Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad9acc4b-7844-3a9f-b3ac-b83fa4c840c4.roa
File: ad9acc4b-7844-3a9f-b3ac-b83fa4c840c4.roa (raw, json)
Hash identifier: XpSpuwtbkPjR6iONa+Tpa+R2Q8Ik/2D/2DUuXtJSfrE=
Subject key identifier: 68:03:EA:E9:75:74:53:C8:4C:A6:0E:3D:24:A6:8E:22:1E:39:7F:45
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483CB56EBE06BD23D952505900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad9acc4b-7844-3a9f-b3ac-b83fa4c840c4.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.40.196.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:6e:be:06:bd:23:d9:52:50:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=4ee56ea4-68e0-4492-a3e4-9c6915a995e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:1e:30:68:ea:1a:5b:50:eb:0e:a9:e3:3e:
9c:07:a0:7c:c3:d2:ad:b7:84:a0:00:04:76:b5:cb:
b5:23:ca:38:a1:9d:fd:d1:28:57:76:52:0d:63:50:
a1:59:1c:bb:4c:68:f6:43:6c:07:4d:29:00:f5:f4:
a7:51:47:43:41:61:c6:4e:a8:31:ed:1d:d4:1f:38:
6b:45:1c:01:0e:f2:aa:61:28:1f:22:74:c0:f0:1e:
4d:13:2f:82:fc:57:b6:2c:c4:a1:26:bb:91:eb:0b:
ac:64:f5:21:22:d6:04:7e:5d:47:8f:23:cd:4d:8a:
08:70:a0:52:d1:04:94:cf:69:9a:0f:ae:72:b1:0f:
af:c5:ed:3a:8b:cd:c0:3b:a9:e7:ca:e2:40:ba:97:
b5:82:6c:10:d3:2b:97:4a:ac:59:34:a4:25:9e:de:
27:dd:90:9b:36:f2:1b:3e:42:5a:33:00:89:48:63:
ae:a6:2b:0f:60:b4:7e:50:f5:39:06:67:92:15:79:
19:e7:73:c1:ac:ea:64:6f:be:d7:d0:d1:d2:2d:4a:
96:10:cc:fa:68:17:2e:b7:ab:6f:96:1f:9d:da:69:
40:ed:35:99:6e:6d:88:87:01:e1:87:be:6a:91:d8:
8f:d4:a2:17:e6:bd:0c:1a:d8:c7:55:b7:bb:e4:c8:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:03:EA:E9:75:74:53:C8:4C:A6:0E:3D:24:A6:8E:22:1E:39:7F:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ad9acc4b-7844-3a9f-b3ac-b83fa4c840c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:bb:02:37:dc:c3:92:8b:16:b5:7b:d9:d0:1e:32:98:3b:fd:
bb:bd:ba:2e:7d:b0:f6:6e:87:a4:45:8d:35:14:6e:a5:8a:bd:
8a:f4:67:28:7f:10:e0:66:9c:36:a7:e5:4c:a7:6d:b3:e3:45:
59:27:63:3c:dd:08:38:5f:08:1a:cd:e7:bc:66:3d:d9:c9:01:
ef:e2:75:78:29:4f:0e:7e:05:15:e8:60:ec:f9:73:a5:0d:c8:
2c:a0:5d:b2:ef:71:94:00:cf:12:ab:9e:ab:40:d1:a5:50:69:
41:68:a1:88:a7:90:a1:75:98:13:b4:57:35:0c:52:9f:1b:b6:
b2:31:f5:dc:51:3b:87:d4:c1:70:92:c0:5c:2c:0f:46:b4:7f:
4f:dd:b7:52:1f:9c:da:07:98:94:be:e0:da:89:3d:16:14:99:
03:23:bf:1d:55:2a:f2:0d:c5:ef:9e:35:45:ec:ff:c0:fe:c2:
c5:85:e3:2d:ad:9d:4c:cb:75:bf:e7:a9:1e:6c:c1:44:35:20:
fb:1a:cf:aa:1a:4b:dc:f4:87:8b:2b:b3:9d:ea:6d:21:13:8e:
c9:b8:a4:b2:23:10:0f:a4:34:bb:b7:25:dc:7c:61:a1:1c:02:
bb:84:d6:a0:fd:c6:d6:78:ed:2c:e0:9f:5e:c5:8f:bb:74:d0:
80:d2:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:56 2025 by rpki-client