Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9243b82-1930-3e01-9aea-20a07266313e.roa
File: c9243b82-1930-3e01-9aea-20a07266313e.roa (raw, json)
Hash identifier: B8DQxddVP8QnSB1fXEBdhyomPQcPvkWH1v1ZWXvm+Cc=
Subject key identifier: 63:87:3B:F1:BB:2F:7F:49:9A:6F:13:F4:08:AD:1A:15:DF:8E:E9:C0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209AABCBB40EEFCC15DC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9243b82-1930-3e01-9aea-20a07266313e.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.38.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9a:ab:cb:b4:0e:ef:cc:15:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=795b2caf-a4b3-4d30-8b6b-d452d9768d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:e9:ac:aa:de:08:c9:c6:7a:f7:cd:55:49:
95:b3:88:49:1c:19:8a:2d:da:66:14:7b:8f:6f:26:
5c:3a:50:c4:fa:34:e2:09:e3:f9:cf:76:3f:43:ef:
fe:9f:ea:d8:72:8d:db:20:65:01:c3:35:98:a8:14:
61:91:38:8f:8d:7b:95:79:05:e7:a5:e4:d0:df:c0:
d9:3e:25:cb:03:1c:a3:e8:0e:77:5c:e3:59:d4:f5:
51:6b:a0:12:89:17:b1:2f:d8:df:f9:cf:63:9c:bf:
bc:bb:b2:7a:90:82:e3:3d:7c:7d:f6:b4:f3:66:19:
8c:0a:26:06:5f:28:7d:20:66:a4:d4:31:2c:1c:3e:
2b:f3:a2:39:eb:63:e5:61:91:36:05:3e:98:06:8e:
92:51:11:0f:e9:68:ed:2e:53:aa:97:5f:31:79:0d:
ef:9f:e2:89:53:de:14:35:3e:a0:ab:f9:a8:8b:b0:
a2:3a:93:42:57:83:9e:b9:d3:b9:47:a5:c1:7b:98:
7b:d4:0a:a9:d0:18:66:a2:8d:54:88:9e:4b:df:1f:
93:6a:3c:79:6d:6f:40:70:1f:53:07:40:ce:d9:31:
2e:78:9e:ae:c1:df:ad:a4:31:8d:af:35:a6:7f:3a:
a4:38:12:54:af:eb:d6:47:2f:25:ac:d1:92:8f:8f:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:3B:F1:BB:2F:7F:49:9A:6F:13:F4:08:AD:1A:15:DF:8E:E9:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9243b82-1930-3e01-9aea-20a07266313e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:87:0a:d5:fe:d9:e8:ce:8d:78:02:16:f5:af:8a:1c:94:e3:
a3:48:60:8e:1a:a3:29:e2:7a:91:1a:35:cb:fe:76:18:e6:95:
74:82:0c:68:ec:e3:59:01:1d:3b:22:bf:a5:44:64:dc:6e:34:
4e:26:66:89:6a:83:89:49:1d:2c:cd:5f:f0:19:7f:ff:fa:81:
22:3a:e0:ef:28:a1:e9:25:91:25:d6:43:ac:7e:bc:9d:b4:b0:
b4:4c:67:5d:0b:bb:e9:47:44:04:94:59:9c:3d:d9:e7:1b:20:
e0:0e:80:54:6a:24:1d:22:59:a3:d1:1a:15:1f:2f:96:45:08:
3d:cc:9c:44:4d:bc:3e:9c:da:85:35:9a:03:dc:a3:ce:e7:3f:
89:73:2b:74:bd:65:d1:9c:45:1d:2e:53:16:a7:8a:0d:47:64:
47:8a:98:c0:cb:80:9c:c1:ba:22:71:d0:8d:8c:32:a9:75:08:
db:17:7d:29:8a:8b:dc:1b:17:fe:d5:82:97:55:49:43:6a:51:
78:ce:36:19:e0:4a:dd:16:a7:8c:54:19:a9:25:09:52:8d:a7:
c8:f9:ac:c1:3e:5b:95:e3:b3:fb:f4:d7:ee:ab:f5:03:4b:e7:
0d:69:eb:bf:f4:ed:dd:ba:fa:72:a2:43:e0:7f:9b:d7:c9:85:
f4:be:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:51:31 2025 by rpki-client