Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bc7ab7a-5213-3652-bc4a-ce70f6d6b07e.roa
File: 0bc7ab7a-5213-3652-bc4a-ce70f6d6b07e.roa (raw, json)
Hash identifier: DAm8iyx9U0fjp1sKDRz0FW9lIOCk9BWEqELt0vb070Q=
Subject key identifier: 29:A3:20:FB:9A:F8:85:5D:80:4F:9B:2F:2D:2B:B7:B6:15:3E:02:9D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CCD9DB544F22CB146950
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bc7ab7a-5213-3652-bc4a-ce70f6d6b07e.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.35.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:cc:d9:db:54:4f:22:cb:14:69:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=eeee5396-98a4-46e1-99d1-c5bffd49f3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:99:83:a1:14:36:6e:9b:3a:a1:3d:d0:6f:
d2:3c:47:ed:bb:c4:31:65:68:32:18:fa:41:91:7c:
56:aa:9c:27:1e:44:9b:81:22:6c:30:f0:cd:45:f2:
86:25:1c:b0:92:8f:7c:f3:c5:3e:1b:6b:14:25:92:
03:7f:00:e9:9c:9c:ac:5c:98:73:7c:ee:c1:17:8e:
b2:3a:8b:4b:41:17:01:f8:ad:25:23:10:cc:be:48:
42:1d:bb:95:13:02:47:7a:96:42:10:50:ad:fe:75:
b2:d1:0c:05:7e:34:d6:e6:bb:e9:88:98:1a:d8:0c:
3b:3e:99:ec:70:d2:3d:c4:98:00:4a:8c:27:e1:a3:
35:5d:26:fc:86:d6:0e:ae:44:7d:a8:39:3f:e8:0d:
61:6d:79:90:8e:25:b8:f9:7b:1d:d0:03:05:53:34:
bf:f1:ea:3f:0c:ac:8a:6e:f8:1d:b0:18:ee:d6:a2:
40:cb:01:1a:a8:e2:1f:59:37:db:65:3b:f5:9c:d5:
3f:bb:81:f4:01:7f:f3:ba:cf:e6:7e:40:ce:8c:f6:
17:14:4d:66:7e:bb:4c:6d:40:8c:00:f2:0b:5b:b7:
02:4c:72:09:06:b1:05:00:d9:4f:3d:b5:10:cf:8b:
61:d0:a9:a3:af:c6:0f:16:00:0f:1c:ab:f5:0e:43:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:20:FB:9A:F8:85:5D:80:4F:9B:2F:2D:2B:B7:B6:15:3E:02:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bc7ab7a-5213-3652-bc4a-ce70f6d6b07e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:9d:28:e0:2f:24:3a:44:ad:6e:0a:a8:be:4a:f0:9d:ea:00:
ec:cd:cc:be:63:ce:4d:34:57:56:8e:bc:4f:72:ff:2e:8f:5a:
6c:59:87:1f:b8:75:13:f5:eb:85:9f:55:f0:65:c7:6d:95:5c:
07:c5:76:b2:23:6f:e1:05:f1:c8:12:7f:09:59:e5:1d:01:06:
f0:99:4d:05:b6:e8:db:6b:34:60:e4:12:17:39:62:98:a7:ad:
e5:8e:8d:ec:b8:6f:8a:44:11:96:9b:11:39:1f:8a:a2:a2:76:
ad:73:2d:f6:1c:ce:e6:f0:3c:4d:2a:25:dd:ad:fe:b5:81:8e:
59:1d:e0:25:05:d3:41:7e:fe:8e:a2:3f:b3:6c:6a:55:c7:19:
29:3e:75:21:5f:dd:53:4d:da:8f:38:bd:85:e9:c0:c1:f7:53:
f1:7a:b1:2f:05:25:48:00:89:6e:ac:01:87:78:34:0d:3a:25:
64:30:94:22:45:ab:50:d6:ee:a8:55:33:89:95:df:f8:17:11:
9a:51:0c:72:37:aa:35:78:11:7d:ee:c9:99:fc:d5:3f:f6:c3:
cb:01:51:82:17:b3:b3:b1:96:ac:2e:b8:b1:6a:cc:c5:38:fe:
29:82:47:0b:02:ed:b1:09:75:c7:ec:da:44:44:e3:ec:50:25:
c0:0f:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:52:13 2025 by rpki-client