Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/826cd082-eae5-33bd-b21a-7ca07c91cab6.roa
File: 826cd082-eae5-33bd-b21a-7ca07c91cab6.roa (raw, json)
Hash identifier: wOB6fk1WJoMs3+QdG+Wz43uXDipyI4tOlU2nQjgQiKA=
Subject key identifier: 3E:DC:C0:20:24:2E:F1:B9:3C:97:8D:79:DD:EF:7F:A9:6F:C8:28:A8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A208FC36C8C75BA3E6FB280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/826cd082-eae5-33bd-b21a-7ca07c91cab6.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.36.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:8f:c3:6c:8c:75:ba:3e:6f:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=bfbe9ab6-e34b-4459-9114-b799c0d2198f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:0d:41:77:d6:8d:dd:b2:62:ca:19:f6:ab:
1a:cc:d7:41:a0:9b:b5:93:d7:91:80:4c:78:0a:80:
50:b8:31:1b:21:3c:0e:13:60:9d:90:d0:8e:d8:55:
aa:57:f2:9f:2b:8a:05:04:b7:aa:1c:2a:a8:e1:af:
64:06:d2:1b:a1:99:d7:35:03:0f:79:a2:e3:79:5b:
93:00:60:68:ad:63:62:de:b3:b2:36:0f:68:72:e0:
37:d2:b0:01:e7:a0:79:46:9c:bf:3c:7f:fb:61:be:
6e:88:5d:f2:b6:21:14:34:15:6e:ca:b5:b4:28:de:
3f:ea:d3:cb:bf:ab:9e:63:3b:fa:1f:91:70:cd:97:
dd:a1:54:23:26:bb:a8:fb:63:d4:97:24:ee:34:52:
26:48:c8:f0:6b:d9:b3:49:d1:12:e8:34:78:60:5c:
f6:71:fb:48:fc:7c:14:61:8f:5d:45:44:bc:d6:bd:
22:84:5c:6f:4f:17:e6:23:5b:f0:a0:40:ef:8f:c7:
77:74:a4:e6:7d:f7:c4:85:9a:d4:c1:cb:80:f3:fa:
fe:c6:31:56:35:14:2c:c9:65:04:87:dd:ce:07:e6:
22:14:c6:48:3b:c3:fa:62:02:01:a9:f0:4f:c2:2d:
fe:38:e3:50:e3:75:93:e1:7b:9a:60:14:36:be:1b:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DC:C0:20:24:2E:F1:B9:3C:97:8D:79:DD:EF:7F:A9:6F:C8:28:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/826cd082-eae5-33bd-b21a-7ca07c91cab6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:d5:9d:ba:f5:ce:40:0c:54:a4:73:09:81:93:84:3b:d6:c1:
26:6e:ef:30:48:76:5a:c6:5d:dd:eb:fe:3d:95:89:be:22:4a:
df:b7:63:6a:9b:a0:c5:c0:ac:86:32:80:9e:bd:b1:30:b9:81:
3b:30:14:99:61:70:e1:8f:53:2c:8d:0d:f3:c6:c7:73:ed:29:
66:35:03:11:d3:fc:7b:f4:38:a9:f9:da:9a:47:09:c6:de:ce:
3e:5f:c9:20:1e:c8:c4:6c:63:5c:95:b8:5a:74:c0:74:59:a0:
c6:65:f6:f5:ae:f0:d5:c4:7c:86:ae:a8:be:f1:86:69:68:06:
36:c1:0d:dc:3c:0f:52:21:70:6b:46:b9:a9:37:e4:f3:75:49:
cb:a5:0f:0e:cd:2f:1e:fe:7a:9e:61:70:e5:b5:d5:34:87:9f:
14:73:d8:55:ae:76:7f:ca:5f:0e:f3:07:02:01:16:02:fa:8d:
12:8f:72:86:99:64:f2:6d:45:e0:f6:22:9d:11:cd:c8:11:ce:
a1:e2:bb:33:3e:1f:e0:37:01:62:dc:c3:a6:33:f7:47:ef:52:
f2:97:d9:be:15:58:db:e3:5c:58:ac:ac:a0:74:6c:3d:1e:b0:
87:9c:3d:b0:f3:aa:85:dc:8e:1b:83:b4:da:ac:c6:88:bf:1b:
05:00:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:25 2025 by rpki-client