Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa
File: c646d1f6-aaea-3038-bf20-421eb2a50335.roa (raw, json)
Hash identifier: 3yen0FaEBIRMIaN4fxpheXKSBfS6UGint1ffoGmdegU=
Subject key identifier: B5:50:7D:82:00:CB:73:B1:6E:6C:DC:35:64:87:F8:E0:4D:57:85:E7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584845159F339AEC11AE05635E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.3.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:9f:33:9a:ec:11:ae:05:63:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=189f536b-8319-4393-8634-3f3a5841825c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:6d:4b:73:6d:49:d9:5f:cf:2d:0c:34:50:
dc:85:92:80:76:6f:e3:aa:de:09:6c:c8:0a:39:d3:
8d:f4:c4:5c:cf:81:c7:e8:21:19:14:92:2f:aa:1c:
cb:54:cb:31:e5:4c:33:5e:e5:dd:5d:e9:b4:05:ed:
3f:b5:77:9a:26:41:75:b9:40:c7:96:ef:92:3b:b9:
2a:7f:36:3b:40:4d:47:29:b0:e3:97:4e:64:a3:75:
bb:23:d6:48:dd:26:94:f5:cc:37:00:74:13:6b:f2:
af:13:13:bb:bb:9b:73:17:0e:57:aa:c5:5d:5c:a9:
3d:d1:9a:f5:79:4e:f2:6d:7c:24:92:bd:91:b6:20:
18:75:5a:f2:59:ea:b8:68:57:08:56:ea:94:78:65:
e6:1b:e3:41:c8:39:f5:62:8e:1f:b9:dc:e4:ad:91:
95:3c:4d:92:80:51:80:d7:d4:67:99:32:c6:86:e0:
0e:27:77:96:23:93:a1:95:a1:02:f9:3a:7d:7e:b8:
9d:74:30:c8:51:9b:9f:5d:b8:80:c9:d7:a8:19:42:
c9:13:bd:d8:1d:1f:ec:d0:b9:2f:c9:f1:c3:1f:14:
95:8f:b2:24:df:17:99:7c:ad:b1:13:5e:09:1f:7b:
cd:d6:f7:f5:fc:2b:28:e8:31:53:e0:2c:dd:c3:8c:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:50:7D:82:00:CB:73:B1:6E:6C:DC:35:64:87:F8:E0:4D:57:85:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c646d1f6-aaea-3038-bf20-421eb2a50335.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.3.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:16:3c:aa:6d:e4:c3:2c:37:97:52:48:a0:9e:39:a2:7e:ef:
de:b8:67:1e:5a:e8:75:cf:a6:d7:59:13:91:d0:a5:02:7d:c3:
cb:09:ec:10:77:75:90:6f:f6:f0:48:01:2b:2f:4b:30:7a:78:
1c:c6:99:9c:2e:5e:8c:90:48:50:c7:81:3e:1f:03:43:1a:4a:
a6:f2:18:ff:5f:04:3e:05:4b:e0:82:71:40:c5:08:86:3a:9b:
61:2b:5d:3d:ea:c4:36:d0:8c:b4:d0:e1:79:f8:08:c3:5c:e5:
14:58:8d:95:da:dd:0f:30:e7:2f:73:b9:ea:1d:fb:d8:4a:a6:
f1:9f:a8:fb:74:a6:62:be:97:fb:19:14:da:e6:f2:fb:04:e5:
f9:8e:f4:4c:10:f2:11:4c:b1:77:22:b7:c6:28:63:e4:94:2f:
2b:b1:58:d3:3d:c1:8e:be:a2:95:77:c4:e5:18:1a:77:cd:1f:
bd:88:10:f0:62:1a:b2:61:7e:55:51:b4:9a:53:5c:ac:bf:be:
9a:09:a1:ef:b0:de:65:cf:a5:7c:39:2d:c8:ed:15:8e:00:cf:
ba:71:d5:1a:2c:16:3e:13:b9:82:2f:ff:ed:2f:8b:87:90:d8:
ee:93:2c:3a:43:8e:e7:7a:a2:0f:0f:1f:f7:a7:28:34:9b:43:
a2:9c:32:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:54 2025 by rpki-client