Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/208b7436-fa1c-30a0-89fe-1474f763f4af.roa
File: 208b7436-fa1c-30a0-89fe-1474f763f4af.roa (raw, json)
Hash identifier: Tz/EOYJCNQKgFYaiRHZLHlDyBFHXosrSZOAyp01abbU=
Subject key identifier: 53:15:95:8B:85:29:35:38:1B:35:9F:47:8B:ED:D9:5D:3A:2C:E0:61
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848318AA8064C63236A09CE6540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/208b7436-fa1c-30a0-89fe-1474f763f4af.roa
Signing time: Fri 13 Dec 2024 14:00:50 +0000
ROA not before: Fri 13 Dec 2024 14:00:50 +0000
ROA not after: Thu 13 Mar 2025 13:00:50 +0000
asID: 20940
IP address blocks: 23.220.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:8a:a8:06:4c:63:23:6a:09:ce:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 13 14:00:50 2024 GMT
Not After : Mar 13 13:00:50 2025 GMT
Subject: CN=85087d28-e751-4ff9-b559-57effaa445b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:4c:05:a1:17:6a:e2:dd:ba:88:a7:e7:51:
52:a5:27:70:b4:fd:1e:cf:71:0e:4f:9c:20:05:04:
d3:3d:26:06:bd:91:a3:72:8d:16:3a:62:5f:e4:2e:
42:ed:e3:36:70:03:3e:5b:4c:be:cb:bc:67:cd:ac:
20:86:c7:ed:04:4a:04:26:1a:20:cb:db:57:fd:ac:
75:d9:e4:99:e0:62:82:1c:dd:c0:12:e0:67:86:04:
8d:91:46:52:a0:9e:ee:cc:8e:b2:ec:79:50:39:5c:
22:56:18:7b:59:a1:d4:70:e3:93:52:5b:97:94:c0:
9f:a1:0e:cf:a0:e0:68:1f:f1:94:31:ce:f9:28:f0:
de:0c:cc:1b:9c:12:d0:a0:fa:9f:4b:d3:4b:bb:4b:
7c:d0:db:0c:12:dc:8c:c7:81:e3:5a:85:ec:54:e5:
1e:7a:ef:57:2e:55:7e:79:d7:d5:cc:18:fd:ce:e3:
18:69:ae:0a:d8:e6:e9:3b:de:c6:15:86:78:db:7f:
cc:92:33:d3:e1:af:d0:15:0c:ca:5e:fc:f2:5c:73:
1c:24:27:4d:f1:d3:cc:7d:b8:34:8f:e7:01:2f:1e:
7d:27:c3:63:10:79:51:67:05:aa:5b:ec:df:d7:08:
7e:06:04:4a:eb:c5:51:f3:bc:c8:21:a6:4f:84:7e:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:15:95:8B:85:29:35:38:1B:35:9F:47:8B:ED:D9:5D:3A:2C:E0:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/208b7436-fa1c-30a0-89fe-1474f763f4af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.220.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:a7:42:e6:7a:10:44:fc:72:08:f7:6d:ee:55:57:4e:c1:55:
ac:b5:13:b1:f2:1f:6d:fc:82:27:e9:09:3d:d7:43:86:49:f1:
d1:e3:e7:10:f8:e9:0c:b8:7c:0d:e6:3e:e9:4f:3a:71:8a:b3:
42:78:3f:a8:29:b4:30:2b:55:2f:ec:73:3f:a9:eb:a3:03:11:
cf:6e:e6:57:38:dc:25:e4:f0:14:8b:25:28:0f:e3:6f:d1:dc:
e2:c2:ef:6b:6a:1f:cf:a4:6b:51:f8:ee:70:bc:ce:63:92:56:
3e:8f:03:ba:80:43:c8:20:5e:11:62:70:ba:a6:16:8d:75:ba:
5f:a4:e3:93:51:a7:7b:39:43:43:a1:54:39:0f:d0:62:b4:63:
68:89:b7:d9:47:23:93:04:5c:67:88:41:34:6d:c3:5d:18:3d:
01:6e:26:ff:c1:08:fc:4f:3a:9f:02:23:fc:15:ff:8a:34:b4:
6c:f3:a2:40:c8:e9:79:4c:0d:83:74:fa:b7:b7:53:13:94:6b:
bd:07:49:a0:4a:54:1b:55:31:8e:b5:14:39:24:8d:b3:ea:5d:
7e:7a:60:90:fc:aa:64:ff:34:2b:ea:50:ce:5b:64:c5:68:15:
6f:8a:d4:f3:b7:ea:13:e0:d4:77:2f:de:b7:fa:81:f8:76:b6:
21:21:04:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:42 2025 by rpki-client