Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/317b41da-fbf1-3dc6-a616-29e8ceb4754c.roa
File: 317b41da-fbf1-3dc6-a616-29e8ceb4754c.roa (raw, json)
Hash identifier: 1AIR9cbmBsMpRh8CRkrD/fsBHfwdSPfuGrA2VyhkQZM=
Subject key identifier: D6:47:15:AD:47:42:12:80:34:6A:A9:2C:34:4D:CD:FE:A4:5B:CA:47
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209B2CCD10543F587E8E60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/317b41da-fbf1-3dc6-a616-29e8ceb4754c.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.38.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9b:2c:cd:10:54:3f:58:7e:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=fe03c1ff-bbec-4c24-b4dc-7300a107b994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:02:1b:d8:c9:aa:a1:f8:fd:42:61:98:be:
59:a1:de:72:27:7e:b4:f7:d7:49:45:52:c5:c3:96:
7c:11:35:4e:68:a3:cc:ed:9e:fb:4f:cb:46:cc:0a:
7c:64:6f:10:6f:54:db:fe:fd:8f:3b:f7:d6:b2:05:
d3:98:a0:03:6c:3e:8d:fc:28:f2:17:9f:ea:fc:61:
eb:0b:b7:75:d7:d8:a7:99:3e:49:87:21:5c:48:45:
70:ca:cf:c4:63:1d:82:b2:8b:5b:1f:ca:06:4d:59:
0f:be:2c:b1:67:05:1c:09:da:77:9c:ea:17:ae:94:
61:7d:14:ad:a8:86:d3:61:a2:e5:47:31:9c:72:79:
94:b2:c0:fe:bf:d1:8e:ba:4e:33:82:8d:a7:d7:f7:
cd:2d:f1:b0:93:06:29:36:08:9f:24:b6:bb:15:05:
09:9b:1a:ec:f5:db:22:57:3b:a7:2b:89:7d:27:b3:
d3:f2:c6:1f:05:80:99:d7:e3:a7:79:eb:78:a4:47:
59:dc:1c:4c:4b:74:31:a0:99:31:ec:38:66:24:5d:
5c:03:6b:83:40:7a:eb:a9:6b:21:97:d2:be:82:0d:
09:a3:23:2d:b3:de:f4:d7:b1:9f:34:ac:ea:d4:be:
11:38:a0:b1:e3:91:9e:3f:a5:14:59:ab:1e:91:16:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:47:15:AD:47:42:12:80:34:6A:A9:2C:34:4D:CD:FE:A4:5B:CA:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/317b41da-fbf1-3dc6-a616-29e8ceb4754c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:42:41:b0:e4:a6:06:18:47:00:39:3f:62:a2:9e:a9:d8:e1:
4b:ba:5a:75:ec:84:0c:70:ac:e7:73:f4:61:5f:c2:12:42:44:
78:6e:a3:7c:0e:2b:26:42:2c:73:45:36:28:0c:b6:d3:e2:9b:
e6:0c:b7:ad:01:4a:a9:eb:e2:7d:28:cc:8f:3e:80:c2:12:99:
f8:9f:75:e4:b5:83:52:0f:72:9a:c3:fc:f6:b8:fd:6e:4d:9a:
4c:8c:20:9d:05:fd:bd:6d:45:ef:c8:c5:00:6b:3d:57:b5:58:
fa:71:46:37:ca:a3:6d:da:4a:ed:af:50:8c:e1:31:c5:28:6b:
61:12:25:d7:d1:06:f1:49:f0:59:17:12:28:99:55:59:7b:fe:
cd:75:73:2c:d4:8b:f1:b6:ef:e4:c4:b5:44:a4:34:43:24:8d:
ce:c7:80:76:b2:96:02:fb:b3:21:ce:8d:a4:18:ee:fd:8f:8b:
f3:be:6c:77:6b:50:2c:ce:d5:9c:89:4d:fe:95:95:e9:05:9a:
ac:a9:3d:f5:fd:f1:35:79:1a:3f:b3:74:55:81:58:9e:13:fb:
4a:15:62:e1:05:5f:13:a1:88:cc:ae:d6:b6:c5:f3:a7:11:16:
56:bf:fb:d7:af:28:a4:a7:aa:74:7d:ca:11:1f:70:4a:12:b9:
6d:00:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:25 2025 by rpki-client