Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b366a11-9c42-3313-8871-9fbb6ced3515.roa
File: 5b366a11-9c42-3313-8871-9fbb6ced3515.roa (raw, json)
Hash identifier: 9nt0DnY+JW005XZJXDOx400baTDbJmvFvs3HxZvbyuA=
Subject key identifier: 94:E8:D2:B3:08:82:CC:D4:63:F2:C3:39:0A:24:0E:AF:C9:3F:CF:33
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830CC9EA08D86083396DB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b366a11-9c42-3313-8871-9fbb6ced3515.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.200.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:cc:9e:a0:8d:86:08:33:96:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=b60a8b27-2cdf-46b4-861d-1d3231b5f461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:de:93:cf:7d:5e:ff:ac:d8:25:00:1f:ed:
77:16:3c:dd:9f:8b:cc:e7:37:9e:52:54:e5:1c:96:
d7:40:96:55:12:f1:6f:0e:c6:30:54:47:f2:0b:8e:
27:ec:fd:24:6e:08:49:83:f0:de:1e:6f:4d:01:d9:
43:ab:da:22:c5:a1:86:85:6b:b5:4f:bd:21:d7:64:
97:7f:36:b4:89:6e:da:17:10:81:c6:d9:cf:b0:b9:
67:1f:21:c8:db:a8:3f:02:a7:26:9f:87:32:86:f4:
5c:14:cb:b1:7e:c6:f6:fb:43:15:77:14:69:53:91:
a4:d5:7a:a8:f2:28:a2:f5:93:43:ff:81:48:2a:b4:
21:43:19:ae:3f:d1:80:1e:3a:60:0a:a3:f2:89:09:
42:81:14:20:9a:f5:b1:f5:4d:1d:f1:88:ef:c2:43:
31:83:3c:9b:e5:16:64:c9:5b:b4:f5:41:02:1b:1c:
df:55:12:c6:f2:87:7a:92:8e:a3:e6:58:3f:75:ca:
0d:3e:67:ea:b0:4e:bd:65:5c:ff:bf:d7:bd:66:82:
e8:ca:fa:9e:b3:44:ef:b6:eb:e9:9f:ae:ab:a1:6b:
42:18:17:a5:07:2e:24:d0:0e:6a:57:2e:a4:5b:43:
bc:af:e8:ec:fe:5f:84:04:0e:05:31:22:c4:2b:25:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E8:D2:B3:08:82:CC:D4:63:F2:C3:39:0A:24:0E:AF:C9:3F:CF:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b366a11-9c42-3313-8871-9fbb6ced3515.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:a3:53:69:bb:d9:da:a0:d0:e6:9c:9a:7a:36:f2:8d:90:d1:
d3:6e:20:8f:94:56:97:14:98:04:be:fc:80:fb:3a:c3:ce:d6:
71:32:cf:4b:97:22:04:12:b6:c5:be:55:00:41:bc:ff:d7:30:
b0:6a:40:28:92:f2:b8:3c:a3:c5:ac:c7:a7:0a:60:b8:e1:9e:
c4:de:08:80:8a:c4:6a:06:a3:0b:84:bf:f6:5a:2e:a4:95:f4:
f3:1d:86:a7:96:4f:33:71:ee:07:f1:94:69:64:e3:91:dc:7f:
b3:a2:ed:ba:09:2b:90:fa:5b:e6:d6:d0:34:cf:27:df:1f:99:
9f:e0:47:6e:a7:c5:e3:72:a9:cf:59:7d:ae:6e:4e:01:f5:4e:
72:b0:e9:db:40:5b:43:2f:cc:6b:ae:a4:39:e0:f6:73:7e:6a:
bd:ee:70:33:4e:cb:74:c1:b9:1e:b0:98:06:77:17:15:d8:ac:
bb:ff:47:78:b5:3a:6d:6d:28:d9:d1:43:84:a2:a0:c9:b2:ac:
68:fe:10:5a:95:81:d3:93:ed:e0:ae:22:f8:b5:4b:61:7a:0d:
28:91:88:92:a5:a0:98:18:61:76:90:9f:aa:aa:0d:d3:a0:be:
e1:b7:4b:dc:21:d6:37:4e:0c:7c:b5:85:17:e1:08:e1:7b:46:
12:12:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:19 2025 by rpki-client