Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90d03871-cd73-3cbb-b561-fd732778bec6.roa
File: 90d03871-cd73-3cbb-b561-fd732778bec6.roa (raw, json)
Hash identifier: jH5e/bByg2wnMZi+2B8xfZs61LAqLtZDXTXaT1WJrIc=
Subject key identifier: AA:03:3F:F1:21:91:C9:CF:18:F1:E3:FC:40:5A:D4:3E:BD:E3:70:92
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584845159FD6422E6217AE035180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90d03871-cd73-3cbb-b561-fd732778bec6.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.7.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:9f:d6:42:2e:62:17:ae:03:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=fc1cba8a-5277-4aec-8c31-fafa16c58ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c1:86:ad:77:3d:e0:24:2f:4e:18:d4:0c:3d:
40:6b:8e:0c:b8:62:56:9f:89:c5:ca:3d:4d:42:76:
00:34:aa:7d:9a:57:19:98:89:b4:87:0c:48:03:00:
a9:88:d9:15:eb:4a:24:83:4f:75:74:1f:c0:13:64:
a2:06:a9:cf:43:8a:2a:21:ee:07:68:f9:49:aa:af:
02:c7:46:7b:bf:0f:b8:de:6e:8d:da:2d:91:6f:60:
92:b3:33:ff:18:ed:df:b2:fa:04:51:4c:16:2d:77:
29:ee:94:ed:22:d9:38:97:dd:3d:df:10:7a:63:4c:
fd:04:e4:fb:e8:ef:54:92:2c:39:70:e8:a1:d5:1d:
58:5e:d1:60:8c:41:8a:63:9e:7d:8d:ee:56:6d:f8:
fb:46:61:53:96:b2:a8:d8:7c:b4:19:76:be:51:55:
2b:5e:41:8d:df:9a:36:ac:e8:0c:9a:25:3e:14:e5:
4c:c8:99:80:75:58:a6:8e:71:41:06:4d:cb:b5:48:
a0:cf:a0:99:87:da:ce:22:44:d6:23:c0:5d:21:1c:
32:bc:8f:4a:21:16:1e:50:21:e8:34:10:8f:cc:3a:
25:1d:1b:bd:55:93:2e:ec:f9:1e:a4:16:b8:c3:c5:
8b:8d:39:21:ae:34:84:2a:56:86:cb:87:e4:4d:c0:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:03:3F:F1:21:91:C9:CF:18:F1:E3:FC:40:5A:D4:3E:BD:E3:70:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90d03871-cd73-3cbb-b561-fd732778bec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.7.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:3c:71:61:e3:be:c5:3d:83:56:f0:01:eb:b2:57:6c:3c:ff:
cc:ce:37:c8:a2:df:e8:92:d4:52:01:05:66:f6:a7:18:12:5b:
20:07:fe:19:2d:1c:d2:58:b4:aa:e4:de:7a:2e:a9:75:6b:9b:
da:09:46:94:b1:80:ac:b4:36:60:a5:f9:fa:5a:80:af:14:c9:
a2:e6:9d:b4:e0:c6:ae:3c:44:56:5d:67:50:ce:44:68:39:30:
a1:a9:58:4e:7c:3c:6c:91:f4:49:68:84:88:09:d5:14:85:70:
a0:90:64:a0:17:a3:9b:44:ef:26:6c:9d:63:d9:88:16:4f:5a:
58:c6:bd:51:5e:35:9e:64:e5:23:a7:15:e4:b7:de:c8:a0:15:
fb:5b:c1:84:85:56:59:0e:36:c5:97:57:42:83:ca:72:f3:6f:
9d:d1:97:73:75:62:6c:ad:98:a7:a4:1e:66:7d:ec:40:f0:e0:
9d:20:be:e8:ba:1f:06:4e:cd:c4:de:a1:7b:31:a1:9e:ff:54:
09:c5:f9:53:70:3e:ef:23:1a:c6:69:b8:fe:3d:e0:6d:66:e5:
bd:38:5d:cd:3a:a0:de:ce:38:5b:b1:f9:ba:a8:2d:58:d2:3b:
fd:27:34:99:fd:5e:61:1a:a6:1f:02:20:24:8d:ad:1e:aa:b4:
a2:4e:04:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:00:11 2025 by rpki-client