Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa
File: b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa (raw, json)
Hash identifier: Kdew7+tQWvB1tI9D2Qjh/K994Ez7kHtGZ0gFbXf7AtM=
Subject key identifier: 34:E0:6E:7F:1A:39:2C:F7:1C:75:DD:18:98:F3:D3:D5:61:75:BF:41
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483F803E83152A59A2AF900A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.72.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3e:83:15:2a:59:a2:af:90:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=6d1de015-41d5-4a71-be87-6ec79e38205d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:49:80:21:25:9a:7f:c0:52:64:aa:c4:6a:2b:
f9:80:21:a6:23:1b:06:a3:fe:a4:16:57:56:09:b4:
63:ba:47:69:75:5b:c1:be:10:82:c8:02:71:d9:7a:
3c:0f:db:ed:b2:1d:4e:5a:4d:13:53:a5:ad:00:b6:
6a:36:37:38:b2:7d:b3:b2:f7:3a:19:f6:2c:c9:73:
0e:60:30:53:88:3b:3c:64:d3:c6:2f:28:05:c1:d8:
c5:f7:09:8b:56:3b:57:77:c8:3f:18:9c:70:27:57:
58:6e:72:fe:28:81:8e:e2:34:ef:b8:7f:7b:bf:eb:
31:fc:f7:36:fb:54:6a:e8:f8:7e:ff:32:69:de:bb:
05:61:f0:23:19:b3:55:a8:39:9a:ea:70:3b:32:ea:
bd:d9:55:93:9e:4f:d5:f5:1c:c8:14:b4:1a:18:8f:
6d:8e:18:5f:5e:ef:3f:e3:1f:48:d4:87:c8:26:02:
70:f9:ee:9c:68:03:cd:29:bb:24:c5:e5:0d:e9:c4:
cb:9f:93:c3:5f:93:ae:f6:5b:a4:c4:d7:43:2a:c7:
86:24:0b:25:ab:1d:0f:ec:b6:69:d0:a7:c0:ff:92:
b8:ca:83:7c:d7:a3:c2:78:4e:f4:96:86:cb:fc:89:
82:54:e5:5f:03:2b:8f:db:08:09:34:70:f5:52:db:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E0:6E:7F:1A:39:2C:F7:1C:75:DD:18:98:F3:D3:D5:61:75:BF:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9421a8f-63af-31f2-b9b2-c9ac1b0b5c33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.72.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:2d:a6:6b:f1:bb:33:d8:8e:2e:9c:b8:21:67:09:e1:9e:dd:
5d:24:8d:52:4f:75:28:8c:7d:96:17:ef:f9:5d:55:5c:af:37:
b1:a0:40:ff:f8:ec:0c:ff:f1:00:d7:f3:a4:7a:ba:09:f7:a4:
ec:f6:c2:75:8b:f4:8e:c1:74:83:b9:ed:6b:c6:72:e7:55:99:
b6:22:72:06:0c:2c:54:de:b0:06:33:91:e1:60:82:ea:e9:f8:
e4:39:2c:a2:a7:ee:10:bd:27:23:84:e8:f9:bb:7a:ac:e0:df:
da:99:20:e5:d2:48:ec:e8:59:a6:7c:62:b4:cd:e6:84:e2:5d:
cb:a0:33:db:ea:37:34:7b:90:5f:dd:09:f9:ef:20:ac:db:6c:
67:c5:b2:d0:9a:8b:9a:23:5f:77:e8:b0:61:18:48:04:e1:41:
49:2f:b6:28:bd:34:22:2a:14:1e:a0:ac:e4:61:eb:69:ef:a1:
d1:dd:58:59:2b:46:b3:01:2d:20:e2:e0:af:f0:ee:83:a5:9e:
48:eb:5b:69:1a:ac:8a:c7:0b:3a:55:61:b0:a4:0a:e8:55:af:
c6:e8:fa:b3:43:e9:1f:90:f3:45:42:ce:04:0b:65:b2:19:5b:
24:a7:e1:62:c7:dd:b6:d8:22:f8:7e:91:68:25:4d:50:2a:45:
da:bd:04:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:57 2025 by rpki-client