Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3145a232-20ec-30ef-8cbc-bb2f109c3425.roa
File: 3145a232-20ec-30ef-8cbc-bb2f109c3425.roa (raw, json)
Hash identifier: aSg6w7OGHlliPXpd/smXaq89aJGV09tndlANpGGeKHE=
Subject key identifier: E4:52:A6:A6:92:EC:95:6E:7A:79:95:27:1B:B2:FE:D3:39:7E:63:5D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584900215B38B70C68ADE02C6B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3145a232-20ec-30ef-8cbc-bb2f109c3425.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 35994
IP address blocks: 23.217.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:5b:38:b7:0c:68:ad:e0:2c:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=bba13d6e-55dc-4c04-895c-501a1b80aace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:e0:0f:b3:ba:04:85:de:f2:37:ae:38:74:
58:2a:47:ba:c1:3f:ee:47:86:be:1b:c5:1c:75:1f:
fe:fc:56:d8:da:62:d6:19:82:19:bd:af:81:18:5b:
09:2f:2b:95:25:bd:14:b0:d2:64:75:d1:64:31:fe:
4c:31:56:13:66:12:98:aa:9f:a3:61:81:38:ac:1c:
5e:e3:f4:b1:dc:bf:e0:82:11:d8:22:e3:74:18:17:
97:58:73:b2:a4:a8:42:17:70:f0:10:76:09:9d:eb:
c2:8e:22:72:28:22:30:3b:c1:85:21:4d:d7:47:b5:
b5:17:6b:c9:2a:db:9a:7e:ee:93:31:20:7f:ba:78:
07:0e:0e:cc:0e:8c:79:ce:71:35:b8:b7:31:15:8f:
2d:2d:b7:03:f0:1f:24:84:44:9a:98:43:bc:30:3d:
ea:b7:a9:88:b5:5f:ca:aa:e2:73:c3:d4:24:6a:db:
83:db:fb:09:85:41:02:31:55:c5:32:72:66:7b:f8:
63:ca:72:73:e3:3b:60:87:39:37:2e:ab:d9:39:7b:
8f:fe:dd:c6:19:c0:54:d3:e4:5b:bf:65:22:08:af:
e6:17:c4:15:9a:f6:88:67:96:0f:46:88:db:10:15:
3d:b1:64:55:c9:3b:cd:44:2a:69:de:81:a5:50:75:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:A6:A6:92:EC:95:6E:7A:79:95:27:1B:B2:FE:D3:39:7E:63:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3145a232-20ec-30ef-8cbc-bb2f109c3425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:f5:9c:b1:48:df:63:c8:7b:0a:5d:82:7d:e0:5f:25:a5:2b:
59:60:37:b9:cd:ee:29:f9:4d:ef:12:bd:39:a4:30:14:c8:cb:
6c:ba:6a:3d:cd:d2:f4:3c:b3:40:3e:c0:08:12:1c:36:74:dc:
21:56:fd:32:e2:f5:4d:ec:60:8d:20:37:ff:80:58:48:42:56:
44:d7:49:ab:cb:d7:af:ff:f4:b9:42:7f:90:ad:51:46:7b:ff:
0a:c1:a4:fe:5b:22:91:b3:e2:3d:08:09:9d:65:84:20:c8:bd:
d1:79:9c:ed:da:0d:16:95:8a:0c:66:c9:77:07:1b:4d:68:67:
b3:fe:de:2b:17:20:5d:55:92:68:43:47:3b:84:44:f8:a5:e6:
88:fd:e3:4c:ac:97:51:02:3e:ae:95:4d:96:98:40:8a:c4:0b:
92:98:04:e7:32:88:5c:1e:2a:1c:63:a7:d9:c5:62:1f:a1:b5:
db:1f:4a:c5:0a:43:77:7b:f5:23:17:16:42:4b:62:9f:42:d4:
6a:7c:a3:4e:ab:5f:ee:8c:f1:d7:e3:83:fe:e2:9c:db:ce:c2:
c6:dd:d1:37:57:ad:71:a9:00:d3:22:87:70:95:97:c6:f2:1f:
01:39:42:dd:42:33:b7:db:42:51:8b:0c:77:39:f6:09:55:0a:
c2:94:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:07 2025 by rpki-client