Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ca4075-46c7-3788-adf2-18dfa75f3c35.roa
File: 19ca4075-46c7-3788-adf2-18dfa75f3c35.roa (raw, json)
Hash identifier: 8p21BdEyFvIHFxp2ljCVf1rbnWIEsWksqmZ1NRsDpqg=
Subject key identifier: E7:EB:98:DC:C5:12:C7:A5:F0:0C:06:2E:9F:C6:7F:E2:63:C7:B6:5B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A2094976997CA0BE85EDF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ca4075-46c7-3788-adf2-18dfa75f3c35.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.39.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:94:97:69:97:ca:0b:e8:5e:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=c8b60278-a623-4655-83bc-da92648a66b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:ff:36:0b:96:d8:84:d9:89:0d:92:be:c6:
6f:0e:6b:84:90:f8:91:1e:b0:d0:ae:fe:e5:f1:49:
d7:3f:30:62:c5:83:0c:e2:37:6e:37:7d:6c:6f:11:
f1:06:6a:93:12:5e:b1:a9:1c:1f:4b:d9:d6:39:5f:
e7:b8:48:a1:76:2c:87:2a:99:97:21:fe:c1:41:a6:
f4:cd:3e:0c:da:ee:1f:d5:8b:3e:10:40:da:e3:27:
33:d3:fb:21:be:af:86:0d:3a:c8:b8:37:b5:fe:1b:
70:cc:6c:6f:e5:24:d7:b2:cd:f0:78:18:51:7c:d5:
98:19:02:b5:0a:25:3a:1d:1f:2e:d6:c8:a1:e2:1f:
38:80:5c:b6:93:e1:58:c4:6e:09:6e:ac:71:ae:52:
5c:3d:51:d2:cb:93:4c:60:7f:8b:74:b9:9c:b4:d4:
be:e9:10:4e:1f:47:a7:89:8c:e3:bc:ea:1b:db:51:
29:40:d0:ff:71:4b:6e:1a:cf:4a:a9:3b:07:82:ed:
c4:a2:13:00:de:2f:1d:c3:14:d5:2d:87:15:31:3e:
56:34:2a:9c:42:02:95:b3:cf:86:23:d7:a5:ee:6c:
13:2f:3d:d3:72:50:a0:88:10:d9:6a:4a:a1:5c:07:
ae:03:aa:ed:f3:ea:d1:fe:07:d7:e1:f6:a7:db:60:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EB:98:DC:C5:12:C7:A5:F0:0C:06:2E:9F:C6:7F:E2:63:C7:B6:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19ca4075-46c7-3788-adf2-18dfa75f3c35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d4:ac:51:c5:ac:50:45:1d:2c:78:95:04:18:17:c3:7d:ec:
4c:14:48:38:29:fb:6f:cf:81:ac:36:f3:bc:37:ee:47:77:77:
47:54:4a:f9:1c:eb:68:9d:a2:b8:b2:3d:e1:bf:ea:59:1f:57:
63:f9:a1:64:ea:ea:ee:7f:c3:d9:c3:31:db:ab:62:49:42:2d:
f0:0b:c1:10:71:c6:dd:59:a0:d2:8f:be:21:d3:85:d1:cc:d8:
dc:8a:67:51:a9:d2:bc:a2:07:02:fa:27:bf:7b:29:f0:81:5a:
08:84:bb:c6:f9:29:1b:ab:d7:9b:62:f4:7d:8e:03:3d:b2:44:
93:92:25:e4:08:b0:df:14:6c:09:32:e2:d4:4e:f5:f7:97:23:
3c:4d:a0:8d:e3:7a:56:5e:7d:51:e0:71:2b:b4:c7:18:1b:ba:
c9:75:f8:42:24:ca:d4:d9:1c:9d:17:04:ed:4d:c2:f7:51:34:
e3:5d:61:b6:2d:c6:84:89:4c:ea:a0:ef:ab:2e:72:ca:b8:72:
9f:80:0f:cc:32:1e:e8:5a:15:3c:8e:79:22:74:20:ad:d2:42:
0d:fd:90:de:e6:dc:cb:5f:16:a0:ad:88:5e:6f:5b:dc:68:08:
c9:e8:d1:3c:ee:57:5c:cc:bd:b0:64:9c:8e:29:87:e1:05:18:
cc:37:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:17 2025 by rpki-client