Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa
File: d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa (raw, json)
Hash identifier: G+KqrZ1vTALMgK9PwEsKJHK0vLn16PAE1l3HIE/FL+w=
Subject key identifier: A7:FF:55:34:21:B6:43:AF:2F:47:2C:08:65:2A:54:E3:90:B8:25:2C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483CB5728746623E31766580C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.209.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:72:87:46:62:3e:31:76:65:80:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=25578459-7d3e-4b3d-834f-4a65b0816788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:10:65:37:ea:10:bd:4e:46:23:a7:71:19:
21:79:86:a1:33:14:22:c3:47:5b:f2:bf:69:7f:52:
6b:7d:d6:65:a3:02:af:52:d4:6b:ec:1f:cf:82:e9:
64:a7:ba:d8:d1:1c:8c:f4:0a:fe:44:92:43:e5:4b:
b9:ea:0c:fd:c1:e3:24:9d:8a:4e:f1:d2:2f:83:64:
58:9b:41:73:3b:ca:82:ad:b9:1c:af:8e:e4:b2:4f:
0f:87:03:9e:59:54:41:82:cb:af:0f:73:16:97:ab:
b4:e1:dc:3d:68:2b:d6:87:f2:d1:26:80:95:80:36:
54:9e:88:e7:f3:98:f4:52:82:5a:44:63:22:3d:ba:
0d:e2:67:ac:ec:13:7e:a3:f7:74:9c:0d:69:32:25:
30:81:34:a4:d8:8b:05:bf:22:f3:2d:bf:5a:a2:28:
b0:db:bd:32:18:67:23:f0:ea:b0:f0:b8:43:df:d4:
6e:4d:0b:6c:f1:af:dc:5e:d4:72:f8:89:8c:cb:98:
44:9e:ba:c8:0c:28:5c:3d:f1:97:a6:f3:51:9b:e6:
fe:3e:96:f7:68:0d:25:3b:bd:ec:0a:05:7c:fb:d5:
70:10:26:b3:18:80:da:0f:22:10:8c:47:34:b7:e0:
23:87:fa:a7:17:2f:6d:22:6b:74:bf:8d:5e:19:d2:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:55:34:21:B6:43:AF:2F:47:2C:08:65:2A:54:E3:90:B8:25:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:8d:a0:41:98:0d:31:ce:5a:53:8d:4a:d2:df:bd:be:d6:54:
47:7e:33:26:3a:ca:e3:5c:d5:2f:ee:0d:a8:f1:66:76:ce:35:
3b:6c:10:75:82:c6:f6:f8:67:c2:f7:d1:3a:8b:c2:0a:f0:cb:
67:8f:c1:a6:22:3d:37:01:93:b3:fd:d4:ad:62:3d:62:be:c8:
96:cd:91:00:66:17:04:1f:a2:0f:b3:54:d0:83:60:11:ca:ad:
b3:a2:b1:f7:a3:bf:83:c7:27:2d:7e:01:d9:6c:32:d3:2d:47:
d3:e9:cc:cf:6b:e1:19:73:db:df:a0:b5:2a:e4:55:fb:a6:56:
73:03:65:01:5c:3f:87:3c:44:68:da:10:bf:02:e3:a7:e9:0c:
47:70:6e:46:cc:d7:9a:39:1a:be:34:4a:e6:6f:4c:37:23:96:
b2:45:44:2d:f3:9b:bd:9a:68:6c:87:a4:92:49:37:09:47:8d:
78:8d:85:57:a3:b6:7c:83:16:9a:e2:6b:f8:61:aa:4b:97:bc:
30:30:75:85:db:db:bc:42:38:91:c8:b3:74:3d:46:e3:df:45:
ef:a9:3c:3d:a6:f6:5b:7a:0a:84:e6:e7:40:25:ea:e5:3f:86:
70:9f:71:86:3c:75:71:24:6f:f8:3c:52:4d:81:20:35:0c:d7:
98:c8:76:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:15:29 2025 by rpki-client