Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e44960-5e03-3089-998e-5143fbfdcd69.roa
File: 27e44960-5e03-3089-998e-5143fbfdcd69.roa (raw, json)
Hash identifier: ZQnf13zptntjd7iz/eEg8HCA1j9AYsbE/6N9v/c8WaE=
Subject key identifier: 3F:3B:EE:29:1C:BB:0B:39:2F:1A:AE:17:1F:EB:95:59:02:48:75:04
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848CC7BA9406AA08A22C1626E9F
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e44960-5e03-3089-998e-5143fbfdcd69.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.220.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:a9:40:6a:a0:8a:22:c1:62:6e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=7210a2c6-f50a-4a37-a30a-d7c50573cde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:be:47:8f:09:e6:e3:e8:35:d2:37:04:4c:6a:
4e:e7:85:a0:a0:c9:83:66:31:31:12:3c:9a:87:40:
2b:6b:98:bd:eb:f5:bc:d0:93:92:78:ae:90:2b:93:
59:7c:73:72:e2:3d:bb:f0:ba:b6:32:9e:ea:9d:64:
03:ec:64:a4:75:ad:57:15:eb:ec:41:1c:42:f6:65:
3a:89:04:e9:af:33:15:9d:4b:2e:2e:dd:72:bc:84:
4e:8d:f9:b0:70:d7:fc:7b:bb:19:e3:46:f5:44:29:
a1:f3:0b:b5:80:d8:53:97:fb:3e:98:48:38:db:49:
b9:ff:63:5d:b6:72:5d:41:fa:5c:c3:e6:e7:7a:69:
4e:3d:21:bd:4e:44:fc:06:88:5e:94:92:d7:44:17:
41:24:11:f0:84:c9:7e:be:df:ea:36:69:15:54:ea:
7b:be:e0:61:1f:8e:36:1a:7a:d8:4e:69:32:cc:51:
2e:7d:58:ae:6c:2d:82:01:d9:75:f0:02:86:94:f3:
13:92:19:a2:f5:b8:87:b8:c4:e8:2e:92:e6:ba:53:
1f:a5:02:b6:fe:ab:8e:2a:27:15:38:22:14:f0:b4:
ad:e0:5b:29:16:cd:bb:80:e4:e9:c0:36:25:62:28:
8f:fc:00:05:ec:f7:4e:27:a2:dd:c6:91:0c:e3:ae:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3B:EE:29:1C:BB:0B:39:2F:1A:AE:17:1F:EB:95:59:02:48:75:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e44960-5e03-3089-998e-5143fbfdcd69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.220.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:d9:d2:2a:93:c0:bc:13:4c:ec:b0:c4:f5:68:2c:f0:5d:b7:
47:55:12:06:cd:ff:0d:62:dd:76:b8:e1:cf:34:31:81:f9:47:
db:2d:a2:2d:9e:79:f3:6b:8e:55:82:09:98:25:2c:e0:b2:5c:
5a:fb:f7:f7:61:7b:94:96:78:51:bf:82:e2:71:0a:98:5f:f4:
44:45:02:80:0a:47:15:b0:bc:01:c0:01:6c:fc:fe:c5:97:83:
73:fd:75:e0:4c:b1:8a:c6:bc:14:fa:ed:41:11:cf:fe:9e:3b:
d9:3f:34:3b:96:ec:fc:01:79:4b:ec:fa:75:c2:23:21:b9:ce:
1e:d0:55:16:3c:14:0a:7e:79:55:a5:a0:4b:62:0d:fa:c4:71:
d2:42:f7:69:7d:d7:5b:9d:c5:30:29:d9:75:6d:bb:aa:26:92:
23:e0:97:f0:02:cd:02:d8:19:57:af:80:48:10:f2:84:68:43:
8b:bc:19:12:c6:83:7c:53:ac:d9:6e:0d:6c:6d:c3:93:05:2e:
04:a0:02:17:92:d4:d6:76:c8:64:3d:d6:63:76:29:8d:cf:8d:
d5:8e:1e:46:b0:50:a7:50:aa:44:07:7a:6a:95:ed:4a:92:c5:
14:ef:f4:51:3b:75:15:b4:34:27:14:98:0e:a3:60:94:d0:35:
85:62:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:29 2025 by rpki-client