Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00c209a9-39f3-39f7-8e6a-e9c7806e4e32.roa
File: 00c209a9-39f3-39f7-8e6a-e9c7806e4e32.roa (raw, json)
Hash identifier: vENc8nm64NekkvinTfb6MhRlmxjYTD5apxGpFGiSSmE=
Subject key identifier: 91:4B:09:8D:4E:9D:BC:2C:0B:9E:31:E5:61:DF:AA:DF:D2:D3:3B:3C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A996690C50520A42B9FC1800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00c209a9-39f3-39f7-8e6a-e9c7806e4e32.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.203.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:69:0c:50:52:0a:42:b9:fc:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=ac4c3ce3-3bf4-4996-9b3f-07b39037a8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:8e:e3:89:6d:21:0b:86:b3:84:b3:72:8d:
eb:b8:71:35:1b:4e:5b:19:73:f3:fd:fc:1a:80:39:
76:f6:e4:ba:3c:cd:28:ec:30:12:95:98:25:e2:3f:
57:de:16:d7:e9:1c:01:85:3b:19:b3:aa:d0:e3:53:
f3:c2:d5:d4:eb:16:73:65:39:6e:6c:cf:c7:3a:12:
e9:3d:9a:6d:e2:96:9f:96:69:df:f9:5f:61:56:0b:
5a:26:53:8f:fe:b0:e1:b7:5a:e3:24:53:96:af:62:
31:31:35:7a:d7:a2:f7:ab:50:b1:7d:6c:08:1c:fc:
f8:58:69:d8:f5:18:05:89:08:1d:f8:21:af:8c:a5:
29:af:c3:2a:60:5c:7e:49:5a:11:3e:9b:75:38:0c:
13:fd:00:ce:36:cb:39:af:88:d6:d1:49:46:2f:1e:
e1:7f:5a:23:02:1a:59:dd:de:91:29:78:7b:bf:0f:
31:44:c3:39:85:af:62:5c:f2:dd:23:cc:6e:5f:15:
35:9b:d3:fd:45:8b:a8:e6:82:48:c5:d3:e8:71:e1:
18:57:d2:f9:7e:22:0c:8d:be:f9:96:4b:69:9f:f9:
c2:63:c1:e9:85:fd:2b:c2:6f:1b:60:42:f2:36:bb:
2f:1f:f8:62:a7:67:e7:4d:e1:82:5d:cd:89:65:20:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4B:09:8D:4E:9D:BC:2C:0B:9E:31:E5:61:DF:AA:DF:D2:D3:3B:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/00c209a9-39f3-39f7-8e6a-e9c7806e4e32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.55.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:6a:44:c9:d9:00:c2:bd:a7:cd:7d:0a:fa:cc:9b:b6:1f:36:
8e:4f:8b:87:ee:cf:aa:2f:3c:4c:22:a3:ce:5b:fd:b8:a7:88:
e7:f7:17:2c:43:e7:8e:d1:0b:e9:f9:43:82:84:a9:b4:f8:d8:
0a:9c:d6:9d:12:d4:83:80:8b:f6:1c:42:3b:d0:4f:4b:a2:ec:
d1:b1:06:5f:1b:dc:f4:87:d4:b4:d5:49:79:8e:3a:82:20:9e:
fb:02:fc:ec:d5:30:ef:7c:17:e8:88:42:aa:0b:4d:35:fd:5d:
76:51:c6:4e:3e:da:8a:aa:84:b3:e7:2e:21:e4:d9:74:9a:67:
84:72:7f:d5:13:5c:a4:fc:3b:87:d6:07:9e:e4:61:a5:27:d1:
c7:f6:e3:71:ad:18:8b:f3:4e:8f:d4:93:bb:f9:5c:62:98:6a:
cb:b0:0b:02:70:a1:7f:b4:e4:d7:67:b5:db:bd:08:f2:75:23:
ce:b2:0e:7b:d2:d0:0a:1a:42:d4:94:63:9b:75:78:5f:a0:2b:
c1:2c:5e:37:b8:38:33:c8:39:33:b4:a7:5a:30:3b:71:e3:bf:
b5:7b:6d:92:a2:a9:2a:94:22:da:f1:44:7d:87:9a:f1:4a:12:
53:fb:53:f7:60:60:31:72:bd:16:2d:7d:cd:e6:13:d6:f1:79:
ba:3e:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:38 2025 by rpki-client