Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa
File: 9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa (raw, json)
Hash identifier: UhUtQpy9wNVdMOQeXoO5m6KQuChvGQjDzhl8nQNlrdg=
Subject key identifier: 0E:BA:06:9C:F7:3A:74:8C:59:5B:0B:49:6F:37:74:CA:52:37:C2:1B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485B6B07BB48A8B90C43302300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 9498
IP address blocks: 23.35.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:07:bb:48:a8:b9:0c:43:30:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=b29304ea-b924-4cf9-b690-c7c72c3c625a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:af:9a:f3:be:da:df:9c:d6:77:5a:4a:1c:67:
10:04:22:64:84:a3:10:91:c6:99:fc:db:fc:51:d2:
e7:63:8d:8b:07:b3:ae:e3:7a:96:8d:91:5f:b4:c0:
11:60:02:fa:c1:46:3f:f2:b5:2f:72:85:2c:aa:e3:
97:04:57:6c:61:66:6e:eb:5f:0b:b8:82:45:1f:d9:
22:cc:51:7c:bc:88:d9:82:70:e3:b1:87:e0:e1:ec:
7d:e3:ca:ac:b0:41:4a:04:15:74:78:6b:1a:e3:ac:
1b:43:02:e9:27:e1:47:4a:7b:8f:6f:29:a6:e7:c2:
d4:a0:93:f5:7e:9c:3b:f6:5d:4e:63:af:ba:33:37:
84:92:cf:67:49:c5:fb:0c:e9:7c:5c:f5:41:f6:5d:
f4:a5:c1:82:44:5f:66:8a:9e:84:7c:d0:66:48:00:
54:63:ce:ee:de:ac:dc:6d:d3:1b:3e:70:b2:4c:a1:
21:1f:68:89:90:f0:e3:49:ad:b0:59:b1:17:9a:d1:
c6:05:6d:a4:96:d6:3e:a0:2d:35:d8:e1:44:14:81:
f4:bb:4f:8f:2f:30:66:a3:ce:09:04:29:5f:3c:b3:
4c:34:bf:20:78:40:f1:34:b4:30:9f:20:cc:7c:78:
f0:ff:3a:6a:5b:f3:c7:e9:4c:b8:72:7b:63:67:73:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BA:06:9C:F7:3A:74:8C:59:5B:0B:49:6F:37:74:CA:52:37:C2:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9869eb6a-fa34-3c29-b7e5-e6c0f5de562c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:e5:24:be:7f:d2:c0:70:0b:dd:06:50:08:fb:e4:5b:bb:a6:
f9:62:80:c7:e7:6e:6d:ac:f1:9d:6e:21:eb:f2:2f:1d:9a:67:
ec:65:46:37:fb:05:4f:02:5a:2f:10:a7:0f:1f:41:02:db:f7:
4c:72:2e:04:00:b2:f6:61:20:48:76:77:8a:4f:35:ab:5d:00:
83:16:9f:67:b0:11:37:ff:d8:7c:02:62:fc:15:13:6d:33:62:
10:49:b8:3c:e8:80:6c:44:fd:47:0c:08:a6:f5:2d:3a:0e:83:
af:78:06:12:20:1b:c7:54:ec:21:97:a4:f7:32:f5:d8:2b:e7:
4c:9f:89:fa:e1:f3:41:2f:a7:a7:52:96:92:73:8f:98:53:51:
d2:56:d3:60:81:5f:64:f7:ca:f6:a7:fd:ac:54:20:b3:60:d2:
42:42:35:23:2f:14:93:d6:15:c7:c5:c0:23:ed:94:8e:52:b2:
8d:fe:4a:ec:b0:60:5f:ad:38:76:20:2a:13:38:ef:92:fc:01:
53:8e:46:9f:2a:ae:7a:15:17:eb:fb:26:ac:7e:57:e8:a4:92:
b4:1f:aa:10:f0:4c:1c:a5:c2:a2:69:d0:5d:da:f2:65:86:10:
7e:fe:c2:29:47:58:f2:db:43:f3:e8:75:48:58:91:3b:14:8e:
9c:37:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:58 2025 by rpki-client