Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dac41a7a-cfab-3721-a80f-156c029935e7.roa
File: dac41a7a-cfab-3721-a80f-156c029935e7.roa (raw, json)
Hash identifier: jnzi027o5bq92CVb4KKgHBX5ZJt5CT4w9kmtQhgp2Wk=
Subject key identifier: 6C:59:52:69:64:EB:E3:8D:51:71:6B:9C:34:42:1C:FE:24:CD:D1:FA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C365F0B26727195140C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dac41a7a-cfab-3721-a80f-156c029935e7.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.33.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c3:65:f0:b2:67:27:19:51:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=55b0e325-9630-4764-984c-de8f934f35d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:83:4c:59:0b:0e:f7:49:69:0d:30:ff:64:45:
fb:7c:9f:d2:1a:77:00:d6:f5:1a:6c:e1:81:14:77:
6f:62:a8:87:b9:d9:b4:48:22:c7:ce:1d:f9:e9:e7:
15:3c:12:af:1c:e1:a5:34:b1:e3:86:8f:2c:7a:c6:
97:ee:6b:da:e7:c4:37:53:e7:8b:5c:3d:7d:41:37:
cd:2b:ab:1d:ce:b3:b9:3c:b2:8f:79:0c:dd:ca:84:
ec:af:8e:e9:2e:8f:72:28:e5:ca:55:6d:b7:2e:28:
50:63:4f:2b:cb:40:43:0c:b4:f3:05:27:c6:ab:c3:
64:16:41:1d:b3:6c:99:e9:49:d2:bf:e4:7b:52:ef:
ff:8c:10:05:77:2c:2c:bf:ce:10:3e:58:c3:71:8c:
59:7e:eb:38:e3:65:ed:ac:87:30:50:51:d0:d3:25:
b0:2a:91:a6:cc:8d:40:47:89:7d:cb:50:1f:bd:f6:
29:fe:0a:1c:75:1d:3d:71:af:c7:f6:18:fd:f1:df:
a9:c2:de:bd:4c:3a:3c:7c:b8:22:68:92:1b:76:cf:
2c:84:8d:7c:8f:06:9d:36:01:82:17:aa:f8:f1:47:
0b:60:42:77:fe:ce:41:a7:27:ec:66:97:9f:9d:1d:
e3:9e:e7:7b:4c:99:ea:62:5d:72:43:00:d0:c5:c6:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:59:52:69:64:EB:E3:8D:51:71:6B:9C:34:42:1C:FE:24:CD:D1:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dac41a7a-cfab-3721-a80f-156c029935e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:dd:14:80:d4:2a:9d:3a:42:08:48:1b:c0:30:f1:42:de:56:
9a:53:25:1e:1c:63:11:7a:5c:bd:87:87:0f:1d:a2:18:03:c8:
c2:ff:aa:2b:36:7c:83:f2:74:21:f3:fb:fc:0a:0b:fe:f1:9b:
93:7e:1f:ae:23:b1:3a:0b:75:f0:5c:e3:2d:5b:f6:17:e6:29:
e2:be:a7:b8:43:d9:3d:7a:39:ad:ca:f9:db:14:d0:cd:e9:d6:
da:2c:9a:4f:e8:d5:1f:ad:6d:f9:18:63:e1:ad:bb:97:12:34:
ed:b3:8d:f9:3b:db:30:54:07:00:cd:2c:b8:98:b9:c5:1a:ab:
de:1f:5e:64:28:38:02:c3:36:dd:80:13:dc:2e:d5:9d:c9:b3:
71:c2:12:6a:24:84:52:9f:aa:5d:65:91:57:bc:df:22:7f:68:
53:68:59:94:80:1f:0a:6d:72:fb:38:86:ad:61:15:28:10:69:
06:92:66:77:fc:69:64:7f:a3:4b:6f:9f:79:8e:2c:9b:7f:86:
3a:bc:b8:a5:9a:bd:27:1c:d6:c4:46:42:a2:fa:49:f6:80:d5:
43:8f:dc:87:50:47:c6:ba:96:04:8a:0b:95:ac:c4:55:d9:1f:
40:64:d1:c1:c6:d7:6a:ff:54:6b:7b:68:a7:d1:88:14:f8:1d:
7d:e8:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 06:29:25 2025 by rpki-client