Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67c09f42-5ff9-3891-b32f-be616df5f2ff.roa
File: 67c09f42-5ff9-3891-b32f-be616df5f2ff.roa (raw, json)
Hash identifier: 0XSklU02vBbMLH3ux+ySC0I2gECAVK1OOzX7o7D8OIU=
Subject key identifier: D2:CB:2D:6D:EC:89:FC:3B:CA:2E:66:DD:E2:38:88:B3:20:0A:2C:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485CD039C208CF139FD079B300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67c09f42-5ff9-3891-b32f-be616df5f2ff.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.44.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:39:c2:08:cf:13:9f:d0:79:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=0eb0cb93-4a61-4179-a8d9-4e6973f3800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:ff:d6:34:19:7c:f2:29:e9:6f:5c:13:dc:
09:f4:bc:e1:42:4f:c8:78:2d:c1:2f:c5:b3:7a:f5:
d7:80:77:14:55:8c:ec:2c:63:18:5d:92:b6:19:c8:
f2:1d:ca:7f:da:68:e4:5b:ce:fc:c6:cb:06:45:a0:
99:1a:96:c6:40:d0:18:6e:94:6f:3f:30:1a:c3:06:
9b:dd:32:e6:bb:f2:69:da:f1:41:1d:34:23:55:72:
25:69:75:03:fd:11:9a:af:04:0a:f1:43:3b:3a:01:
1d:83:e5:09:c5:ff:ae:db:f2:d4:bc:f0:f9:8f:92:
bb:7b:25:bc:9d:d5:59:90:58:50:9b:64:8a:97:7f:
8d:88:73:ee:70:46:dc:4d:3c:a3:cf:43:43:c2:69:
eb:ce:ea:ce:7e:1a:7f:1c:48:d1:e8:57:37:b0:5a:
30:f6:22:18:fa:5f:45:ad:8d:e5:4e:0d:e8:7d:89:
49:2d:f9:0f:96:66:d8:68:9d:3d:96:33:1c:59:2b:
f1:6d:ab:2c:f3:b2:a2:1f:7f:80:90:ec:3e:1b:1a:
39:19:66:38:65:cb:da:88:27:b2:b7:fe:c3:0b:ad:
d8:98:20:ec:30:88:b4:3e:c7:b3:3a:8c:57:d5:36:
57:c9:56:f0:cc:a0:79:03:8f:73:01:6b:fb:85:8f:
0f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:2D:6D:EC:89:FC:3B:CA:2E:66:DD:E2:38:88:B3:20:0A:2C:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67c09f42-5ff9-3891-b32f-be616df5f2ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:f1:85:57:62:84:c4:83:ba:2f:26:1a:d4:a4:28:31:38:7b:
cb:99:88:7e:a4:39:98:39:6c:5a:b4:6d:8f:b5:ac:2e:73:61:
c6:c8:e0:64:64:48:0c:a1:b0:6c:12:5a:89:94:f7:b6:9a:c3:
e5:e2:bd:fd:ae:2b:ee:b4:8d:91:f3:89:72:07:1c:be:65:62:
42:de:88:ea:88:ee:12:6a:7f:ac:47:ca:ff:78:7b:a1:7a:b8:
1c:06:f9:ea:a3:a8:9e:fe:2c:fc:20:8c:aa:93:ef:3a:4e:2b:
79:af:a6:7e:21:72:47:3f:e5:69:e8:5c:87:f4:73:9d:f1:e8:
12:e7:33:19:5a:b8:54:61:fb:18:71:d4:87:e6:f0:3f:2a:92:
69:a0:d1:6c:7e:61:54:b0:70:69:c8:71:62:e9:c0:9d:a8:33:
c1:7e:7a:ee:d8:ad:3e:f8:35:13:5d:f6:ed:33:99:1e:31:b1:
c7:89:a0:d3:ba:60:e8:3d:ba:bf:27:96:9f:13:c9:62:46:cc:
ec:ee:b2:7c:a2:1a:44:92:d1:32:53:b3:b8:af:63:66:9f:13:
6a:d2:67:df:f1:c7:d5:ea:57:6a:54:d8:7c:2d:5d:a5:ff:8c:
77:c9:cb:18:f2:bf:12:8a:29:61:3e:7f:af:a9:cf:15:d4:c3:
bf:63:b5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:56:12 2025 by rpki-client