Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23f078e4-3b8f-381d-ab97-c1aaa9684e1a.roa
File: 23f078e4-3b8f-381d-ab97-c1aaa9684e1a.roa (raw, json)
Hash identifier: 1KtRK7Wzcg1K6Omh9VgzkEVOHsBztmiZRmbhU/cel1o=
Subject key identifier: C3:DA:55:63:C3:96:06:93:CA:29:9C:BD:18:D0:1B:CC:FD:13:18:5A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB8B5ABCD177E371765878
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23f078e4-3b8f-381d-ab97-c1aaa9684e1a.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.210.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:8b:5a:bc:d1:77:e3:71:76:58:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=be8ebda3-90dc-4785-959f-ca49a0ddae68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:58:84:2f:63:79:0a:f5:16:30:4a:e0:6a:
b5:0b:0f:87:8b:8b:19:77:f6:9d:4a:c3:8c:0e:b5:
37:a6:8f:b1:39:cd:99:2a:28:99:11:9a:00:35:4a:
60:e1:44:c2:54:da:81:49:13:c7:1e:fc:76:d7:1b:
5d:51:1e:64:60:6a:1f:c1:80:00:da:92:2b:20:30:
c7:b2:99:fd:f4:44:7e:5c:7b:7c:eb:bd:82:ae:26:
6e:a9:46:5d:0e:a4:1e:25:32:3a:f2:53:4d:1a:c7:
1b:5f:29:45:5a:90:a0:44:0b:28:e7:bc:f5:5f:87:
be:cc:d4:7c:51:9b:04:33:89:e6:da:54:81:8c:37:
0b:08:54:5e:df:11:7c:f5:5f:c1:77:7c:b5:01:c0:
45:a6:7d:3c:59:4c:6a:fe:14:9f:7d:6a:fd:b1:9a:
cc:ad:ab:8c:38:f5:6e:cc:e7:c6:98:b7:f0:5a:be:
48:16:67:ab:f6:f7:30:ad:b6:65:36:5d:4d:d1:b2:
58:4f:b5:ac:42:68:d9:40:40:d1:d0:42:e6:1a:8d:
01:8d:f2:bf:72:8c:20:c1:ee:fe:d6:df:0c:17:42:
44:cd:42:ed:2f:64:de:33:36:80:4b:0e:66:48:23:
0f:c9:37:c0:a9:1d:a9:86:60:b5:6f:cf:68:dc:1b:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:55:63:C3:96:06:93:CA:29:9C:BD:18:D0:1B:CC:FD:13:18:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23f078e4-3b8f-381d-ab97-c1aaa9684e1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.210.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:cb:91:3d:4d:c1:9d:fc:75:57:a6:49:44:af:b5:92:f1:ed:
ec:f7:e3:0c:95:d8:83:7f:be:bb:84:fc:da:1b:aa:10:64:4f:
60:2e:62:4e:28:38:20:93:88:75:75:09:21:36:4c:00:d2:de:
53:51:78:b9:46:27:65:78:a8:9d:83:3a:a7:fb:18:f1:b0:76:
a9:9b:97:eb:7f:d3:cd:76:7d:10:8e:e3:84:d6:33:02:40:bd:
58:21:51:2e:e0:20:18:2d:1e:9a:a5:18:b7:75:c8:ef:a6:b9:
cc:e6:df:0c:75:c0:9d:c3:06:87:40:5c:61:5f:38:8a:f8:e3:
4f:67:ed:66:ce:eb:c1:16:72:c9:fb:c5:7e:20:bd:a2:cc:22:
d0:1e:b8:76:3e:a8:94:3e:a0:c6:bb:8c:69:b1:bb:6b:43:9c:
8d:4a:0a:72:8b:7c:28:18:45:34:eb:7c:a8:be:b7:a4:d6:7f:
44:7c:26:1d:96:91:f2:6d:a0:45:43:0f:a7:a8:71:bb:58:e5:
69:53:64:72:79:87:3b:ee:21:77:ef:14:27:2d:e5:22:6b:5e:
8d:ca:b2:90:b9:2f:80:38:37:c2:35:9f:95:df:a5:a1:b4:aa:
d1:eb:da:14:39:4b:a0:55:fe:a2:c3:f8:40:24:18:33:5b:2d:
a0:91:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:17 2025 by rpki-client