Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ce78630-0544-3850-9a9f-05c944c5b877.roa
File: 3ce78630-0544-3850-9a9f-05c944c5b877.roa (raw, json)
Hash identifier: ZS29ha0nwFVPk9KsUS2R08LhEW5ch0Xi6UdR6U3N6k8=
Subject key identifier: 78:8E:B4:27:93:ED:75:E1:75:89:8A:86:DE:3F:AB:B2:6B:8B:87:18
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209B47ED176D518C961800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ce78630-0544-3850-9a9f-05c944c5b877.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.38.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9b:47:ed:17:6d:51:8c:96:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=e7f2c12b-276d-4ece-9473-7d709c67767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:cd:4a:e5:b3:4c:25:9e:01:1c:3b:06:b1:
55:b4:21:0c:3a:fc:0b:2c:e3:2a:79:df:42:b1:3b:
cb:98:1c:62:28:22:63:f9:a6:7e:71:0b:48:40:ed:
1c:b3:e2:ba:20:2c:2b:5d:87:c3:7b:9c:7a:51:c8:
ee:84:66:2e:0f:b1:fd:e2:18:67:96:83:2a:bb:ff:
d7:63:8c:73:9d:c7:c5:69:a2:8a:38:ab:55:6c:05:
43:34:39:5b:cb:49:51:79:28:98:c9:50:a1:31:37:
9a:70:98:e0:c3:09:a8:39:3b:59:3a:24:0e:90:5c:
70:cd:63:be:8f:a5:c2:fa:98:37:83:76:4a:3c:ac:
14:d9:75:0d:75:37:73:e8:56:30:69:42:ca:a1:05:
64:9b:2c:4c:9e:6a:0d:fc:2b:61:de:8e:7d:6b:d9:
09:ac:ed:f5:f7:f9:6a:87:31:ef:35:6b:d9:7c:4c:
3e:48:95:1c:3b:d7:95:1d:6e:d1:06:92:07:46:6f:
2f:7a:55:39:85:aa:50:15:bf:12:9c:ba:b3:b4:83:
7b:12:6b:21:b3:fe:97:89:4a:2a:ca:cc:35:b9:a7:
a2:54:d2:ed:68:b2:cf:cd:2c:e7:7b:7c:0c:56:25:
66:4d:59:56:7e:b9:67:1e:28:04:76:fc:1d:94:f0:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8E:B4:27:93:ED:75:E1:75:89:8A:86:DE:3F:AB:B2:6B:8B:87:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ce78630-0544-3850-9a9f-05c944c5b877.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:18:f9:bd:b6:7a:cb:99:92:b9:78:fc:9d:9c:fe:54:dd:80:
b8:77:6d:33:08:b5:33:e8:b5:75:ac:cf:bc:ab:d3:8a:63:8e:
df:73:8c:58:f4:81:3d:47:02:1a:de:df:af:1e:e7:c7:77:19:
3f:84:17:d3:4a:33:28:68:70:43:ca:48:aa:c1:73:bd:c6:0f:
27:69:86:03:43:29:08:cd:73:74:c8:03:02:7a:73:ef:c3:d2:
b2:7f:f1:dc:06:e0:7d:c9:a5:e4:55:17:99:6d:1c:7a:2d:1d:
8f:4d:4e:8d:1d:9b:bf:38:1a:5d:c2:f1:60:a2:48:e2:ae:d0:
1f:87:ab:82:1e:2c:3d:4a:6d:0c:de:cf:2f:a3:d4:77:7a:57:
45:aa:85:ca:56:09:61:78:45:64:52:79:0e:d6:b5:d3:89:a6:
53:5d:61:e1:87:32:63:08:e7:ec:ca:b2:bd:ed:d5:d1:36:41:
b3:c7:9e:63:87:66:f6:91:b4:59:4c:23:d2:27:f3:c7:a1:90:
2d:cc:2e:8e:7e:61:20:1e:70:bc:30:d5:12:19:18:8b:1d:36:
f6:24:a9:bc:8d:97:11:94:78:7c:6b:c9:dc:ee:5d:7b:e3:a9:
92:56:2e:ac:b4:72:2a:38:14:2f:06:64:e4:a0:7f:c8:31:19:
49:6e:57:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:21 2025 by rpki-client