Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3652813a-a892-3010-b000-d65c7c03786a.roa
File: 3652813a-a892-3010-b000-d65c7c03786a.roa (raw, json)
Hash identifier: WoB4V8jN/xe1qXru7hy9+w1yZqeLRLQq5+O9PWX0UxE=
Subject key identifier: B0:B6:52:2D:40:D8:67:04:CA:23:E8:F9:EF:5B:FB:2D:F7:74:25:2D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209ACA250671A34989EC40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3652813a-a892-3010-b000-d65c7c03786a.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.38.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9a:ca:25:06:71:a3:49:89:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=ff8df7b6-57b3-4977-a328-a8b6b348bbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:69:23:6c:42:ef:aa:ec:20:32:2e:6d:aa:14:
01:00:02:2d:9f:1a:c5:98:cf:63:8e:1f:39:bc:53:
8b:e1:c3:39:e9:bd:61:35:69:58:81:e3:ae:dc:35:
7c:fa:6f:17:98:33:49:7b:c9:3d:02:25:bf:fc:bc:
a4:36:9e:ba:13:dd:11:96:55:16:41:88:f3:ce:cd:
62:8a:ab:10:9b:5e:c3:d5:ef:ad:c7:a4:1c:af:83:
d4:03:44:b9:aa:c5:f8:36:7d:28:83:72:fe:2d:4f:
48:60:8b:7f:db:ca:d2:51:e1:c9:04:8c:94:eb:72:
5c:b2:20:a2:1e:92:e5:2a:1a:0b:f0:79:11:5d:0e:
8c:d2:ef:8e:73:2c:b4:c5:a5:59:87:2e:4d:ea:65:
31:ef:1f:19:a2:32:f7:07:45:f9:cb:86:0d:c5:b4:
3c:46:2a:05:0b:72:44:3b:c4:aa:2c:94:ca:35:99:
b7:4c:6b:c0:39:fc:98:24:5b:43:dd:1a:4f:81:a3:
20:23:25:a8:fd:4d:e2:69:64:19:ba:a1:b0:42:1e:
6e:65:66:be:68:8d:7f:24:ad:b7:9d:ed:15:2a:d4:
ea:c9:e0:4a:ea:64:11:1e:62:e4:ac:d7:64:7d:58:
d7:71:11:75:2b:1b:58:5f:a9:aa:fe:8c:61:03:94:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:52:2D:40:D8:67:04:CA:23:E8:F9:EF:5B:FB:2D:F7:74:25:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3652813a-a892-3010-b000-d65c7c03786a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:4d:93:1a:5d:0e:be:22:36:fe:b3:09:5d:4a:f1:c8:d9:25:
3d:f4:d7:60:32:9f:34:80:8f:f3:dd:17:c4:8d:5e:40:29:33:
f3:c0:eb:da:fd:b0:db:d5:a0:af:b8:ec:ce:21:cf:c9:bf:ac:
e6:94:d6:e1:7a:92:f7:08:16:9e:17:92:a8:84:9d:32:ed:23:
7b:08:ec:b6:19:23:ff:e9:86:4e:cb:65:2d:1f:c5:06:af:8d:
f0:3e:4d:9b:6a:35:14:71:08:85:fd:21:d3:03:59:4b:94:cc:
91:c0:c0:f5:72:3b:01:34:dd:43:52:f8:4a:cf:23:97:bd:94:
22:34:d5:79:c8:26:5c:7c:9e:03:6b:59:85:ce:cc:8e:40:3b:
a3:b0:ab:75:42:fb:ca:a9:2d:f3:bf:f3:b3:81:1f:03:8f:92:
a0:b8:bf:24:c9:82:14:b0:78:0a:ec:06:ed:63:a1:98:af:ad:
35:ec:94:06:48:90:51:07:c5:d0:ec:15:4d:eb:02:64:80:85:
e2:f5:d7:e0:96:64:22:1f:6a:46:39:d4:81:09:8b:aa:32:e1:
20:74:61:98:44:75:0a:b3:b3:a2:a5:fe:be:e2:bb:c0:f6:33:
4c:4a:a6:81:04:36:df:ca:33:a0:cb:1d:9e:47:f4:9e:d7:81:
ce:e8:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:22 2025 by rpki-client