Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33240eac-a147-3917-8db1-f1c9673b4a29.roa
File: 33240eac-a147-3917-8db1-f1c9673b4a29.roa (raw, json)
Hash identifier: 5nRFxyli9x6/iASYPdorh06tBYwOSD5FfeJWiK6tC7o=
Subject key identifier: 15:E8:09:4F:02:AA:0C:12:44:C8:9F:FC:F6:6E:3C:AA:0F:44:CE:DF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A20978B20B941BDCF69EB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33240eac-a147-3917-8db1-f1c9673b4a29.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.36.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:97:8b:20:b9:41:bd:cf:69:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=2bf2b050-828e-458f-9a26-220d80ae66f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:73:77:f2:9f:df:21:d4:37:61:85:d8:2b:00:
60:35:69:0c:25:2d:dc:3c:36:7a:b1:36:59:4c:b9:
23:cb:ec:6e:28:03:53:4e:39:c4:7d:4f:37:30:3b:
41:89:35:0d:5e:83:6d:bf:cf:f5:f7:79:e0:9a:18:
46:82:2d:de:ce:37:06:82:5e:a2:ba:f8:38:90:ac:
0f:f7:6f:18:1b:29:bd:12:1c:27:71:a4:7a:5d:00:
e6:1a:10:ae:13:d3:f9:3d:43:19:cf:22:dc:63:1b:
b6:13:4c:95:59:09:4c:28:f4:5a:86:fe:c2:53:1a:
32:8d:20:16:f4:02:52:3f:8b:bd:ab:a5:c4:9c:36:
23:ca:e9:fb:e3:6d:92:44:e6:cb:e3:a9:0b:7d:5d:
e7:bb:d9:4e:1c:47:13:90:57:19:3b:20:fb:92:18:
e0:30:b5:87:ad:53:6a:e1:04:b2:5a:31:ee:af:73:
76:1a:fe:af:5f:dd:b5:97:9a:78:23:ca:29:8a:66:
c3:94:60:ae:34:62:2e:9b:bc:f8:f6:7a:0e:a2:33:
81:29:54:6d:10:b1:31:17:ba:3f:3c:12:30:ed:e2:
58:62:4e:52:17:8d:68:fc:df:68:d5:0a:5b:ff:29:
f6:f6:a0:f4:e0:88:9e:fb:9f:76:94:76:70:1d:95:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:09:4F:02:AA:0C:12:44:C8:9F:FC:F6:6E:3C:AA:0F:44:CE:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33240eac-a147-3917-8db1-f1c9673b4a29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:66:66:d3:73:e3:a7:4a:10:d3:bf:db:0d:93:f3:f2:36:aa:
09:7c:2a:bb:8c:1b:1c:04:80:9b:7f:9e:96:26:da:2e:f3:1a:
47:78:b5:b0:bc:2a:81:aa:c2:f0:9f:54:7e:67:be:d6:14:2a:
f5:ad:b6:54:f3:55:e1:5a:e9:0b:4f:07:1f:8c:5e:f9:c1:25:
6c:5f:b0:78:8a:b2:d1:6c:66:78:4a:b2:d5:91:4c:d4:da:1c:
44:33:2f:1e:1a:cb:96:7e:16:e2:a1:2f:c9:9c:42:99:3e:d4:
7b:c8:83:a6:36:80:dc:02:80:4d:72:32:04:36:b4:df:2f:87:
a3:71:60:42:eb:8c:c6:8f:86:77:bd:fb:e3:47:e5:04:70:b3:
30:e6:47:a3:cb:23:9f:18:21:ba:52:83:2c:cf:13:88:b4:0a:
3f:e5:4d:77:45:54:50:ce:23:6f:c5:6f:9b:64:7d:9e:fe:91:
8d:0c:1f:cc:11:44:93:e8:06:92:3c:03:bd:eb:b3:25:1b:32:
be:33:5c:25:64:c1:d8:dc:e3:ae:cf:7b:42:30:b5:b0:bf:07:
0a:ce:fe:4f:ad:49:22:27:3b:8e:5a:9d:86:85:22:5e:a1:52:
38:eb:ee:cc:44:8b:6c:7b:6b:01:ed:28:1d:04:31:ad:33:f3:
31:e6:06:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:11 2025 by rpki-client