Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ba080c4-d406-3f70-a122-da198da36889.roa
File: 3ba080c4-d406-3f70-a122-da198da36889.roa (raw, json)
Hash identifier: VeZf1smSQLgsq/hf7bSsvXARddVKWMQ3chVfq/JqL0g=
Subject key identifier: 2A:41:7A:3F:19:43:66:A7:26:10:D0:7A:91:E6:C2:54:51:69:CC:E3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483E1ABF6155D8B9DE5C09C000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ba080c4-d406-3f70-a122-da198da36889.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.197.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:bf:61:55:d8:b9:de:5c:09:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=f5492d87-e178-4291-bf5c-25a0c666a8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:a6:f4:db:77:fa:c5:0f:54:6c:c8:d4:87:
70:61:ac:dc:51:23:0f:9a:1b:f0:0b:74:56:85:8c:
ad:e9:64:e3:ac:63:d6:4f:df:32:49:c0:8d:b3:ee:
a5:d7:eb:0e:af:02:72:3d:5c:b0:5a:0e:b5:ee:b3:
e8:c3:16:57:77:91:86:da:43:ae:7d:70:7c:06:6f:
e5:3e:6d:62:27:e7:88:f2:5c:c3:2c:a6:00:5f:14:
50:c1:3e:6c:dd:38:4c:cd:ab:7f:17:8c:41:9f:5d:
5e:aa:fa:f6:f3:b6:57:74:33:b4:b0:5a:89:9d:bc:
27:1d:be:dd:47:0f:88:79:09:0a:bf:5e:c6:65:ae:
11:b1:31:f9:65:42:a3:86:35:2e:6c:70:16:bd:9f:
74:e9:8d:2d:45:70:84:27:39:cc:4d:f9:c7:cd:63:
dd:e7:1d:1e:5d:46:87:53:2c:97:13:7d:32:74:3d:
3f:0e:a0:66:e7:13:3f:19:ff:08:27:75:af:ad:9a:
cc:1e:e2:61:cf:34:0a:5c:61:02:de:de:3e:45:d2:
3a:76:89:dc:ff:34:7f:34:c3:d4:99:0d:37:16:ad:
6a:2c:f3:f1:14:0c:c2:88:cb:fe:88:ab:77:51:7d:
2c:96:16:dc:24:bf:2c:14:91:0f:80:68:4b:25:20:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:7A:3F:19:43:66:A7:26:10:D0:7A:91:E6:C2:54:51:69:CC:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ba080c4-d406-3f70-a122-da198da36889.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.197.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:0d:6b:37:01:09:df:76:c2:c2:a4:8d:55:c4:7b:ea:27:e9:
f6:48:d1:ed:41:5e:8e:17:0f:8c:95:1e:09:5d:1e:9c:a7:25:
d5:4e:ab:a6:b7:e8:c1:ab:64:24:01:ca:0f:b2:2c:27:9e:87:
f7:22:f6:f1:e6:ca:34:30:8a:56:be:91:07:e9:19:16:1f:20:
7e:66:dc:8f:fb:4c:0b:d8:4f:e1:5f:bb:59:07:06:8c:6c:9d:
31:47:1d:00:1d:4e:51:ae:d1:de:3e:56:3c:7a:85:a0:e2:4d:
19:39:8b:2d:4e:5c:ae:e7:93:3e:69:e4:88:c8:5d:87:d3:d7:
c4:fa:81:14:93:e5:7d:40:32:28:19:dc:e3:85:84:60:cc:1b:
1c:0e:c3:5c:f8:6f:09:77:3f:f3:ae:9d:97:e0:08:b9:ef:75:
22:25:d2:30:23:e5:c0:1e:92:20:ce:cc:17:c1:c9:36:7b:2d:
a8:d5:0c:99:48:80:86:e4:11:3d:85:09:d2:26:98:ec:97:a1:
1d:3d:95:2b:c7:36:25:9d:cd:60:5f:80:b4:e3:7b:6f:7f:07:
a9:9d:de:8f:26:18:30:da:bc:99:c9:95:8b:76:3d:7f:29:a8:
1b:11:e3:f8:07:81:b3:8a:f6:ea:6e:e2:1d:51:68:b4:69:1f:
10:fb:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:07 2025 by rpki-client