Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023d9560-25ce-3d8b-bbae-05297072b9ad.roa
File: 023d9560-25ce-3d8b-bbae-05297072b9ad.roa (raw, json)
Hash identifier: axZNYFdUnJZIF9EZ5X85p7zPuooI6euPAPwAO/WrAUc=
Subject key identifier: 9D:6D:9B:FB:4E:0D:38:D5:7E:2C:1A:20:F0:CF:C7:19:24:A5:57:C6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A9966867794E6A4F63B47C88
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023d9560-25ce-3d8b-bbae-05297072b9ad.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.202.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:68:67:79:4e:6a:4f:63:b4:7c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=cf6f327e-4ad6-4e35-b176-f325076d9b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:57:fe:b0:5c:fe:33:a3:09:c1:51:41:83:70:
32:7d:f9:70:85:8e:66:4d:7f:97:98:fc:71:93:d2:
4c:f4:3c:56:f0:40:9a:38:61:7b:d1:21:f5:46:f7:
22:c1:1a:da:9c:f0:61:21:24:5b:b5:b3:7c:0f:0b:
02:14:ba:4c:f1:23:66:ce:db:02:47:9f:c4:15:64:
48:70:c4:c4:4a:21:66:3f:2e:ea:ad:27:4d:b4:33:
57:1d:f6:91:7f:43:6c:1f:a2:d5:20:b5:32:54:21:
07:a0:82:d8:42:17:7a:d6:3e:f9:27:78:9b:e4:e9:
a7:e9:69:f5:f7:c8:18:9f:77:4c:a9:0b:9e:33:39:
cf:a2:15:5c:c2:3d:b8:e6:44:be:c1:03:65:e0:e8:
72:59:90:3a:1e:8f:cf:63:da:aa:72:f5:bd:ca:14:
a3:79:2a:80:00:90:fa:53:7a:57:18:24:c5:cb:32:
3c:6e:d4:bb:93:0d:0f:6b:64:f4:a7:9c:5d:5a:e2:
79:95:ec:21:60:51:e0:8b:90:98:3f:82:69:49:61:
6b:e7:67:3c:25:cf:52:58:cb:dd:ef:72:a6:45:15:
36:41:a0:07:22:3d:f7:cc:52:7c:93:9f:d8:71:eb:
8d:32:e0:41:e6:4e:ad:24:8a:9f:a6:65:33:6e:aa:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6D:9B:FB:4E:0D:38:D5:7E:2C:1A:20:F0:CF:C7:19:24:A5:57:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/023d9560-25ce-3d8b-bbae-05297072b9ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.202.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:97:07:fe:47:1a:26:e2:84:cc:9d:57:7a:ac:6d:79:ff:b1:
10:6d:d4:f6:cb:a9:9e:c0:33:b1:1c:29:9c:d5:e2:47:b5:c4:
cd:f9:1f:64:c2:d3:20:c4:c0:bd:cc:00:c2:ce:5e:c6:b2:29:
8b:f5:5c:7f:e4:6f:54:98:e5:f5:e5:96:5d:04:cb:1b:7c:ae:
cc:27:bf:cf:6c:22:ad:99:4e:7b:b6:0d:bc:40:87:0f:89:78:
e3:7b:49:47:2e:89:9d:8e:87:1b:a9:34:ba:e9:19:90:5d:07:
39:d8:ff:52:09:c1:31:92:12:37:8a:8b:a3:b0:08:28:d8:3d:
7a:13:1c:90:a0:ed:07:7d:e9:f0:ad:18:2b:41:ae:f6:23:89:
21:11:11:d4:fa:a9:f6:c1:26:47:ff:d5:18:5c:70:48:59:8b:
42:3e:de:be:91:e1:55:dc:0a:5e:1a:07:09:5d:b1:59:62:c5:
89:c7:f9:40:a5:fc:fd:3e:0a:a1:ec:bf:91:93:e9:db:7d:25:
bb:75:21:b0:a6:ec:04:56:1e:30:ca:86:41:85:22:9c:3a:a5:
f4:61:c6:19:3f:a9:d6:69:8e:e1:8f:63:f9:5d:b6:29:bf:07:
38:ee:d5:f4:8f:9e:46:31:23:08:7a:9c:68:31:9e:94:63:6e:
0e:5b:2d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:58 2025 by rpki-client