Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60cc6a95-a267-3f71-9e63-ff9aa554d322.roa
File: 60cc6a95-a267-3f71-9e63-ff9aa554d322.roa (raw, json)
Hash identifier: pr72RRVmfNS5RELER045jlaLYtaK4soX0r39SX5YlnU=
Subject key identifier: 9A:19:F1:D5:11:2F:43:A2:E6:82:FC:42:78:1F:72:7C:C4:69:79:28
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB88D6B889DF5770C4B908
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60cc6a95-a267-3f71-9e63-ff9aa554d322.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.209.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:88:d6:b8:89:df:57:70:c4:b9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=4c51e483-8a26-4c7d-8421-1b3c161aac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:8e:d7:e4:7e:c5:f3:41:16:fa:74:6d:8c:
d8:02:2a:63:5f:41:aa:51:c2:d4:24:f7:3a:aa:09:
da:85:47:73:08:ad:b7:79:55:e4:b8:30:4f:aa:87:
38:f7:b5:b5:49:7b:d8:0a:f6:a0:9d:9b:b3:f1:61:
2a:cc:94:3f:ad:6f:6d:38:9a:36:4c:50:cb:7b:8a:
6f:49:5c:e9:62:54:c3:c9:cd:8e:58:d6:62:71:37:
b3:3b:76:72:46:c5:7a:58:c0:fe:4b:4d:29:91:3e:
a5:a0:91:3d:55:59:da:63:61:04:f3:38:9e:d9:67:
91:e3:96:7f:68:5c:91:d9:2e:5c:93:0d:ec:a8:a9:
c7:1f:36:dc:38:63:79:d8:51:3c:68:2c:aa:5e:fd:
91:39:d1:1e:fc:9b:b4:a8:0e:cd:dc:96:ec:b2:a4:
c8:d6:c2:43:40:ca:dd:54:23:f7:a1:9f:8a:13:4b:
c4:ef:e5:2b:8d:72:6c:65:28:51:73:7d:25:82:76:
82:0d:90:be:37:9a:17:06:8a:5d:d6:fa:77:ef:fc:
85:0b:c2:1a:5c:a0:ef:90:d2:ef:f1:54:47:f6:23:
e1:df:82:a7:4e:c0:a1:50:a0:20:85:55:38:8f:d6:
6e:33:dc:a5:98:ca:58:10:f4:5d:9c:ee:3d:b0:09:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:19:F1:D5:11:2F:43:A2:E6:82:FC:42:78:1F:72:7C:C4:69:79:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60cc6a95-a267-3f71-9e63-ff9aa554d322.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ac:4e:32:8c:af:cb:39:41:e1:fc:c1:03:bc:b6:05:57:f8:
0c:a3:8f:c9:71:ec:fb:d6:db:b9:6a:30:a2:16:6b:68:88:80:
e8:fb:34:f8:3b:7b:92:fe:a4:a0:53:f5:93:5f:ab:e3:b4:f6:
bd:0c:c7:99:62:90:02:95:35:ed:53:47:81:fc:f2:13:83:71:
d4:95:67:fa:64:e8:bb:1b:b2:9b:06:bc:54:19:a9:c1:b4:45:
19:37:6d:67:c7:2b:fb:7d:00:98:31:f8:ba:ba:35:29:bb:3c:
25:5e:e7:4b:22:4b:0c:46:45:93:a7:9b:9a:7f:24:03:63:ff:
ad:e8:22:32:f4:41:03:89:e8:31:8b:cf:6e:33:73:70:d9:b3:
e1:1a:9f:26:72:3b:3b:59:34:95:ec:ff:d3:98:63:50:b9:b9:
85:75:36:14:7e:0c:52:33:ec:39:59:7a:9e:2b:88:36:41:3d:
1b:a6:37:c7:d9:7b:e3:4d:71:da:f2:9a:72:8a:b2:f4:6b:12:
50:59:de:33:75:61:95:c7:a9:c0:6d:af:3d:93:23:0d:c8:0b:
44:c4:88:8d:c5:ec:11:d2:bf:78:e1:2e:36:ba:ca:8c:a2:92:
70:a0:1c:2e:56:32:e2:f7:b8:2c:a0:2b:9b:ea:26:aa:97:9c:
fa:6e:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:11 2025 by rpki-client