Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07e43f60-e09f-3846-9c8c-8811867bd646.roa
File: 07e43f60-e09f-3846-9c8c-8811867bd646.roa (raw, json)
Hash identifier: +JOeuXJXdkTp65oUFAM1AxY7BHLrMtxwgeS3K+v5hiA=
Subject key identifier: BB:FB:AE:B6:9C:37:A2:30:56:75:10:00:CF:E3:C8:96:DC:52:36:B5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C729006D21DE8DCE4A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07e43f60-e09f-3846-9c8c-8811867bd646.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.195.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c7:29:00:6d:21:de:8d:ce:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=85e35fcb-7827-4cf0-b489-9a9ef6fe240f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:33:d7:06:43:8d:58:0d:18:74:3d:83:26:
c9:1a:59:46:e3:21:13:cf:0c:03:a6:1d:35:2a:a4:
83:fd:dc:2b:df:ad:70:dc:fb:06:98:be:32:45:d6:
aa:43:34:6b:d7:d5:b7:51:57:55:91:0f:de:cd:78:
9a:c8:a5:6e:a7:33:97:a4:42:2c:4e:52:d4:d2:02:
0d:a1:25:cd:01:41:77:c8:f8:2d:06:cb:b0:4e:33:
1c:45:98:0a:c1:57:77:33:f8:7c:a5:55:4f:c3:b0:
8a:22:5b:04:13:9a:09:62:cf:e3:b0:71:40:2d:59:
44:e8:c4:73:d5:79:47:44:3e:22:ef:51:a4:82:e6:
4e:74:59:36:44:7e:d9:76:cd:c4:c1:42:7e:01:e2:
1f:63:ce:e2:aa:88:e5:43:28:1a:af:77:9c:41:07:
14:68:b8:64:62:07:58:54:f6:3e:e8:8e:d0:72:1c:
4a:6e:e5:9e:74:f1:d5:e2:c4:28:8b:3c:60:50:9a:
65:01:ec:cf:25:80:2c:07:61:5d:e2:3e:97:b1:10:
7f:1d:3d:3b:23:60:4e:fe:9a:48:0f:38:4a:dd:0e:
40:c1:ce:50:c9:4c:b5:27:aa:4b:1d:9c:f7:45:1c:
96:8e:db:22:ed:16:e9:d0:2b:52:7f:bf:14:c3:2b:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FB:AE:B6:9C:37:A2:30:56:75:10:00:CF:E3:C8:96:DC:52:36:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07e43f60-e09f-3846-9c8c-8811867bd646.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.195.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:f1:ba:02:69:4d:be:aa:21:c9:ea:a8:63:25:1b:f2:fe:c1:
c8:a9:a3:27:0f:a1:fe:d7:ad:f8:a1:11:06:a0:61:14:0a:e4:
d0:e1:b7:8a:5a:a9:34:62:dd:44:20:5c:ac:25:09:3c:4c:2a:
50:66:9c:f7:74:0a:7d:df:fd:85:47:c0:db:68:14:10:d4:42:
bb:73:ce:18:9e:07:ad:f7:49:f1:6d:de:5e:d7:7e:4a:13:95:
b1:5b:ed:45:a8:cd:d7:3d:7e:7e:28:4a:a3:40:12:00:31:cc:
7a:0c:2b:37:02:0a:14:9f:75:2e:49:2f:39:4d:20:fc:a2:63:
71:13:c3:34:91:96:cc:67:92:c8:d8:64:d8:d1:67:22:28:15:
dc:98:ee:78:77:ff:cc:17:fc:50:0c:13:14:9f:e6:26:cb:43:
1f:1c:a9:d8:11:a7:1c:dd:cc:91:ab:32:85:b9:ff:d3:c3:4f:
74:f7:5d:07:55:05:a3:99:01:6d:a5:5f:ef:c0:32:dd:43:d0:
c9:2c:30:0c:7c:0f:40:67:cf:90:aa:6b:f6:14:5f:24:8f:44:
73:ea:1f:35:8b:9e:8e:03:ca:45:05:19:a6:f6:5b:4e:07:e6:
bf:78:8c:5d:24:12:3f:c1:1f:1b:fe:b3:37:21:d0:e6:7b:f4:
3d:d8:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:39 2025 by rpki-client