Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6cded19-0586-3add-9937-adb225fd17c7.roa
File: e6cded19-0586-3add-9937-adb225fd17c7.roa (raw, json)
Hash identifier: 5mCOLghnkvfYWDPPUxNvcaUb9Kq9nkhGdPGZqHIuULc=
Subject key identifier: CC:9D:00:4E:86:7F:7D:AC:C1:F0:3A:F3:0E:C4:06:EE:CC:B8:E0:2C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483CB56E6035EAB394FE1937A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6cded19-0586-3add-9937-adb225fd17c7.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.37.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:6e:60:35:ea:b3:94:fe:19:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=5bef4833-b3ab-4450-bfd2-46d841fff4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:b9:7e:ba:d2:ef:b6:c0:4e:1a:62:c8:f7:
f2:d7:cd:a8:93:e9:dc:9f:66:1a:22:8b:83:70:15:
2b:6b:4f:9d:89:e2:95:46:37:ee:ed:05:3a:0d:e3:
66:74:1d:34:76:42:e1:c4:c5:06:b5:cd:90:9f:5e:
b6:d0:20:61:bf:85:c8:0c:de:9e:c4:81:8f:c8:6e:
7e:57:f4:c4:11:e0:21:18:c3:49:dd:9f:da:09:60:
27:fd:d3:5c:bb:d3:28:3b:3e:c3:7d:4d:e3:d6:99:
e9:df:f8:53:3b:52:67:5d:ef:46:bc:17:8a:e5:e9:
76:11:0b:03:2d:2d:ad:e6:30:cc:ab:0f:ea:f7:f1:
2a:30:99:de:00:a3:27:13:23:19:e9:c8:e1:d1:fb:
58:10:aa:e9:66:5f:28:07:01:82:fb:1d:68:7a:bc:
7d:99:a7:ff:3c:70:bf:65:89:da:0b:89:4d:0b:22:
79:18:37:f9:86:d0:6f:64:c9:91:89:23:a7:eb:f3:
dc:f6:bc:51:7a:22:95:a3:cd:df:9f:46:a5:70:b0:
fb:2f:d3:29:a2:61:a4:06:f0:df:53:b7:3c:f5:13:
73:91:ef:f7:3c:56:06:5f:62:2a:f4:c2:78:96:cc:
7e:8d:63:d0:51:06:ea:77:e1:88:de:7a:8d:73:52:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9D:00:4E:86:7F:7D:AC:C1:F0:3A:F3:0E:C4:06:EE:CC:B8:E0:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6cded19-0586-3add-9937-adb225fd17c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.37.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:9c:61:6d:8b:e9:bf:03:79:84:43:a1:15:7c:25:e1:0a:ae:
23:aa:9e:b9:06:98:f9:70:f0:84:13:2e:dd:ce:f4:bc:a8:25:
19:cb:4c:17:be:17:90:14:e7:95:ef:ae:8b:df:9d:8f:f0:eb:
b3:a6:29:f2:cd:f0:b5:b0:cb:fb:4f:1a:4a:d3:40:f4:32:65:
3f:20:34:c4:d6:0b:a8:be:d7:1f:e5:a7:fa:e2:e9:35:c0:0e:
47:9d:f4:5e:59:f8:d7:bc:54:53:a5:0a:64:b6:c6:f6:77:54:
69:63:f9:00:ba:31:81:6a:83:a0:8a:36:2b:d3:b9:8c:12:4b:
c3:dd:41:79:3b:ac:dd:40:33:36:8f:6d:52:fe:91:80:af:01:
c4:53:c3:7e:21:cd:dd:2f:7b:5c:74:d8:a3:95:9b:fe:09:43:
d0:d0:d5:f2:81:6e:ad:03:9d:c3:8f:95:52:8e:b1:7e:f5:54:
09:cf:cb:46:ae:05:e9:17:55:65:a0:bb:9f:7d:56:14:15:3f:
1c:61:fe:57:cb:8e:96:6a:f7:9e:81:0d:b2:19:8d:4b:7e:f8:
c4:2b:d0:63:3b:14:74:61:b8:b8:fb:ed:80:27:96:ae:ee:05:
e4:22:55:95:5c:62:0c:d0:d2:b3:40:cb:ec:c4:a4:62:28:ca:
aa:53:04:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:24 2025 by rpki-client