Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/297f84e9-d87b-3178-b65e-fe895f016b9f.roa
File: 297f84e9-d87b-3178-b65e-fe895f016b9f.roa (raw, json)
Hash identifier: taHxuzem1XNZAamJW3gtN3zc2apd0RuWusH81SJw/VY=
Subject key identifier: F2:DD:45:60:D2:DE:FE:5F:9B:9E:E2:F6:0E:19:5C:73:7B:EA:48:5A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400C828518A88B2E79EC840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/297f84e9-d87b-3178-b65e-fe895f016b9f.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.195.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c8:28:51:8a:88:b2:e7:9e:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=489636d2-3e6f-4d7d-8614-81ac6de41a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:90:2d:b9:b9:2a:af:95:98:df:9d:56:b0:
f1:f3:34:79:03:ec:a4:07:4e:86:13:ed:77:f2:d4:
89:7c:65:13:ae:1d:56:09:02:8a:e8:59:a8:4d:bf:
5f:55:50:c7:35:91:b9:78:f9:a4:09:6b:d7:08:6a:
09:92:f0:14:8d:70:eb:f4:6d:41:d0:78:b1:9c:a2:
ca:f3:b2:92:c6:9a:20:5b:97:f1:44:df:c0:38:17:
1d:52:e3:07:af:26:89:09:ba:5e:f6:60:65:2a:07:
19:0b:ee:a2:3d:af:a3:7e:bb:4b:84:d2:d8:e7:f3:
c8:25:93:4c:c4:56:49:1a:d5:81:de:b8:19:0c:a7:
07:14:c0:5d:aa:71:b2:6e:8d:72:ba:b6:92:fa:12:
1a:98:a9:83:36:6c:9d:f2:05:4e:ed:cb:d1:50:41:
61:e7:d5:5c:3c:6b:97:d4:9e:a7:70:24:b8:f5:2a:
a4:da:c6:ee:7b:af:47:ab:4e:0f:d1:6a:40:9c:30:
98:29:cb:a4:ae:9e:a6:10:4d:43:c2:ce:62:94:ca:
8d:c2:ad:0f:4f:05:1f:09:38:77:64:ee:58:ba:6e:
b1:a9:b4:a8:59:80:85:50:c9:62:9b:fd:bd:f7:59:
e1:55:07:a4:21:a1:8e:69:55:40:e6:81:35:53:28:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DD:45:60:D2:DE:FE:5F:9B:9E:E2:F6:0E:19:5C:73:7B:EA:48:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/297f84e9-d87b-3178-b65e-fe895f016b9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.195.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:3b:e7:1c:1b:a6:1a:ad:c6:c3:b9:6f:50:5b:fe:a3:a6:b3:
bf:a4:f6:f5:d7:99:55:a9:0e:b1:26:7d:25:b1:b5:bf:27:c8:
7c:63:95:3c:d4:b2:84:8c:cb:e8:b1:c2:dd:dc:31:10:ad:d6:
aa:91:fa:4e:e4:3c:bb:b2:ae:b6:2c:a5:c8:d0:67:29:bb:8b:
eb:e8:3a:3f:32:f0:9a:d9:4d:34:74:6e:7e:5c:f4:97:0d:d3:
47:b3:6a:a4:ba:41:ce:b5:1e:7f:d0:26:68:1f:eb:4b:2c:ec:
f0:90:4b:7b:30:bc:25:17:6c:06:a2:1c:45:da:e2:d8:3e:7a:
51:4b:23:a0:2c:52:88:72:b5:05:51:c6:db:93:b4:2d:75:02:
d6:65:40:29:c8:a9:07:59:7f:56:de:b0:60:17:6d:f6:61:07:
d6:a1:ff:77:9f:95:47:df:57:1f:52:8a:1b:cc:b7:f4:37:8d:
a2:ab:11:1f:12:77:b9:da:95:e3:8b:3b:3c:c2:31:3b:a7:c5:
e1:9e:2b:44:4b:f3:29:02:c1:1b:88:a5:35:54:ed:1a:77:49:
63:bc:34:cf:25:54:52:52:2c:bf:87:f9:dc:4e:49:a5:ff:8b:
59:6c:ab:94:89:8f:ec:0b:e3:c9:1b:85:58:0f:18:0d:03:3b:
fd:69:aa:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:30 2025 by rpki-client