Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa
File: 4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa (raw, json)
Hash identifier: TN/04oGJVfsGh7PsPS3tTvrLrJscx0sKciM3gRyduB8=
Subject key identifier: 34:CD:CB:AB:90:C5:99:CC:AD:E7:EB:D2:C7:61:0C:DE:B8:2C:9F:87
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486D90617372D8FE2FED4E7060
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 35994
IP address blocks: 23.32.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:61:73:72:d8:fe:2f:ed:4e:70:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=70c56a88-6822-4cb0-bb1b-cd5a089d7f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:67:17:a6:4b:23:09:a1:2d:9a:fe:2f:77:92:
bf:fd:a7:6e:7d:ea:e2:45:9b:aa:46:f4:b3:33:39:
53:fa:52:0c:b7:d8:ea:9e:32:c8:1c:fe:78:0d:e5:
08:b5:2e:94:fc:4b:4d:9e:9a:ff:0d:37:64:b7:a3:
b6:b0:4d:d3:10:66:e7:33:f8:af:4e:23:38:b7:d0:
da:7d:36:b6:4c:b9:ef:9d:ac:79:c1:f5:28:26:1f:
27:21:50:45:5c:d8:a5:4e:b6:2a:4b:6a:ea:dd:41:
45:fc:32:1b:e7:60:78:fb:c8:83:7f:b8:6d:bd:0d:
ed:9a:8b:ab:9d:1a:81:5e:75:3d:6d:4a:a1:75:a3:
aa:8b:ff:9f:7c:c5:f3:9a:ec:fa:ab:c5:31:bc:a9:
c5:a3:23:6d:c5:ec:fc:3d:4d:97:91:97:84:d2:bd:
0b:ed:3a:72:d4:25:28:52:56:b7:8c:5d:8f:b4:b1:
52:7a:8c:72:fc:71:85:86:fa:d3:94:1f:96:ec:e5:
c9:87:ef:79:76:e2:74:de:54:c7:96:57:f3:84:47:
4b:59:b3:76:d3:74:91:cc:f0:17:48:0c:53:69:23:
7d:94:82:91:62:c1:4b:2c:16:20:b5:74:8b:37:7a:
2e:97:56:6c:8a:d1:50:21:17:76:fc:e6:72:54:34:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CD:CB:AB:90:C5:99:CC:AD:E7:EB:D2:C7:61:0C:DE:B8:2C:9F:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b1aa448-a069-3db4-9d0f-3de9c5c76789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:f0:55:c1:75:b6:46:09:40:45:bf:2f:6c:c3:1f:54:a7:11:
96:aa:97:99:0e:99:24:07:2b:6e:a1:08:a5:99:6d:d7:a0:b9:
cc:70:21:90:50:6d:64:df:a9:7f:9e:48:26:60:1a:0d:53:a1:
ab:c0:aa:ba:25:9c:3e:ae:3f:07:df:e0:e3:2b:b3:a2:07:8e:
c4:e5:5a:eb:aa:d2:26:23:d2:09:7c:75:22:dc:e9:ad:cb:de:
13:1b:61:d3:55:82:80:39:76:a2:64:62:94:cd:6e:ca:ea:b7:
8a:4e:16:f5:70:77:a2:d6:90:3b:a1:8a:b1:7d:80:c4:79:2d:
9e:f4:1b:b0:06:70:f2:4b:49:0f:1a:67:83:a2:ad:de:4d:be:
78:dc:75:65:a7:6c:6d:af:9e:2a:2d:01:f9:fc:fe:c0:46:eb:
e4:43:45:5f:21:df:7f:4c:e0:6d:ee:dd:e1:79:84:71:b3:be:
5a:fd:f5:66:8a:6d:16:23:36:8b:63:3d:32:0b:90:e6:56:58:
4d:4c:52:aa:8a:cd:8e:b4:a2:20:b9:16:76:e4:84:ea:89:29:
cd:6d:5b:37:8d:9d:0c:d8:1d:da:c2:ac:27:56:ee:2d:8a:0c:
67:40:45:f7:42:d4:1f:f9:8b:12:9d:41:f0:3e:88:02:09:0b:
e6:3b:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:33:06 2025 by rpki-client