Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/6989d8c2-efe8-3e9f-963f-973a66ed50b9.roa
File: 6989d8c2-efe8-3e9f-963f-973a66ed50b9.roa (raw, json)
Hash identifier: BYf7wiKREaUjLgdf4XkoiUJPLBcZGod/JDOGRBNBBpg=
Subject key identifier: 31:A6:D5:1F:7A:80:7B:C3:A1:A8:21:22:20:3E:2F:0C:6E:23:01:48
Certificate issuer: /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial: 010D0C9F43285844246941368BCF6B202BE4CC32
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/6989d8c2-efe8-3e9f-963f-973a66ed50b9.roa
Signing time: Fri 08 Dec 2023 02:00:16 +0000
ROA not before: Fri 08 Dec 2023 02:00:16 +0000
ROA not after: Thu 07 Mar 2024 02:00:16 +0000
asID: 20278
IP address blocks: 23.94.35.0/24 maxlen: 24
23.94.39.0/24 maxlen: 24
23.94.42.0/24 maxlen: 24
23.95.21.0/24 maxlen: 24
23.95.22.0/24 maxlen: 24
23.95.40.0/24 maxlen: 24
23.95.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:24:69:41:36:8b:cf:6b:20:2b:e4:cc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
Validity
Not Before: Dec 8 02:00:16 2023 GMT
Not After : Mar 7 02:00:16 2024 GMT
Subject: CN=d834fdd3-0de9-4958-a575-2fd2b1fd8ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:24:8c:d7:28:5a:9a:70:3b:4d:38:23:c9:
7a:d8:c0:fb:13:be:5f:32:21:00:63:b1:d9:ae:f6:
0f:4a:22:1f:1b:85:3f:5c:f6:bd:f9:34:8d:e9:58:
40:c7:c5:35:10:80:ff:07:14:1b:51:2b:52:09:16:
c5:9d:f3:97:36:d7:62:b2:16:a5:3e:1d:2b:a7:45:
3e:21:f6:b7:c1:7a:98:b2:17:18:6b:a0:7e:8b:10:
7f:99:db:19:6c:75:a6:0a:a5:25:f3:8b:73:c2:99:
81:ac:aa:6e:49:c6:18:b3:5d:54:d1:c5:eb:26:aa:
18:44:42:ac:e6:bd:cc:23:c0:35:1a:d8:50:2f:91:
62:f6:19:3b:c7:9e:62:08:eb:a1:d5:ad:19:b8:85:
b6:fa:f3:af:83:1a:22:43:12:02:da:cf:aa:6b:fa:
13:c1:07:f8:f3:d1:9b:29:c0:8a:50:53:79:57:12:
01:c1:ab:71:3b:a4:2c:57:0b:59:80:d7:1e:73:1b:
cf:3e:f6:47:ac:8f:33:50:e3:04:25:72:85:d3:67:
5e:e5:83:db:d1:57:36:e1:09:e1:e5:df:dc:bf:4e:
cc:3e:c4:d0:25:77:72:48:f6:30:5c:40:8f:8d:aa:
7a:1e:d2:97:28:66:1c:a6:3f:6c:e8:fb:50:30:6c:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A6:D5:1F:7A:80:7B:C3:A1:A8:21:22:20:3E:2F:0C:6E:23:01:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/6989d8c2-efe8-3e9f-963f-973a66ed50b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl
X509v3 Authority Key Identifier:
keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.94.35.0/24
23.94.39.0/24
23.94.42.0/24
23.95.21.0-23.95.22.255
23.95.40.0/24
23.95.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:db:a2:35:1f:69:7b:df:b1:d7:d9:ee:f9:2a:e1:14:07:17:
de:b9:40:86:a6:48:07:e0:66:80:ad:25:fa:a6:ae:c7:9c:da:
69:e4:98:5c:98:a7:0a:73:39:eb:01:bc:44:72:6b:40:b0:60:
8d:d6:1d:bb:66:a1:fc:54:51:15:19:51:e0:74:96:1c:c6:64:
cc:4e:3f:40:56:b3:d7:c2:17:18:e5:31:69:cf:35:80:2b:73:
db:06:4d:40:f7:36:40:72:d8:c1:85:63:62:f6:27:49:df:46:
68:19:02:f7:1a:dc:70:04:be:ae:de:3e:d6:7c:47:68:a9:e7:
99:1e:ee:12:2a:58:80:19:de:f6:ba:10:f6:0b:af:df:41:57:
d4:dc:8c:59:63:2c:0a:14:de:6f:b1:eb:52:75:f5:68:d2:76:
e9:72:82:9c:8c:f1:a9:95:05:55:d6:e0:d6:08:fe:f8:99:1b:
88:9b:82:1c:36:94:d4:44:95:6c:1b:41:02:a1:9c:b1:f7:dc:
e7:11:23:f7:e2:4d:5b:44:b8:54:f4:bc:b4:a7:c7:8b:e1:33:
85:20:55:20:90:e5:02:3f:63:43:3e:cc:16:62:09:53:5f:3f:
be:57:4f:df:bf:72:97:2f:cc:1f:43:95:7a:fa:7e:35:c5:af:
de:4e:67:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 18:54:42 2024 by rpki-client on console-ams.rpki-client.org