Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35893a4a-08b6-370a-9232-c8306446f147.roa
File: 35893a4a-08b6-370a-9232-c8306446f147.roa (raw, json)
Hash identifier: 4hQ8Wai4cPn90/J6n08y1IJZghESACy/3hy/ZgVFi/Q=
Subject key identifier: 41:F3:87:BF:15:78:56:95:86:F4:04:51:62:39:1B:FF:AB:62:28:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB70165EFC19DFBFA69300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35893a4a-08b6-370a-9232-c8306446f147.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.61.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:70:16:5e:fc:19:df:bf:a6:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=aa389c45-05fe-4ffd-9488-614fca746553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d0:8c:33:48:1c:13:a7:6f:91:54:7d:ca:12:
08:44:f5:cd:3e:c0:73:f7:98:cf:78:b4:51:d9:98:
44:60:5c:ea:3e:9a:83:8e:10:fc:3a:c8:61:70:32:
e6:c4:b3:5d:da:87:88:7b:90:4c:bb:2d:ba:d6:27:
4c:a1:81:65:a7:03:fd:f5:da:54:89:e2:d3:07:d2:
1b:31:5c:f4:3c:3c:de:4a:49:fd:d0:7f:24:7c:bb:
4f:df:31:a2:d9:66:66:12:a1:44:39:0b:58:82:33:
53:3e:61:a5:a9:17:49:24:7f:a6:05:82:41:57:be:
3f:76:0e:ae:6e:ce:78:3d:9e:17:98:59:95:2c:35:
07:72:7c:21:8a:e0:7f:9a:d9:8b:3a:12:51:1d:2a:
96:af:81:cd:dd:62:b6:0c:e0:d9:95:e0:ef:bd:be:
a2:12:d1:8b:72:cd:fa:f8:e3:4c:76:b4:85:57:6f:
79:57:cb:1e:77:74:22:0e:50:62:a0:d4:3d:ce:32:
aa:98:e5:7c:18:f5:5e:e8:63:c2:d5:f7:26:e8:d3:
80:f5:34:a9:75:47:52:8b:0b:65:c6:df:d3:19:75:
28:25:a6:d4:90:9c:44:21:3c:16:20:5f:60:39:39:
5d:55:60:38:8b:be:b0:22:72:8d:91:61:a4:b6:3b:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F3:87:BF:15:78:56:95:86:F4:04:51:62:39:1B:FF:AB:62:28:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35893a4a-08b6-370a-9232-c8306446f147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.61.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:9d:94:e8:fd:a8:46:c2:f1:8f:17:52:2d:1f:0e:d0:61:64:
6e:9c:65:93:62:3f:fe:1e:67:7d:91:47:0b:08:bc:cf:77:41:
7d:07:38:bf:0c:5b:aa:57:76:d5:03:af:94:61:3f:20:ba:78:
f7:97:ca:bb:73:f0:95:27:ef:c0:84:a5:9c:71:84:36:74:5f:
ec:19:a0:76:f9:3e:92:cb:e0:3e:53:1b:97:de:6e:c4:f4:75:
be:98:12:b1:9a:e7:56:56:c5:4e:c9:e0:10:cd:5f:04:41:f5:
9a:09:b0:63:65:1b:52:e4:64:25:55:7d:af:1e:33:8a:6e:c4:
f9:ce:1f:75:79:88:4e:ce:f9:f6:be:78:5b:7f:76:b6:51:f9:
0d:0f:91:ea:86:ec:17:17:d4:b3:70:c6:70:41:61:4a:46:ec:
ad:42:3d:45:59:79:99:ec:53:c2:71:72:aa:1b:ef:01:49:a5:
43:56:ee:96:4e:fb:d9:51:dd:5e:f2:98:69:80:5b:34:1b:fb:
58:f8:0c:be:6b:77:9e:76:f6:74:b8:7b:c5:69:cf:f1:56:09:
18:a6:8f:dd:0c:e1:13:30:3b:96:f5:e9:b6:b1:75:52:40:8e:
54:09:1d:1e:6c:25:e6:23:95:5f:37:bd:14:e2:13:5c:7f:69:
a8:43:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:18 2025 by rpki-client