Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d21c904-c2f6-375e-bdf1-5323573a0f60.roa
File: 0d21c904-c2f6-375e-bdf1-5323573a0f60.roa (raw, json)
Hash identifier: 3AAFG8GShIlvQ1onwlA29vI5Tyl3hJ/T3LXgr2WT1eQ=
Subject key identifier: 3A:92:A1:94:5E:C6:FD:64:AF:86:85:08:C5:77:27:E5:BD:7E:5B:4B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB6B426415B9A144396900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d21c904-c2f6-375e-bdf1-5323573a0f60.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.57.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:6b:42:64:15:b9:a1:44:39:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=fe0ca70d-b2e2-48ff-8dc0-79c6d44c94b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:7e:83:70:83:7c:57:df:21:40:ed:e6:e2:
dd:17:73:17:0f:be:8c:85:01:1d:ed:1c:5f:7f:b8:
47:ea:e2:30:37:8d:4c:7d:ae:1e:22:b0:06:b1:0a:
a0:64:b7:b9:4e:fe:08:4d:9b:b3:90:b2:52:f4:c7:
b4:cb:f2:d8:35:f0:ce:8e:7c:e9:f8:5b:da:f0:79:
b4:e6:66:fd:1a:e1:a3:9a:73:49:6d:bf:1a:05:d2:
9e:9e:32:70:49:96:47:e6:42:08:14:d8:d8:eb:c9:
c1:c9:6c:ff:5e:64:02:87:64:eb:df:6b:ec:5e:2a:
3a:50:0e:e9:b3:e3:a7:27:df:f5:75:13:22:6f:dd:
c8:59:5f:56:76:91:d5:06:a8:f8:9d:c5:f5:ac:6d:
c4:17:a0:cb:89:b6:1b:3c:1f:c8:0f:12:59:6c:ff:
9e:2d:69:72:1d:8f:6c:90:0c:20:4c:4d:2e:81:df:
81:ce:54:df:26:ea:1a:58:41:c4:9c:8d:c2:d6:84:
d0:7a:38:53:cd:04:41:63:f6:89:b4:5f:3c:31:7e:
17:fe:90:e1:ef:37:3c:3e:b4:12:4e:df:54:79:18:
08:77:c3:0a:61:85:e0:70:73:47:ec:c8:8a:e1:36:
ef:5f:9f:3c:8b:20:02:ee:6c:bd:53:6d:08:fd:03:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:A1:94:5E:C6:FD:64:AF:86:85:08:C5:77:27:E5:BD:7E:5B:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d21c904-c2f6-375e-bdf1-5323573a0f60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.57.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e5:63:6a:e1:17:54:8e:80:91:89:91:65:bd:85:d6:54:80:
8e:bd:86:a8:92:7b:3e:34:32:29:96:1f:c9:79:86:ee:6f:13:
e0:00:95:fe:72:53:74:e3:d6:d6:02:ec:14:c6:50:b3:54:03:
c2:51:a3:7f:93:81:c6:9f:cb:b1:87:1f:70:ea:90:ce:2c:35:
da:00:05:5e:e0:00:37:1f:15:64:b9:55:20:d6:d5:1e:86:58:
d0:1e:4e:4d:dc:c7:1f:0e:6d:c9:a2:8a:2f:c7:51:28:09:2d:
7c:be:df:33:91:46:99:99:af:b3:69:b0:5c:f1:7a:92:4a:98:
b3:40:8c:85:fe:57:8c:ff:86:7f:92:9b:50:15:b0:1b:b6:4d:
17:d5:ab:93:db:31:fa:85:9f:c4:1d:7c:35:10:69:64:6d:2d:
0c:00:f8:16:36:10:21:6a:8f:70:41:15:95:6a:62:22:47:c6:
7b:55:e4:11:ef:d2:c5:28:20:4f:f0:bb:b1:c4:57:86:49:d0:
65:0d:42:b0:30:03:3b:7a:9f:59:cd:dc:65:4a:ad:5d:14:d8:
77:91:51:f4:20:c3:b4:b2:50:49:d0:21:a3:05:4f:1d:0f:70:
97:13:d4:5a:61:3c:06:d5:23:02:e4:09:7f:32:4b:8e:af:85:
1a:bf:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:20 2025 by rpki-client