Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52df3a5-cf00-3386-934e-4736d190dc31.roa
File: e52df3a5-cf00-3386-934e-4736d190dc31.roa (raw, json)
Hash identifier: cPgdX5YmaZNPt0874Opzo7M9CirJeR+sx6OeoM2bivA=
Subject key identifier: FF:79:20:85:E3:FA:98:96:33:FC:D3:36:16:05:BE:1A:93:00:53:13
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CCF3E5531791BE20EB40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52df3a5-cf00-3386-934e-4736d190dc31.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 24203
IP address blocks: 23.35.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:cc:f3:e5:53:17:91:be:20:eb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=34805444-a953-4292-b75e-bcc23c786636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:97:9a:45:d3:4d:ed:81:fd:e4:6b:78:27:f7:
58:10:75:48:f1:90:2e:ad:49:37:b8:56:79:22:d2:
a2:e7:a5:41:35:7d:4d:c9:b9:d1:99:be:78:1d:88:
7c:39:03:c6:6b:ed:49:43:7f:b9:1b:f5:2f:cb:5f:
57:08:03:c3:ec:f7:14:5a:b6:0e:1e:d1:a4:8f:fe:
bb:4e:ef:7b:23:4e:f1:9b:10:5b:b7:6c:bd:4c:f1:
7c:c5:08:dc:87:8f:30:d7:f1:e1:27:04:15:2f:b1:
68:a9:e0:ba:73:b5:c3:ef:47:7a:be:9c:95:20:2b:
c2:ba:ea:36:bd:f5:73:3d:18:17:de:f0:35:d6:ee:
9c:39:14:7b:62:7a:d9:5f:3d:21:b0:a6:e9:08:ea:
1e:9d:d6:d6:d2:6c:60:cb:78:eb:ba:cb:a7:17:43:
3e:f5:a9:69:dc:d7:11:4d:17:48:fb:d7:64:07:40:
10:fa:ac:23:7f:ac:20:16:06:bf:e5:59:0e:86:15:
0f:d2:bd:01:bd:e6:49:3b:df:83:40:7e:2b:4a:77:
f4:96:b0:1d:13:6b:fc:1a:d7:15:19:4b:10:97:2c:
90:10:21:87:f1:55:d4:f9:c1:3c:c1:59:0b:b7:fc:
eb:84:1b:c0:9c:62:b6:88:05:7a:6e:de:b0:4b:61:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:79:20:85:E3:FA:98:96:33:FC:D3:36:16:05:BE:1A:93:00:53:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52df3a5-cf00-3386-934e-4736d190dc31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:9e:62:21:96:ca:14:90:04:49:43:db:1e:eb:e0:d2:aa:fa:
58:66:04:d7:b3:69:62:4c:14:86:12:22:9f:54:86:3e:e5:29:
8e:44:2c:c3:df:6b:51:bb:75:61:f6:c5:35:32:cf:a0:41:61:
b9:05:53:d9:04:ee:8f:0e:2b:97:c8:fb:64:c3:ac:02:5d:2b:
57:fc:17:c6:aa:99:75:03:c3:3e:18:e7:28:39:a8:8f:39:f3:
81:95:eb:ae:34:66:8f:97:03:f3:4a:c0:32:10:b8:a3:b8:d5:
b9:47:c5:b8:c2:eb:c4:b4:f7:f1:bb:fb:9c:60:3e:02:5d:00:
b5:e5:26:2a:8f:b6:fb:c1:b1:e9:31:a1:85:5a:6d:b3:3b:cd:
03:f6:78:02:e9:6e:62:3e:f2:98:66:13:9e:b3:23:04:f5:4c:
ae:cc:a5:72:70:22:58:9b:d3:08:9f:3e:ac:aa:82:82:4c:46:
26:26:f4:22:d6:5b:e6:f5:8f:8d:14:95:10:48:b5:2c:8c:27:
e5:5c:9e:2e:23:97:e9:5c:20:34:f8:55:92:f1:a3:e9:69:0d:
29:44:f3:89:a3:33:16:da:9f:ab:a1:4f:4e:7b:f1:f9:0f:3a:
f1:dd:e1:02:36:22:02:86:ed:6e:e8:b8:d2:63:07:43:10:a1:
7c:c5:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:56 2025 by rpki-client