Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa
File: 435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa (raw, json)
Hash identifier: ixKd33x/HhMk1kc4ue4rABY3gcenT1MS1sMcCQy3zg0=
Subject key identifier: CA:02:C4:75:53:3D:05:B5:B9:C5:EB:1D:6D:0A:3D:C6:79:2B:8D:AF
Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b
Certificate serial: 010D0C9F43285849300E35E7C058692EF4B84910
Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa
Signing time: Fri 14 Mar 2025 18:01:15 +0000
ROA not before: Fri 14 Mar 2025 18:01:15 +0000
ROA not after: Thu 12 Jun 2025 18:01:15 +0000
asID: 398951
IP address blocks: 23.130.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:0e:35:e7:c0:58:69:2e:f4:b8:49:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b
Validity
Not Before: Mar 14 18:01:15 2025 GMT
Not After : Jun 12 18:01:15 2025 GMT
Subject: CN=ea46a56e-21c8-4710-aa36-9ec4c276e737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:15:a1:38:9a:f1:a1:23:4b:9a:5c:d2:fa:
21:c0:ab:23:38:ff:45:4e:a4:93:af:3b:15:d9:14:
a2:e2:2d:81:7d:d4:7c:83:fb:77:65:c5:66:2b:9d:
9f:d5:42:ee:2f:29:04:c6:68:15:cd:5c:b8:bc:e0:
ea:d5:a1:85:7d:47:e9:a0:18:2c:1d:06:7f:8d:16:
4c:2d:3f:03:04:7f:c7:53:5a:37:5f:fd:fd:de:d3:
71:c0:38:3d:61:36:ff:13:b2:ba:8c:b5:ce:b5:59:
c6:1e:07:26:d5:37:20:eb:ee:a5:d6:c4:67:c4:93:
68:d2:d7:62:0f:98:82:c9:d6:5e:c5:f3:17:c1:13:
7d:ab:50:04:a5:e8:5d:de:2b:45:f6:73:cf:cd:ce:
23:cc:cd:8b:f4:8f:ac:bc:cf:14:0d:c3:a2:9b:f5:
95:ae:e4:7d:52:28:84:15:61:84:24:72:49:79:9e:
e8:37:d4:15:04:dd:5d:33:fb:b9:34:58:98:cb:b3:
c4:79:9a:46:4d:18:5b:4d:d0:ed:94:e0:80:1d:e0:
b6:34:68:08:5b:07:7d:0d:7d:2d:83:b2:79:cb:68:
b4:07:c9:20:63:aa:06:6d:d1:4b:4a:a7:16:3a:34:
39:81:ed:82:86:58:57:c4:69:21:98:8a:d6:89:6d:
b4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:C4:75:53:3D:05:B5:B9:C5:EB:1D:6D:0A:3D:C6:79:2B:8D:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl
X509v3 Authority Key Identifier:
keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:ae:5e:08:34:c5:20:48:fc:ec:89:cb:71:eb:bb:bc:fa:76:
7d:3b:07:ed:4f:df:11:7e:92:35:92:54:b3:7f:19:da:ce:3a:
7c:3a:18:8d:cb:4c:84:3d:b7:b0:ab:f3:03:ea:b4:b5:27:46:
f3:ef:c5:a6:93:22:db:db:24:5b:c9:e7:22:4d:8c:68:09:c6:
7e:6c:ab:b5:95:12:2a:a5:78:a4:54:6e:a1:04:6d:07:4b:85:
e2:90:2a:2e:6a:30:a6:f3:c8:8d:18:e2:4b:28:9a:e4:15:8a:
8d:ce:dc:95:3a:6a:b4:91:25:c0:71:ed:70:1f:c0:cb:be:27:
e3:35:3e:01:6c:a4:c6:43:db:50:2f:14:92:99:43:8b:2a:87:
e9:67:1b:56:22:41:6c:78:f3:e7:8b:83:f8:32:b6:71:c0:69:
41:36:f7:79:9c:a4:7c:98:0a:c1:91:69:7e:01:fb:93:b3:2c:
6f:63:d9:24:99:1d:eb:34:84:9b:46:87:17:8d:64:be:18:89:
07:55:0e:71:1d:11:c6:9e:83:87:65:5c:fa:a9:de:09:ee:c8:
01:ab:91:e1:66:d5:4a:83:c8:f6:65:bc:b6:fd:61:75:4a:cc:
6f:c5:89:6d:13:62:f0:90:18:ee:ae:43:a8:b9:c8:67:c5:ab:
c6:f2:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:28 2025 by rpki-client