Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396d3480-dfda-3cab-a48b-9d9d18ea82a2.roa
File: 396d3480-dfda-3cab-a48b-9d9d18ea82a2.roa (raw, json)
Hash identifier: 4yqpwPRwkOvbsMWt/8JsinG4pI9JbtOvNSJwEbA7Kx8=
Subject key identifier: 8A:55:01:83:DF:91:9B:46:8B:1C:A1:C2:75:30:AE:E4:7E:6D:8F:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848B8F0DCBB37EA1E1848C205C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396d3480-dfda-3cab-a48b-9d9d18ea82a2.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.205.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:dc:bb:37:ea:1e:18:48:c2:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=8ea5dac2-3c2a-4059-9415-686a916ce77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b1:fb:26:b7:dd:e9:47:b4:56:9b:97:b3:ae:
0b:93:2d:f5:4b:ca:65:a8:2a:83:ed:bd:5d:f7:5e:
12:4b:5d:88:d1:17:31:71:d5:13:f1:35:54:a9:5a:
58:13:9c:09:61:43:40:d4:be:1d:97:2f:fe:05:85:
01:2d:82:e1:9a:4c:28:ef:cb:92:1c:a7:d4:19:51:
e7:57:da:58:40:89:d6:47:c4:de:fc:24:49:90:89:
47:28:45:07:af:c9:da:5a:15:a0:99:a6:a9:36:aa:
42:51:f7:b4:2f:94:fb:b2:26:bb:99:d9:07:4c:2b:
d0:d4:25:95:7e:de:29:b4:e0:74:ba:36:c9:0d:6b:
e2:3c:57:f6:71:4a:0c:6c:22:d9:06:9b:5d:14:b7:
ed:1e:bc:9d:6e:22:b6:dd:3e:e7:3f:93:2c:91:45:
a2:1a:f7:36:79:ca:8f:90:fe:c4:d8:3a:b8:88:3f:
72:03:a7:4a:bb:5a:ea:b4:36:69:ac:59:24:30:91:
c5:57:ef:23:7d:dd:1d:dc:5f:ae:e9:3e:dd:de:b1:
2c:34:99:52:e2:ea:ba:79:84:ae:20:88:3a:ee:7c:
3e:0b:87:32:78:e0:8b:d7:f8:ba:77:f3:42:70:57:
d2:18:e4:49:f4:1a:09:0c:c8:eb:28:87:58:fc:be:
f1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:55:01:83:DF:91:9B:46:8B:1C:A1:C2:75:30:AE:E4:7E:6D:8F:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/396d3480-dfda-3cab-a48b-9d9d18ea82a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.205.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:d1:b3:8b:95:f1:7b:b2:ee:84:03:48:eb:29:6f:fe:c7:19:
3d:e5:26:33:0a:72:15:56:cd:9b:41:73:fd:45:91:f6:b4:52:
32:dc:47:26:91:f7:9b:8d:2d:fd:76:5f:6a:43:9a:1f:0e:f8:
22:61:b7:8a:df:43:56:02:b2:be:74:93:99:11:73:de:79:81:
ff:be:f6:2c:05:fb:5e:a0:cb:7f:5a:aa:57:a4:f2:a9:a0:0e:
52:c9:ce:bf:d3:84:19:d4:12:af:d7:24:57:09:1c:aa:6d:1f:
4c:7f:4b:83:69:cc:39:a3:6d:f9:71:ad:3b:02:f4:53:08:75:
d4:cf:30:88:ea:75:51:dc:30:01:ce:fd:45:8b:af:14:52:f7:
e0:a0:3e:8b:1a:44:1a:a2:92:7a:d8:0c:21:b0:26:0f:a9:7b:
ef:aa:37:76:15:8e:67:92:50:12:3a:b9:3a:12:87:fe:bb:e1:
44:92:02:58:b5:56:d4:bb:80:80:ac:2f:fa:01:88:51:ad:d6:
de:35:13:04:39:20:84:d0:77:19:bd:72:0b:4f:90:4c:78:0e:
72:8c:ce:e2:6b:74:df:4e:de:32:78:3a:3b:da:9d:c5:0b:3a:
69:2e:9c:42:61:56:b9:be:32:93:dc:22:c2:86:c6:d7:d9:b5:
6a:c1:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:57 2025 by rpki-client