Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa
File: 31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa (raw, json)
Hash identifier: 6MSLQicZFcxs5Oi1vPaIR2eJ2h7ErlZa/xq3vSa/1tA=
Subject key identifier: 11:A2:6C:DA:B2:C1:87:A9:51:A7:5F:48:1F:09:8F:8E:25:0B:EB:9E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340B8EB15D2EAC9A0A8D800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.209.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b8:eb:15:d2:ea:c9:a0:a8:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=faf2914b-bc4e-4a87-b47b-06c7883b8a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:b4:96:44:77:9b:e2:6d:70:0a:aa:b1:47:
3f:9f:bb:da:98:63:dd:5d:45:10:37:64:6e:93:d7:
8e:1e:1d:e3:ae:ff:17:96:9c:26:7d:0f:fe:d2:0f:
76:b7:3d:c2:9a:4f:37:f2:5b:a6:d5:f9:7a:d6:27:
c8:14:2f:e4:f1:15:f9:71:7b:f4:72:60:49:c1:82:
a6:99:e6:a5:ae:ed:ac:8c:89:24:44:c4:79:3f:33:
91:21:93:12:e8:4e:ef:0a:44:1a:07:98:1c:ea:81:
3c:87:5a:bf:30:7c:b2:f3:54:a1:78:71:56:fd:f7:
be:11:a6:e6:8c:d2:91:2f:c7:f5:d2:26:fb:36:fb:
65:b0:9c:d4:0c:11:39:f8:c5:52:4a:a0:0f:2e:7e:
9d:04:73:68:7b:6e:e8:23:7d:21:b7:3a:15:99:10:
f0:ae:93:f2:c1:a4:ec:3b:66:ae:94:58:00:1b:ce:
ba:5b:52:fc:77:ac:cd:69:67:4c:dd:01:45:27:88:
29:11:c2:57:77:df:8f:bc:47:77:7d:50:d0:d1:da:
88:31:f8:81:81:b8:24:e8:fd:29:35:58:c6:ce:b9:
58:f5:34:f1:2c:54:14:c3:63:1a:0d:cb:df:4e:97:
71:0e:e3:77:e7:5f:d7:21:3d:80:1c:a9:c2:58:8a:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A2:6C:DA:B2:C1:87:A9:51:A7:5F:48:1F:09:8F:8E:25:0B:EB:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31b1eb2b-5d53-3a19-bf47-b6c9eea6ac3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:70:6c:35:d4:a3:1d:68:f0:ca:54:9c:46:c6:10:9b:fe:ff:
35:b0:78:f0:73:cd:7f:bb:fc:98:ff:d4:eb:87:41:2f:b5:ed:
ec:31:8f:2e:b7:d8:e8:a4:7e:37:ee:3d:28:f1:41:1b:c5:05:
b3:8d:ce:b2:64:2c:b2:86:6e:c5:71:17:60:3d:c7:a3:c3:d3:
74:15:23:3f:68:03:8d:50:0e:c0:76:ad:37:76:d1:53:15:ec:
a2:54:20:c6:6a:e1:6d:51:30:5e:07:2e:15:15:70:39:16:09:
35:74:f5:d8:ef:64:7f:23:88:6a:a2:65:63:06:c4:7e:80:25:
11:19:d1:68:f5:7d:49:cb:6c:3b:78:4f:a9:d8:a8:c2:78:48:
ea:f2:13:c7:dc:26:49:91:e5:10:94:d9:4b:f2:69:ed:7e:14:
b8:7d:fe:49:fe:d0:64:c0:ac:d7:71:b5:bd:0c:c8:4a:18:77:
52:08:99:2f:c4:75:23:bc:59:db:32:2c:a6:c6:ff:55:ba:d8:
90:4b:af:79:9e:f6:ee:90:02:15:22:c4:4d:d6:15:5e:e5:86:
ae:22:93:da:ea:0e:23:70:c1:c1:1a:08:57:7b:17:cb:83:5e:
06:c4:23:43:a0:01:e6:9a:67:5e:ec:d0:84:b7:93:8e:a6:57:
97:3c:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:04 2025 by rpki-client