41:f8:5a:63:ff:d6:58:
36:10:d7:c6:f6:aa:52:e9:41:50:67:be:f4:e7:71:
bd:4c:fb:82:eb:6d:24:9d:e5:a0:4b:5d:ec:b3:57:
0d:0f:3b:d9:b1:fd:0f:0a:18:35:c0:67:48:32:ef:
a7:e8:fe:52:26:47:92:55:3e:b7:bc:21:5b:9f:61:
2c:0e:b1:99:10:03:2f:63:2e:a9:e0:e3:a1:2e:5c:
29:5b:bb:08:eb:2a:17:30:d1:3c:e3:3f:e1:c8:56:
93:b1:e7:96:b5:33:18:bd:7e:50:9a:b8:65:e0:8f:
f5:1b:c8:64:f2:20:d8:00:76:5c:23:c6:84:d4:cc:
9a:f2:37:8a:3a:16:6c:22:98:f2:d6:b5:62:84:16:
a5:98:38:9e:fe:ba:3d:22:b7:15:34:19:c9:73:9b:
5e:ab:8c:ea:63:46:31:71:45:40:48:94:31:90:55:
b7:70:de:41:25:c4:b2:4b:f7:81:72:3d:f8:a0:bf:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:49:F4:DA:AB:ED:5F:F1:BE:22:C5:CC:64:6E:CF:41:3B:51:44:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl
X509v3 Authority Key Identifier:
keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.168.0/24
205.236.99.0/24
IPv6:
2602:fbc7::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:d2:c0:38:69:4e:f9:03:eb:1c:a5:b4:8e:42:ad:cc:3f:72:
61:39:33:57:a1:f6:f0:1b:8c:8d:44:40:18:33:4d:ea:45:67:
3c:a4:51:cc:f0:97:72:c7:b8:55:61:82:49:60:c3:f8:84:da:
17:f4:a6:32:aa:68:a3:52:ff:5f:57:2a:19:4f:4a:3b:33:1b:
45:4b:2f:87:ba:2e:b6:20:8c:13:ca:33:91:19:54:44:03:4c:
52:a5:4d:a6:de:4c:14:71:b4:0f:3c:f5:52:ae:ee:10:f8:da:
ed:57:f4:83:10:7c:c7:30:47:e3:f8:18:ec:3c:cf:8a:52:ec:
b7:d3:15:50:f8:b7:fd:e0:91:b3:96:84:95:a9:03:5b:d5:1f:
83:f3:bf:a4:5f:14:93:d2:21:13:be:20:20:2b:5e:20:d0:be:
3b:8e:09:5b:53:3a:4c:bc:72:d7:3b:ef:7e:39:cd:ed:94:d8:
62:05:56:3f:ed:4a:ae:94:8a:9f:44:9c:10:37:ce:eb:49:5e:
9d:26:8e:6c:3c:93:d8:dc:13:3b:87:8a:9e:a0:2e:2a:60:6d:
ce:f6:22:33:88:eb:7b:9d:6c:c0:67:0a:36:5f:d7:bc:5c:7d:
11:a3:c2:c7:09:df:67:03:5f:3f:68:77:e5:8a:f7:6e:da:8a:
6f:ce:0a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:00 2025 by rpki-client on console.sobornost.net