Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39a5868a-44ce-3914-a6ed-84c8e8cf30a2.roa
File: 39a5868a-44ce-3914-a6ed-84c8e8cf30a2.roa (raw, json)
Hash identifier: gqt+/aLau0gxx1s5LS70IOTafU3COe6q9UYXDNSP04g=
Subject key identifier: 3F:C2:D0:BD:87:9F:B3:18:53:1E:45:A5:46:B5:8F:DC:05:39:02:6B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491ED6F3C170CCA0CCA23F4810
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39a5868a-44ce-3914-a6ed-84c8e8cf30a2.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.72.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:f3:c1:70:cc:a0:cc:a2:3f:48:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=46554977-387e-42e3-a5db-01ff4278052f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:20:55:20:e6:20:bc:d6:0d:5d:1c:cf:3e:
93:16:ab:e9:41:7a:71:17:19:11:74:72:6d:d7:01:
09:71:50:10:c0:c0:1b:68:fe:72:63:e7:63:c3:4e:
ec:8e:7b:85:23:41:5a:ac:20:3a:09:8f:a7:02:68:
27:85:87:ef:8e:6b:bc:58:a6:81:1a:7f:be:35:f6:
d6:21:79:95:ed:e4:12:39:8e:9a:0b:31:44:55:d4:
3e:23:26:26:4c:21:0b:83:79:a2:a2:9a:a3:7b:a9:
df:36:61:02:d2:b7:29:4b:24:54:10:c2:79:f1:84:
ca:09:c8:55:5b:a9:b4:9a:77:2f:1c:5f:b3:d8:2e:
48:ef:4a:69:c3:29:d4:11:58:0c:bc:c8:91:3a:fb:
ce:33:6b:c7:b4:1a:ba:57:42:e3:35:79:bc:a2:18:
5a:52:e5:91:02:03:9e:fd:49:c1:58:10:e8:66:4a:
0a:cd:89:e1:a9:98:6a:11:09:6b:8c:79:a5:42:ed:
6c:3d:62:8a:28:df:c4:2e:a0:fa:2a:13:6b:e6:14:
b4:da:aa:90:84:00:d8:80:9e:e9:85:73:24:77:fe:
67:37:e9:58:cc:7d:f6:65:ac:a2:b7:59:bc:ba:c5:
2c:d5:ea:ba:47:0d:ca:bd:79:17:aa:0e:b0:5a:a0:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C2:D0:BD:87:9F:B3:18:53:1E:45:A5:46:B5:8F:DC:05:39:02:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39a5868a-44ce-3914-a6ed-84c8e8cf30a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.72.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:f5:ea:1e:68:45:2e:cc:a0:99:47:2d:1e:ac:dd:c0:56:70:
10:fb:c9:f5:70:31:04:99:8c:42:98:ce:3c:16:88:4c:ad:8a:
49:0a:d0:3a:f8:90:0a:f6:f0:a0:93:82:5b:ed:12:1e:b9:8f:
75:21:d8:8c:f0:10:b9:8f:23:09:24:bb:de:8d:ee:21:a2:87:
00:38:57:c4:da:97:e4:34:09:2d:53:70:ee:14:8e:d9:56:a8:
c9:65:2e:71:c2:e6:be:70:0f:1c:15:45:60:71:4b:d7:b7:e9:
18:84:b7:e1:fd:30:40:b6:0c:62:96:17:ce:ac:23:02:cf:03:
a0:b8:19:33:38:6b:b5:61:7b:a9:39:61:45:c1:3f:97:71:b0:
51:dc:85:4f:89:8e:75:e2:fe:11:8c:e7:69:1e:b8:da:19:88:
6c:55:d3:e7:35:9e:22:58:52:4c:0f:12:82:d0:f8:16:bc:14:
00:15:60:d0:02:3f:1c:d9:cb:7a:d1:d0:db:32:82:98:aa:ae:
63:86:0f:56:10:d8:8c:d4:bc:d1:a7:97:98:33:fe:8b:4e:a2:
d2:9c:af:00:8c:12:70:a7:b0:ab:10:e0:07:4c:5a:07:10:8c:
ff:76:60:56:fa:ff:8c:96:12:f5:d6:a4:c2:9a:b0:b7:93:a2:
47:8f:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:47 2025 by rpki-client