Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a000c71-8f2c-3cf1-8dc2-db01266a5a85.roa
File: 4a000c71-8f2c-3cf1-8dc2-db01266a5a85.roa (raw, json)
Hash identifier: yuZeYZE0cTh+kB98FLc9Q1o1UXJtzRaOsJcnHXrpl5g=
Subject key identifier: C4:0A:60:99:A0:4E:3D:91:59:CE:C9:F5:E2:68:1D:B7:00:48:FE:73
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858480BDA7209D9DA44AE2948AE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a000c71-8f2c-3cf1-8dc2-db01266a5a85.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 32787
IP address blocks: 23.45.90.0/24 maxlen: 24
23.57.100.0/24 maxlen: 24
23.57.105.0/24 maxlen: 24
23.213.138.0/24 maxlen: 24
2606:6c00:109::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:72:09:d9:da:44:ae:29:48:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=4a012c1d-3904-4c7b-a83c-3d91c85d8dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:49:a8:44:3e:7b:19:b2:74:51:aa:0b:70:
62:0b:f3:71:3c:3c:71:07:fc:4c:f3:42:2f:a9:11:
97:87:81:e9:62:c1:87:ce:f0:fc:fc:e7:17:45:26:
d9:e9:70:cc:9c:ba:7d:e1:27:5d:3a:9a:50:80:c5:
3d:e4:72:52:13:7d:c0:d1:3b:0b:08:e8:2b:a5:e2:
7c:b4:db:7d:14:2d:2a:44:4d:54:d7:13:66:5f:9d:
c1:5f:63:b0:c6:28:80:83:d2:f9:a4:72:42:15:b6:
31:52:d8:1f:f3:8f:9b:36:9f:1e:b1:67:cd:7d:bd:
fc:f6:09:c7:97:74:86:ff:0a:5b:38:01:7c:00:4b:
71:bc:b6:2a:ab:ed:0d:b8:56:13:ca:49:28:3c:72:
27:a5:24:65:7e:1d:03:7e:22:65:80:18:a8:d4:52:
e9:4a:a8:0f:73:64:cf:6f:0d:3f:60:be:fa:ca:a9:
8b:46:60:f9:25:e3:b0:f6:fa:e1:db:cc:f0:f8:ee:
67:c8:e7:55:34:6f:fd:e3:a7:0d:04:f0:f2:c7:6a:
a0:c0:a0:7e:13:59:d6:90:00:47:8f:52:66:62:6e:
90:75:0d:dc:b2:4e:51:f2:2f:29:1b:5c:55:9a:62:
5d:38:53:3a:76:ea:77:10:9e:f8:c7:3c:e8:fe:b2:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0A:60:99:A0:4E:3D:91:59:CE:C9:F5:E2:68:1D:B7:00:48:FE:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a000c71-8f2c-3cf1-8dc2-db01266a5a85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.90.0/24
23.57.100.0/24
23.57.105.0/24
23.213.138.0/24
IPv6:
2606:6c00:109::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:21:05:c5:11:83:6d:71:28:1c:5b:15:7c:78:ce:10:d6:88:
d2:ff:b3:62:2c:01:2a:5f:08:73:0d:e6:87:ec:8d:a4:d1:30:
76:90:e4:63:41:b1:b9:38:a7:88:3a:1d:90:7a:0c:fe:ad:bc:
63:2d:32:42:ea:c3:17:d8:8b:c6:fd:f8:3a:c0:f1:fe:db:17:
7c:f1:69:c6:08:d0:d3:0d:72:d2:96:aa:13:7e:1f:61:d4:d7:
87:f2:3d:14:e6:44:03:23:3b:65:d5:93:11:42:45:af:f8:71:
60:a8:58:95:67:06:8c:76:cb:b9:89:e3:f1:32:15:cb:49:59:
6c:6f:d7:cc:ed:46:bc:ca:a8:26:6e:12:ae:e4:34:3c:55:b1:
99:f1:15:b4:b2:2b:e8:b2:5a:c0:a2:51:ce:ff:b2:77:0d:52:
68:7c:9f:4b:fa:87:b4:39:6a:99:52:4d:e0:6b:95:1b:71:9c:
3f:e8:72:39:75:de:2b:f2:a2:c0:8c:62:15:d5:ec:4b:d3:de:
90:8c:c1:53:fc:39:36:d6:1b:e9:9a:26:11:6c:3b:b8:70:8f:
a7:f7:44:47:a6:9c:64:f1:b0:93:fe:f7:02:8f:a1:b8:52:89:
10:af:cb:15:85:85:db:7f:ac:a9:e6:e3:9b:54:fe:ff:2b:28:
df:a8:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:18 2025 by rpki-client