Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af693bc-340a-35e3-854b-43454fbf9497.roa
File: 9af693bc-340a-35e3-854b-43454fbf9497.roa (raw, json)
Hash identifier: xQvFjI8BLHa4VN7j8JE03gmVgSDTSjQEffulzKdhHuY=
Subject key identifier: 7D:5E:88:9C:45:B9:89:2D:87:DE:83:C4:13:89:75:E6:36:F9:EA:A4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB76FA9D1CE49602DD3190
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af693bc-340a-35e3-854b-43454fbf9497.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.44.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:76:fa:9d:1c:e4:96:02:dd:31:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=87d4f7ee-15e8-4c7f-8483-2b7399f33499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:1d:23:83:10:d5:d2:a7:1e:c4:f2:ba:8e:
d0:a0:1c:70:ef:c8:3e:f3:21:2a:0a:ef:46:b2:60:
e3:ee:e0:bf:c8:a0:26:0d:95:4a:fc:9c:31:04:b6:
28:a5:0f:2e:17:89:c5:a7:99:6c:3b:e5:88:44:57:
c1:a2:e4:bb:15:4c:0d:58:bd:5e:68:f6:aa:77:3e:
44:e0:b1:96:f5:97:33:21:16:cc:6b:11:3c:1e:a7:
4f:ca:4c:92:43:1e:93:c5:30:f0:f0:f2:70:ba:41:
15:49:01:16:88:c7:56:eb:f7:cd:e4:6c:10:44:fb:
b5:f3:27:e8:18:97:cd:e2:83:6e:6f:2c:82:18:8e:
2b:fb:90:d0:39:34:41:cb:d1:08:23:f3:c7:d5:6b:
3c:32:ad:23:eb:e3:33:c5:15:7e:b0:5c:6d:8e:b4:
75:48:03:50:35:1b:da:16:f1:13:6d:f0:10:25:aa:
cc:9d:92:be:a1:e7:a3:b6:59:14:1d:12:df:c3:9e:
9f:2c:96:e2:d2:94:b4:51:41:0e:7c:66:1b:df:c3:
b4:ef:f1:63:3b:a8:7f:51:fd:48:16:b7:01:bb:ff:
5a:71:20:75:6a:ce:9c:9e:86:23:c7:ee:b5:8d:ee:
b4:75:9b:a0:61:8a:38:4e:54:1a:df:1e:c7:05:11:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5E:88:9C:45:B9:89:2D:87:DE:83:C4:13:89:75:E6:36:F9:EA:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9af693bc-340a-35e3-854b-43454fbf9497.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:27:2d:a9:14:52:e1:a3:ee:c9:6c:6a:51:97:80:40:29:c8:
bb:2c:f8:e7:6a:8b:49:89:22:a7:da:af:90:96:7d:dc:7a:40:
dd:58:38:b2:af:5e:cb:ea:5a:10:51:e6:5d:1b:41:98:f6:dc:
c3:e7:32:87:17:28:d5:0a:5e:13:be:cb:4a:58:d6:66:99:6f:
f2:34:b4:5f:e5:08:0b:c6:82:6b:b6:ac:2b:4f:b3:b5:87:63:
f7:4e:d5:8c:c6:d9:9b:07:9e:59:da:f9:33:82:55:1f:a0:79:
b0:ed:0d:d8:71:d2:5b:f9:36:a0:7d:fe:81:e3:b8:8c:cc:46:
db:42:4e:85:f6:cd:4a:76:85:bb:4f:cb:2e:9b:db:16:0a:b2:
7c:04:8a:ab:88:41:a5:b2:20:e1:b7:17:6c:5d:0f:fd:9a:95:
64:03:29:82:28:75:b2:16:97:c7:04:34:f2:e9:8a:c5:03:84:
f2:76:51:eb:37:cc:eb:bf:dd:91:2a:be:20:1f:45:66:a0:cb:
40:22:5d:7e:7b:19:2a:da:79:ff:c4:06:3f:22:e2:9f:d0:30:
0f:2f:12:93:9b:17:53:7c:7d:f7:db:e0:10:6c:9e:83:11:b9:
74:b7:d6:7e:ec:41:21:10:1d:31:86:e3:55:b9:f7:c8:4f:b1:
48:d2:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:16 2025 by rpki-client