Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d843801a-c918-3b30-982b-7bc8bfd4a785.roa
File: d843801a-c918-3b30-982b-7bc8bfd4a785.roa (raw, json)
Hash identifier: ggaoO3SqwZ0ABJeM5qTyJcti8asUCUNm1xlcfFcPZBk=
Subject key identifier: 29:B6:96:89:A6:91:9F:7C:16:ED:F0:8E:8A:64:91:0E:2F:81:61:FF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CA673724B75677C06A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d843801a-c918-3b30-982b-7bc8bfd4a785.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.33.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:ca:67:37:24:b7:56:77:c0:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=3d0a37a6-8f89-4d0b-adf9-51cfb98724fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:47:21:36:fd:63:fe:3a:45:78:fe:85:e3:d8:
b3:44:ba:58:44:3c:0e:e6:a3:ba:2d:89:10:9d:45:
1b:84:5e:d4:29:f2:22:00:13:9e:00:0b:52:94:1b:
0c:e4:ce:f6:4a:53:1d:5b:22:a8:5e:dd:17:a0:ce:
03:90:43:84:d1:b5:81:89:82:ad:12:e6:09:ad:5e:
38:e1:30:2a:33:5b:73:2b:20:ea:e7:a3:3c:77:79:
e2:98:36:85:16:38:be:63:a0:e0:84:c2:42:f1:1a:
5f:8c:2d:03:c9:e6:7c:c7:d9:5e:f5:af:9b:2a:6a:
51:36:a8:d8:6c:4c:ed:29:69:bb:0e:1c:17:70:4d:
42:bb:d2:79:d9:d2:29:ca:31:6a:c9:41:dc:42:e5:
b2:72:fc:df:5c:40:0f:eb:fa:5e:ec:a8:7a:57:5a:
44:8d:d5:70:79:eb:ae:62:cf:1c:84:ec:75:5b:62:
72:a6:c7:94:0e:be:4d:52:40:01:99:68:95:c7:f7:
16:96:c7:52:8e:e7:2d:f4:2c:a6:35:3b:2c:13:d7:
79:f6:2a:e6:29:b3:12:e1:78:ee:b1:47:75:62:e8:
9f:ad:12:9a:01:cb:79:b0:81:04:02:0d:d5:bb:6a:
59:d6:8d:7a:ac:05:70:c9:5d:1e:24:fe:ee:1c:0e:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B6:96:89:A6:91:9F:7C:16:ED:F0:8E:8A:64:91:0E:2F:81:61:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d843801a-c918-3b30-982b-7bc8bfd4a785.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:c5:fb:63:5d:2a:7c:ba:3f:e2:1f:32:cf:c3:e7:91:52:ab:
95:bf:70:08:95:76:3c:cf:c7:ef:02:2f:07:01:14:4a:39:45:
b9:e6:5a:ea:c8:55:99:84:8f:28:8c:9c:88:df:d3:d9:ff:8a:
64:1e:d6:3c:96:b6:a9:42:36:d3:77:47:90:f4:3a:34:a6:0e:
03:1f:01:df:aa:09:4f:9f:04:7d:d0:fc:5f:3e:03:a2:66:4a:
93:3c:b3:cd:ac:b2:be:19:d9:8d:5f:1f:54:f5:29:cc:b2:cb:
47:bf:8b:67:85:3f:99:f0:9f:50:21:93:00:ef:7a:c2:27:c8:
8f:94:44:2e:94:21:cd:13:13:50:32:a2:d8:46:94:3f:3b:9d:
cc:0c:39:e1:5a:77:90:93:f8:c5:ce:70:ba:41:88:87:07:1e:
fb:18:eb:1a:eb:4a:e3:1a:17:56:c1:c0:36:93:37:fe:1e:48:
60:a5:ee:47:3f:4a:69:3e:6b:87:86:e2:0e:6e:76:6a:c5:09:
3b:39:b8:bf:46:88:38:a5:26:b3:d2:ea:f6:1e:80:7d:98:b1:
2f:b7:bc:2d:e3:7c:0e:20:d8:df:44:69:75:95:ee:c4:ee:17:
89:54:8d:e9:7e:15:0e:74:32:c6:ed:65:af:14:1c:ef:a5:d1:
95:f5:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:00 2025 by rpki-client