Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa
File: 1ba38731-e254-3980-ade3-0f1947ffc32a.roa (raw, json)
Hash identifier: 4nyQj02Uh4pJflmNXYCNUZt5Uk/nt3ocQbaNuaE4DN0=
Subject key identifier: 70:E5:8F:7D:66:39:CD:DD:FF:4B:96:B1:66:33:A1:2E:E4:83:72:49
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847FB1A2AEDC86932005AB43900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 20940
IP address blocks: 23.207.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:2a:ed:c8:69:32:00:5a:b4:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=562cc163-b9c4-48f2-91f4-1fc5faf9684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:9e:9e:86:ee:4f:56:e1:2a:5e:69:aa:1e:
e2:a0:0f:2c:e7:87:53:9f:24:39:dd:20:04:81:7b:
94:e3:91:b2:ef:c6:01:84:36:77:20:4b:5c:ad:51:
2f:fc:5f:b3:fb:f4:e1:03:39:94:0c:a8:31:ed:aa:
09:6a:21:d1:7d:c7:22:64:64:7f:98:4d:9b:81:13:
99:29:36:8a:ef:8d:8e:ba:ad:22:4e:df:32:a6:81:
21:f3:46:60:4d:00:5d:53:3e:aa:38:5b:51:b3:b3:
e4:c6:1d:05:e5:0c:57:72:0a:92:5e:06:c6:40:59:
b5:f7:96:44:8e:76:68:64:62:81:82:35:14:93:44:
ee:8c:aa:17:bd:e4:0b:5a:64:ec:db:53:db:e3:cd:
76:aa:c7:5d:d6:04:ff:01:26:9f:e3:f7:ab:b9:e6:
c5:8c:be:bd:6c:b8:c4:a0:b2:c3:ae:0f:47:e5:50:
fa:a4:b2:86:3a:e3:30:41:62:31:16:19:5b:dd:61:
e5:44:49:24:aa:e9:c1:e5:f0:d3:87:3c:dc:74:89:
b4:d2:54:dc:ae:00:ce:d6:d6:7e:e0:82:2e:cd:35:
1e:fd:4b:cd:f8:de:d0:5e:f9:2e:c1:09:f6:0b:52:
21:60:08:2e:ae:a0:0c:9f:f1:7c:39:a5:96:cf:37:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E5:8F:7D:66:39:CD:DD:FF:4B:96:B1:66:33:A1:2E:E4:83:72:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ba38731-e254-3980-ade3-0f1947ffc32a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.207.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:7b:85:79:8a:ad:06:82:8d:d3:ea:26:03:70:65:0e:2a:5f:
0d:ed:fe:ae:48:e8:c5:6f:4c:70:87:3c:91:4d:41:49:f4:72:
63:81:be:79:2b:a7:d3:df:cc:e6:01:87:0a:e7:fd:65:5b:29:
7a:f7:6c:a1:23:ca:35:b4:17:09:f1:28:83:33:39:a3:f6:29:
cb:93:b2:65:e3:40:b2:40:5f:6f:ad:f6:cc:c7:78:ff:67:9d:
de:3e:c4:ea:2f:af:08:1d:6b:d0:c1:e6:2d:54:97:87:51:0c:
e9:b0:7c:26:a6:0e:c0:b5:10:47:6e:7f:72:9d:2b:c5:ad:7b:
eb:8f:97:50:62:4d:59:bd:70:93:00:b9:c7:9c:42:85:4a:39:
33:c0:9a:92:23:53:d5:e2:a0:fc:de:f2:6d:52:22:68:ea:29:
8f:32:f9:e4:f6:fc:82:30:c7:09:93:46:99:6a:e6:5a:d9:e2:
63:6e:dd:5b:73:2e:2f:4f:a3:4f:f9:88:30:b5:c0:a5:6f:c7:
54:e5:77:ab:b9:d5:49:7b:49:70:9b:fd:68:a1:27:77:0b:7b:
79:67:bd:c2:59:31:85:c6:91:cd:1c:88:fe:c3:16:3a:75:f7:
35:d7:0c:de:2a:46:12:ab:66:fa:46:ba:8f:93:be:52:8c:83:
f2:35:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:06:46 2025 by rpki-client