Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa
File: 5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa (raw, json)
Hash identifier: X6Xt0BTWV5fn4gPzGSFAaCzABdaMTRSsPtBTMj5ik38=
Subject key identifier: 2B:B4:4E:00:A8:83:16:6D:52:B7:DB:BF:91:8B:61:6D:1C:85:CA:B4
Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial: 010D0C9F432858480EA508F2F1BB2AE3B1121F00
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 7782
IP address blocks: 23.235.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:08:f2:f1:bb:2a:e3:b1:12:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=889a16ca-7594-4a49-a9ed-9cb4932a1bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:8f:f8:b2:60:2c:c4:c6:e5:90:9f:0e:56:
ef:1b:ed:1b:e4:71:77:dd:29:ac:59:d1:fe:30:5a:
60:10:97:81:b5:c3:d6:68:5d:66:5c:79:59:ac:d6:
61:22:85:54:f5:06:81:0a:d5:ad:fc:73:1c:19:59:
68:93:15:22:9b:7f:ee:3a:6d:3c:c2:08:e9:a0:a0:
40:b9:6e:39:ab:b4:f5:94:30:74:e4:1d:9d:56:b9:
37:01:d9:07:a7:11:c1:5a:41:20:66:60:c9:66:f2:
61:b4:e3:4c:93:3d:20:d3:4c:c3:f8:f5:ae:c9:52:
13:73:89:da:b6:b1:3b:82:6e:6b:17:d7:fb:fc:bf:
ed:bf:c5:91:1e:8e:0a:68:64:a2:ee:25:9d:20:9f:
b8:b1:c1:f9:b4:a1:3c:70:90:b9:71:e0:ef:59:72:
e0:6e:2a:44:77:dc:32:fc:84:97:8c:9a:36:50:38:
ea:84:7e:08:8d:73:5b:81:54:54:1b:54:5b:f6:23:
ac:1f:5f:6f:1f:4c:7d:0e:55:74:4a:af:a2:0a:5f:
cc:14:97:9c:a0:13:52:48:63:e5:60:b2:4f:a6:76:
37:cd:ad:5d:42:65:af:17:c0:41:b2:d5:0d:cf:ae:
74:47:14:09:97:da:42:f7:b4:af:f0:f7:7a:82:9d:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B4:4E:00:A8:83:16:6D:52:B7:DB:BF:91:8B:61:6D:1C:85:CA:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/5a6ba6f3-4897-332b-8c6b-76ba9dc048aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
X509v3 Authority Key Identifier:
keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:59:5a:57:ca:2d:f5:36:6f:4a:5a:4b:58:88:7c:f6:17:12:
47:9d:98:77:c3:89:3b:0a:f5:98:86:13:91:bd:41:a6:88:2d:
0e:bf:af:a1:a4:eb:59:f7:17:ea:4d:d2:cb:63:cb:c4:de:f6:
7c:df:e6:94:1a:42:a0:53:ff:67:82:61:75:30:5f:12:dc:b0:
d4:8f:50:4e:b3:71:b1:0e:4a:16:3b:7a:8a:4e:cf:cf:b0:b2:
e0:cc:46:39:16:0f:5c:bc:21:47:34:80:a1:99:5b:c4:5f:f6:
43:70:25:35:28:9e:60:5e:74:06:91:02:e7:8b:ce:24:a4:13:
e7:7c:aa:63:25:46:a9:25:23:9b:2b:f2:8d:8e:f8:ac:9c:2d:
c5:eb:6c:3d:73:de:fe:cf:7d:4d:e6:ad:8d:98:96:f8:c9:e1:
f2:db:94:ff:7f:88:e5:64:a0:03:32:9b:2d:3f:1d:5c:8f:99:
47:a3:b8:b0:b3:d3:3c:6b:d9:86:76:01:b4:d7:e2:18:f3:c4:
50:e4:6a:af:5e:af:4b:70:2c:24:e9:56:a8:09:68:df:2b:79:
d3:e6:0b:20:88:3e:3a:5a:ed:48:c6:7a:01:13:53:40:44:4c:
0b:01:d8:40:9d:72:70:32:28:ce:17:16:d7:40:61:8c:29:2f:
1c:58:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:51:36 2025 by rpki-client