Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38703155-af34-3945-b64e-51185af137dc.roa
File: 38703155-af34-3945-b64e-51185af137dc.roa (raw, json)
Hash identifier: WesTVSj0gLINhKW75AZycsSzEm2BytThOt45t71Fpn0=
Subject key identifier: DD:28:99:BA:D5:D7:48:57:52:C7:F3:E3:E1:47:58:37:79:82:DD:45
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848B8F0DB5B61FAE78ECFC8EF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38703155-af34-3945-b64e-51185af137dc.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.204.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:db:5b:61:fa:e7:8e:cf:c8:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=b2a957f3-6bf2-49a7-92cc-3881a3c98694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:2e:63:1e:bd:6d:58:ed:a6:8f:d9:2b:2a:
80:38:17:3c:e1:06:a7:11:b9:5d:5e:30:9d:ce:a9:
0f:fe:f7:0f:66:b0:c6:e2:91:d6:64:77:f3:7e:01:
1a:67:cb:d3:d2:8b:fa:fd:bc:4d:3a:bf:0a:d0:6b:
4d:61:3f:f2:10:a4:06:58:6f:4f:ba:f2:01:6f:52:
40:35:bf:59:86:79:6c:83:0b:1f:25:5f:78:b2:9e:
c6:17:7e:2e:63:e9:33:44:ff:e2:b8:38:c8:84:cb:
3c:8b:31:03:39:24:79:5a:a8:5a:87:31:7b:16:f1:
46:e1:15:94:06:1b:0f:59:d5:05:2d:8d:bb:cb:d2:
31:01:b4:bb:8c:5d:18:4e:5d:36:28:43:31:43:eb:
e8:d5:c1:f9:99:44:e4:6d:04:c1:81:29:57:5e:ea:
c9:43:4a:b6:7f:03:d6:9f:aa:3b:a3:87:c9:cd:d0:
eb:db:4a:69:ef:ad:1b:be:52:09:50:74:21:cf:a7:
28:f0:cf:ca:d4:39:27:eb:cd:9b:94:b0:e4:b6:7c:
eb:32:0a:a1:e4:36:fd:3e:ee:71:4f:8f:bc:ac:71:
9c:01:ac:e7:e3:19:50:dc:2e:3d:69:14:23:a8:fb:
32:6c:d2:1e:4d:a3:89:b4:80:be:25:13:fe:c0:02:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:28:99:BA:D5:D7:48:57:52:C7:F3:E3:E1:47:58:37:79:82:DD:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38703155-af34-3945-b64e-51185af137dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.204.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:3a:29:63:45:07:a5:99:40:a7:a4:43:90:7c:1f:61:cf:82:
3e:b1:c5:bc:86:b7:4b:ea:de:42:b4:84:f2:b2:9c:5e:1f:af:
1c:51:88:68:55:35:af:fa:dc:b4:5e:30:28:c4:77:b5:36:6a:
3a:f1:96:05:72:9d:84:d7:b0:54:e7:71:67:e8:9e:1e:48:fb:
70:8c:ef:11:f3:5b:a2:91:5b:ef:67:12:05:9a:a5:34:5b:0d:
59:a4:32:3f:51:13:b3:37:12:e0:5d:f9:34:75:df:4a:ca:09:
55:79:85:d3:6a:2b:ee:37:da:a2:f1:45:0d:e5:9d:7f:41:c2:
ee:bd:c6:3f:10:fb:23:d9:91:a7:a7:40:71:3d:9b:f9:39:29:
43:4a:e7:19:f6:a0:19:3c:f4:b3:44:d8:08:8e:45:77:7c:f3:
22:da:10:95:75:4b:e2:85:77:bf:c0:9b:35:ec:f8:df:e2:f1:
b0:15:31:a5:11:9a:13:45:a4:18:53:d4:a7:c6:06:22:6c:db:
7e:e9:ed:84:03:92:3f:d4:41:8b:34:d1:2d:9b:ca:be:11:7b:
c0:9f:cc:56:4c:88:9b:55:4b:9f:0f:7d:03:a1:3e:b4:9c:dd:
4a:39:8d:72:20:d5:72:1e:7d:f2:7e:ff:ea:95:e9:6f:99:9c:
10:94:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:32 2025 by rpki-client