Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/9077d754-78a8-3f34-80a1-bf1f2afdf719.roa
File: 9077d754-78a8-3f34-80a1-bf1f2afdf719.roa (raw, json)
Hash identifier: PvWgZnCYPpGIKGxaMLIHqW7J4s+zQ0BgOPY2gDhG/lE=
Subject key identifier: A1:94:FF:09:D7:64:8E:F6:C1:7A:9C:A8:B4:B3:04:1E:67:B5:B2:CC
Certificate issuer: /CN=a7029ab5-98ff-451b-9d4f-e72d91a2c9a5
Certificate serial: 010D0C9F432858497C29D9A5053D9C32378B1900
Authority key identifier: 54:1E:14:F2:02:7B:BB:C7:D9:1F:50:8D:11:AF:FE:F2:ED:1B:99:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/9077d754-78a8-3f34-80a1-bf1f2afdf719.roa
Signing time: Fri 11 Apr 2025 00:18:23 +0000
ROA not before: Fri 11 Apr 2025 00:18:23 +0000
ROA not after: Thu 10 Jul 2025 00:18:23 +0000
asID: 401616
IP address blocks: 23.137.100.0/24 maxlen: 24
2602:f68a::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:7c:29:d9:a5:05:3d:9c:32:37:8b:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7029ab5-98ff-451b-9d4f-e72d91a2c9a5
Validity
Not Before: Apr 11 00:18:23 2025 GMT
Not After : Jul 10 00:18:23 2025 GMT
Subject: CN=ad9baef9-33ed-43aa-ac46-0b3ebd659db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:2e:ce:cd:60:c6:c6:7f:e2:bf:1d:08:07:
aa:c2:c0:45:fb:ae:1b:38:24:95:05:26:4a:32:6f:
80:08:be:3f:b4:fd:76:33:b8:d2:1a:ad:0a:4c:cd:
ee:d8:95:78:6c:9c:9e:58:d7:31:82:00:28:44:2b:
23:80:1d:0c:b3:1b:82:f3:6b:b9:74:38:12:0b:e4:
1b:74:80:e2:cd:98:53:98:e1:47:5e:af:e4:92:77:
c1:00:7a:05:22:25:b7:bd:21:8c:5c:97:b1:f2:0d:
79:4e:06:43:b3:91:67:d9:9d:dd:b1:84:13:34:46:
e9:66:c4:fe:94:d5:75:7a:36:8b:12:e5:73:c4:1b:
4a:61:de:8a:23:9e:69:57:8d:ff:d2:af:00:5e:de:
3e:67:f2:ec:ab:0d:01:73:5d:48:93:db:25:72:41:
8f:21:0f:89:bf:7e:d7:98:03:0f:39:4b:14:e7:96:
93:c4:70:ff:c4:4c:05:64:58:18:17:11:d8:07:64:
7d:00:fc:5b:f7:74:5a:0d:f7:8c:7d:2f:36:3c:27:
fb:53:b9:2c:26:2b:b0:9c:8e:80:8c:42:11:5f:9d:
6d:78:0d:75:ed:62:c5:3a:73:bc:f0:52:ce:4a:a0:
e4:b5:5d:19:73:bc:3a:be:56:d4:24:fc:8b:84:0a:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:94:FF:09:D7:64:8E:F6:C1:7A:9C:A8:B4:B3:04:1E:67:B5:B2:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/9077d754-78a8-3f34-80a1-bf1f2afdf719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.crl
X509v3 Authority Key Identifier:
keyid:54:1E:14:F2:02:7B:BB:C7:D9:1F:50:8D:11:AF:FE:F2:ED:1B:99:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7029ab5-98ff-451b-9d4f-e72d91a2c9a5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.100.0/24
IPv6:
2602:f68a::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:d4:7e:cb:14:35:12:fc:fe:f8:e5:21:20:72:a6:fe:58:76:
6a:8a:2c:76:23:10:ff:68:4e:ed:6c:14:7a:f3:45:42:dd:ec:
86:55:84:b5:38:c8:79:56:ec:7f:26:e3:b0:d0:57:0e:fa:72:
c7:e4:9a:81:80:16:b6:3c:51:74:55:f4:7e:b9:78:70:e4:58:
1a:53:70:0a:d5:cd:70:50:62:27:56:56:6a:20:e6:bd:44:e8:
e4:f9:9a:89:71:11:4c:65:c8:62:5d:b1:44:e1:5b:0b:de:86:
6c:77:96:92:64:7b:ef:97:24:01:6e:37:ff:23:6d:19:42:e8:
a7:4c:7f:eb:df:b1:64:5c:d7:27:79:55:3b:bc:ae:e8:77:e1:
78:9d:bd:7f:78:02:fb:0b:fc:3c:09:02:98:ea:28:16:c6:c2:
a7:22:a6:41:78:18:a4:be:7a:e4:2f:a6:16:da:b8:db:eb:71:
42:f0:cf:c8:8e:7e:a8:c1:d2:eb:9b:a7:f7:7d:6c:b6:b6:cf:
62:3b:43:ca:b9:a0:38:d6:58:91:1a:10:56:f5:9a:99:7e:cf:
bf:a3:c1:c0:b8:26:13:28:d6:4a:e7:db:11:37:1e:2c:7d:77:
e3:55:3a:40:4e:26:5f:7d:87:3a:8f:4e:24:bc:13:a5:c3:35:
cb:37:17:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net