Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e30db5-9ccd-3dcb-b99b-27d893e3a1b4.roa
File: 23e30db5-9ccd-3dcb-b99b-27d893e3a1b4.roa (raw, json)
Hash identifier: zfVL0sg0/gRLXVHdFI/2iOlJR2zGY8aHKq0nUy/6mOc=
Subject key identifier: 03:A1:E4:D9:A5:69:AD:3C:54:0A:63:A6:E4:9F:2E:15:6B:93:01:AB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A20912F2F08A1FE49075F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e30db5-9ccd-3dcb-b99b-27d893e3a1b4.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.37.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:91:2f:2f:08:a1:fe:49:07:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=bc3b26bf-741a-409a-b949-2236c9e8f998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:3f:de:44:09:96:86:a2:bf:7b:35:23:47:
eb:4c:4d:25:71:2c:13:50:8c:42:e2:50:8f:6a:ce:
a5:9f:4a:c0:f1:e3:57:55:87:13:1a:a8:34:22:f9:
78:74:f1:bc:4d:93:4e:be:1d:84:4b:ac:44:67:66:
0b:a3:ce:4f:7e:91:7a:3f:5b:51:99:35:cf:ce:37:
c9:db:c3:c9:b0:49:d4:e9:bd:55:fc:cd:07:e4:81:
26:c2:ff:29:e8:17:b5:52:5d:4d:a0:60:3a:38:80:
89:6f:80:6c:90:b3:e5:c3:b2:e9:62:a2:9c:88:2c:
cb:be:7b:fb:12:cb:66:78:01:dc:58:f2:4b:06:02:
9f:3b:09:25:e0:e4:74:a7:f7:dc:98:60:d5:4c:4d:
b0:d3:6e:b5:44:68:ef:25:be:d9:c9:73:77:32:53:
ec:f3:f6:f9:85:14:d9:52:e0:61:57:6a:60:1a:9c:
cf:c8:12:1b:ea:a6:c2:ab:88:67:f8:0d:f2:b2:91:
8a:0a:c1:b4:a9:c2:66:c3:07:2d:69:a0:8b:7d:f7:
79:1c:d4:27:7f:38:ca:3e:3b:82:c2:65:dc:6a:9a:
08:dd:1a:7c:5a:99:21:d3:92:6f:ff:d5:0c:2a:77:
7e:30:b6:b8:97:82:27:3a:ed:ad:5f:06:60:0e:c4:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A1:E4:D9:A5:69:AD:3C:54:0A:63:A6:E4:9F:2E:15:6B:93:01:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23e30db5-9ccd-3dcb-b99b-27d893e3a1b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.37.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:fb:96:24:c2:dc:eb:11:c3:04:87:76:af:65:97:35:89:8a:
8f:dc:8a:12:6d:35:53:a0:02:83:11:c9:85:d9:bd:bd:0f:2a:
e3:9b:d3:a7:e2:49:00:05:71:51:57:ba:3d:d7:5a:57:87:a3:
c3:62:ee:de:8a:50:2f:ee:13:41:f6:eb:d6:e0:e8:2b:1b:c2:
0d:b9:dc:37:89:05:25:94:d4:ec:b1:18:5b:56:91:70:20:00:
f4:40:4e:c6:30:05:eb:d6:a6:29:90:6a:ba:42:6d:b6:a4:3d:
e2:a7:74:de:a7:bd:e1:88:52:02:30:57:55:ad:41:bb:3d:1a:
0b:9a:51:78:a7:1c:19:28:86:da:de:a8:7a:21:7c:4e:62:86:
a9:81:e0:25:ee:bf:7d:e1:ec:4a:80:c4:84:ed:84:1b:a1:f5:
18:18:06:b8:88:9d:cd:f3:d9:9b:8f:12:c4:ee:ef:19:a9:2e:
14:b5:85:4c:c4:cf:a0:87:e0:87:1c:96:96:86:c1:2e:ca:b7:
2b:06:0e:ad:52:cd:cb:bc:54:22:46:b9:12:25:c3:15:ce:5d:
18:d9:cc:80:83:45:90:ed:6e:1d:8c:72:25:9a:c4:fb:73:97:
53:38:6f:91:5d:32:f7:9b:d6:cd:34:b5:82:e2:1d:bb:b2:f7:
f0:e4:8b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:06 2025 by rpki-client