Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa
File: 5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa (raw, json)
Hash identifier: U83G4FDIuMPDE28Py+6GCvffApuonfoDzzkBPqyprL4=
Subject key identifier: 9B:F2:17:0D:0C:9B:F4:B6:72:29:C5:F2:5A:79:D7:ED:49:31:11:03
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494E2EB9F97658DF08CBFE88DC
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.35.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b9:f9:76:58:df:08:cb:fe:88:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=86d9089f-8cae-43ef-8aab-775ae79268fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f1:25:2d:9e:0c:fc:2b:f3:6f:be:ff:2e:ac:
fa:0c:13:7f:c7:65:fe:6d:99:34:f3:fd:59:a9:74:
63:3a:80:16:86:1c:95:1a:44:4d:04:3c:3d:11:3d:
df:fa:72:cb:b2:9f:af:dd:4a:99:58:8f:55:6d:32:
52:78:6a:f2:a3:cb:5d:e3:c6:21:16:df:58:49:7e:
6d:cf:1e:49:1a:24:3a:82:df:81:fa:19:aa:89:15:
37:f9:c4:10:8b:97:56:16:c8:ae:7b:4d:61:1b:11:
2c:34:b1:85:f4:db:37:0e:5c:d2:6a:47:ca:a9:71:
6e:9a:8e:30:b6:01:c1:2e:59:02:f8:31:c2:b8:04:
35:99:ac:a2:78:a7:b0:ea:ea:09:4f:9d:3f:02:63:
29:31:00:89:34:8d:88:52:f2:4a:14:ab:cf:88:3a:
d7:d9:b4:04:2c:fb:ed:41:4f:8f:db:ef:3f:42:c0:
73:27:df:20:3d:13:ef:74:f7:3d:57:df:a1:09:2e:
dd:2c:ae:ff:99:15:2b:59:c6:78:5f:26:20:bc:59:
95:8d:25:be:14:58:af:a8:46:1a:54:c9:6f:5d:f0:
4b:13:d6:81:08:77:8c:4e:84:92:10:d5:e6:a7:93:
3a:a5:c4:ee:8e:a9:f2:bb:dc:b6:ec:72:fa:b0:79:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F2:17:0D:0C:9B:F4:B6:72:29:C5:F2:5A:79:D7:ED:49:31:11:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d5114ea-20b1-3223-84de-d9a5d3cfa160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:0b:8a:ab:db:2b:62:2b:a5:6a:ad:f8:f9:8f:9e:46:cc:bd:
3b:a9:f4:c8:00:21:42:52:b7:0e:d6:93:2c:7c:4b:f5:2b:bb:
f3:ee:3d:9a:37:eb:06:c7:81:7e:44:d7:ad:a8:62:30:ba:93:
98:47:94:40:bd:e0:b8:e5:b8:5c:fd:6d:48:99:21:c7:29:9d:
b1:e7:a9:ba:85:88:82:83:d3:a7:26:93:6c:0e:bd:bc:d5:83:
ed:d1:96:b5:23:be:f2:34:72:09:c8:af:25:fa:93:bc:f8:c4:
97:7a:63:53:fe:0e:1b:c7:8b:26:e8:0d:fa:fd:25:4f:e5:59:
10:02:e7:6f:42:27:7f:9e:33:ab:a5:df:85:38:f5:0f:03:64:
68:49:4a:f5:07:ee:c0:56:5d:8d:15:a7:96:71:1d:1f:7f:5e:
3e:e3:b7:31:44:85:05:c2:e2:82:14:43:de:bb:67:15:4f:84:
ef:c9:ad:65:8c:06:a9:2c:e6:70:61:b4:e6:b4:8e:96:44:32:
c0:d6:75:24:0c:fc:03:9f:0e:ad:b7:b9:83:5a:68:2c:ee:72:
23:c4:d7:1a:dd:fd:8d:39:89:8b:c1:bb:24:e8:ac:95:f4:bd:
75:7e:39:5b:a4:a2:c4:72:9e:63:52:50:5a:ca:6a:29:ed:1f:
54:80:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:26 2025 by rpki-client