Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a1c0c6f-53d0-304c-a776-61d8d939f6ba.roa
File: 4a1c0c6f-53d0-304c-a776-61d8d939f6ba.roa (raw, json)
Hash identifier: e7poZ3tIG7h3QvlKysCWuVKxZnr9EE0EAus7wZNkxqc=
Subject key identifier: 0E:16:14:D2:3E:B7:8F:98:65:8F:B5:AD:91:EC:12:8A:DE:31:35:3E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481F652F249230247288BD7A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a1c0c6f-53d0-304c-a776-61d8d939f6ba.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 35994
IP address blocks: 23.217.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:2f:24:92:30:24:72:88:bd:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=d1c9aa0b-6d39-46ff-97ac-206ca452dec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:63:32:be:c1:75:69:2b:35:c9:ae:ec:bf:
1b:a6:79:7d:a1:a8:5c:fb:13:19:7a:da:31:8c:d4:
2c:e7:05:e8:35:e2:ef:4f:9d:5a:e6:70:2f:b8:6e:
71:88:88:17:79:36:3d:0c:0f:ae:bd:6f:0c:79:d7:
4b:de:26:6f:9b:65:4a:43:c2:ab:45:67:be:65:7f:
1e:7a:6b:d0:bc:00:13:85:d6:8d:7d:88:2d:62:09:
88:08:32:76:f8:0f:e5:b5:06:f7:10:df:a0:c9:17:
65:60:89:8b:6b:9f:ab:5b:0d:3b:3e:ba:f1:0a:cb:
03:b1:6b:02:d6:9e:a5:79:82:d7:ab:f6:ec:c5:f3:
d5:3a:fb:ab:1c:d2:3d:3e:b5:9b:79:d2:ff:7e:26:
46:7c:89:87:7c:80:9d:c8:b4:2b:be:5b:18:8d:e1:
1e:c4:e1:60:63:b1:6c:87:06:c7:e4:f6:eb:4b:c2:
2b:d3:44:8c:8b:ea:84:91:ff:da:ad:5c:3b:1d:1a:
33:a6:a1:30:37:6e:42:54:9b:44:b9:55:6a:b4:de:
fa:14:c8:ba:23:c9:48:ac:b6:1d:54:1d:c3:50:55:
db:c7:86:f7:e3:cf:8f:11:d6:54:74:39:29:46:ea:
d1:ce:5b:a4:aa:d0:27:f6:53:03:04:ac:c9:dc:5c:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:16:14:D2:3E:B7:8F:98:65:8F:B5:AD:91:EC:12:8A:DE:31:35:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a1c0c6f-53d0-304c-a776-61d8d939f6ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:6e:ce:e8:4d:b2:d8:ba:b5:18:f7:b6:87:44:d3:f9:a4:38:
b6:a4:18:0b:25:8b:61:89:6a:2b:d7:71:56:fb:f9:be:43:7a:
97:0e:e5:99:21:10:b8:4f:39:5a:f4:27:61:47:ab:b0:35:58:
0c:bd:26:79:ac:ff:10:39:71:d8:e2:87:03:4f:b0:78:29:11:
c7:5e:0c:e9:7e:4b:15:a7:60:a9:4b:b3:c9:22:3b:cd:94:24:
0c:6d:40:68:93:7f:f8:00:9f:af:77:94:d2:b0:a6:de:36:26:
6b:f5:bc:cb:2b:c8:fe:9b:39:94:fa:d6:12:28:e2:39:cb:41:
2d:77:3f:39:3a:b5:f6:99:c6:60:bf:79:c3:37:72:9f:00:55:
44:3a:a7:9f:b9:0a:0a:95:dd:6d:f1:3b:29:ab:de:13:a8:da:
9d:28:20:eb:69:65:c5:cb:84:91:9c:60:14:cf:f7:36:10:15:
32:ea:25:aa:9b:8c:32:ad:0b:5f:21:b5:a3:ab:1d:cb:fe:bd:
af:ab:6d:23:dd:6e:a5:e5:3b:ee:e9:5c:6b:ff:66:00:21:8e:
d0:d5:ce:2c:ab:83:b4:59:40:e9:d6:2a:34:bc:51:18:17:95:
1a:a1:36:24:e1:58:9f:5b:9f:5a:63:dd:e7:8d:b8:de:8d:7d:
d9:5b:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:28:46 2025 by rpki-client