Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa
File: 4098e103-d04a-3465-a7e1-f3debf7a9e61.roa (raw, json)
Hash identifier: fz6j68rrX3KMNdZTv1LPiiFkCrpnjf3TwGlGwlMC5T4=
Subject key identifier: FA:9A:EA:20:87:03:AA:3B:EB:70:9F:3E:22:85:EE:57:D8:2C:44:79
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F432858495EEEDBBBF07C5348193E8C50
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa
Signing time: Mon 31 Mar 2025 13:00:59 +0000
ROA not before: Mon 31 Mar 2025 13:00:59 +0000
ROA not after: Sun 29 Jun 2025 13:00:59 +0000
asID: 16509
IP address blocks: 23.239.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5e:ee:db:bb:f0:7c:53:48:19:3e:8c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Mar 31 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=d72adc2f-8826-4e3f-8700-bb1b9b9eb530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:75:ae:29:92:ef:09:a5:d8:60:49:89:67:
5a:35:fb:42:f4:3d:79:75:05:b8:7f:e6:09:1b:c5:
ff:d0:a8:9b:76:3d:75:0f:04:85:7a:a4:40:b0:99:
f7:57:9c:0d:67:4d:7f:6a:a5:f9:90:c6:89:51:9a:
48:69:43:a6:15:7f:93:2e:91:93:1e:51:b7:fe:a0:
93:e6:33:c4:0e:af:a7:e4:5f:5f:db:db:02:44:74:
ce:41:fe:a3:e2:30:f7:5e:60:28:8c:7f:e1:d7:f8:
84:0e:1b:59:95:d1:79:fd:3a:c6:16:fb:ee:67:c9:
71:ae:a3:4e:de:b0:66:9d:0b:65:d0:9f:95:18:e5:
d0:dc:fa:5c:47:35:4c:a7:9c:a1:a0:e4:2a:d8:93:
fc:5a:11:3d:79:3c:e4:8b:b6:18:a5:cf:88:5d:14:
be:63:46:65:02:21:fb:51:d4:6c:f2:02:b6:bd:b2:
6d:7b:e6:e7:7f:89:d7:9c:68:56:a5:38:01:46:09:
9d:b1:39:8c:bf:12:ca:a6:94:56:fd:1b:69:a3:31:
a3:e6:e6:99:d3:b1:fc:29:d1:01:75:32:5e:13:30:
be:52:a8:28:49:b8:21:e1:60:47:a4:9f:81:48:7b:
2b:90:4b:c5:dd:fb:ec:0f:3c:46:12:59:90:5c:51:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9A:EA:20:87:03:AA:3B:EB:70:9F:3E:22:85:EE:57:D8:2C:44:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.239.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:7a:7a:da:5d:ec:c8:c0:b8:da:da:57:42:54:d6:a2:3b:65:
46:54:7c:10:6f:f7:dd:50:30:0d:ff:38:76:8d:90:d2:16:6e:
98:9f:03:a0:76:60:21:b9:1d:20:9a:57:fe:7a:a5:0f:b9:a0:
9e:d5:5e:5d:98:de:38:5a:3d:30:4c:4d:a5:5a:96:4e:4a:52:
d6:8d:49:b1:2d:ab:31:20:36:2d:42:2f:54:6c:3c:64:29:2c:
26:88:2e:f5:8d:49:51:69:33:04:c1:d9:02:d4:f1:99:5d:fb:
3f:d6:a6:75:b2:6e:8c:d7:40:3c:4a:c0:c2:80:42:48:3f:4a:
25:05:f1:e9:9a:4f:8b:85:bb:22:0b:05:6c:7f:76:6b:c5:d1:
b0:91:6c:c5:58:83:01:4c:1d:5a:fa:69:78:1c:47:d1:63:4e:
b4:ff:fc:4d:8d:40:d6:23:d3:60:6e:9f:9c:cd:18:8d:c1:6d:
c1:9c:09:6b:d7:ba:27:9a:70:54:18:47:80:22:63:14:50:70:
85:00:3a:e3:b5:e2:67:78:56:f7:3a:10:bc:1b:c5:23:11:6f:
9d:dd:d7:53:5a:7e:8f:f7:b2:a5:d6:16:d4:f1:39:56:9d:7e:
34:b1:41:46:30:a2:0d:01:ec:fa:e2:3f:a6:a4:4e:ff:5c:c7:
f9:5f:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:19 2025 by rpki-client on console.sobornost.net