Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65dec6bf-c3fe-3bfa-84bb-3e27f1f7e9fb.roa
File: 65dec6bf-c3fe-3bfa-84bb-3e27f1f7e9fb.roa (raw, json)
Hash identifier: r9l88q1qqUrQSrG5ckVm1MYVkEjfZjNxgR0zQvXEyTI=
Subject key identifier: 1A:36:81:DF:BD:55:D2:18:D9:1A:9D:F6:9A:23:0F:1E:66:07:A6:2B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340B75142F5084EC4F05500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65dec6bf-c3fe-3bfa-84bb-3e27f1f7e9fb.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.207.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b7:51:42:f5:08:4e:c4:f0:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=e8d1cbd6-bbac-4dc4-895e-8615e823093e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:b8:2e:3a:4f:31:e9:24:06:17:37:4d:df:
19:23:3e:f2:93:f2:dd:c0:90:56:bb:a0:6b:26:39:
4f:4b:86:5f:f2:b0:60:03:e0:2e:57:27:76:cf:6f:
f7:6a:7a:f0:63:91:a2:61:40:3a:4c:93:06:7f:69:
63:42:84:33:af:3b:80:2b:79:d8:1f:fa:85:d3:08:
fe:1b:d4:9e:aa:2c:ff:89:a0:be:e7:03:ab:45:61:
b0:c1:68:a8:7e:ac:71:42:8c:7b:df:ba:6c:52:de:
df:ea:9a:be:a0:00:3f:11:d5:a4:72:59:c5:39:28:
83:31:12:fc:98:75:5b:3c:b4:5c:81:69:90:29:68:
ed:da:c5:f6:64:1d:53:54:d5:a5:d8:3c:87:ae:d5:
2c:35:50:ec:0e:1e:8c:52:21:54:85:77:00:01:74:
cc:b7:f8:1a:f3:e3:97:c7:37:3f:92:2f:1f:52:7d:
58:2e:9e:df:fb:90:fe:31:d8:a6:b2:ea:11:11:72:
79:4c:95:fb:2d:ab:32:ce:5b:92:0d:de:98:fb:a7:
39:d8:06:89:16:a4:46:eb:bd:10:26:f1:82:fc:5f:
85:96:cd:2e:0a:23:bd:ed:37:a1:aa:b3:33:a3:1b:
f8:04:a0:b1:40:39:59:ca:23:ac:98:42:7c:92:db:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:36:81:DF:BD:55:D2:18:D9:1A:9D:F6:9A:23:0F:1E:66:07:A6:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65dec6bf-c3fe-3bfa-84bb-3e27f1f7e9fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.207.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:56:9d:0b:1c:a5:67:94:7d:b9:39:49:d0:2d:df:c1:77:54:
75:0b:a3:bc:d3:e5:36:26:38:bc:38:4c:3c:bc:8b:08:e9:84:
50:e4:3b:08:b3:68:2e:5d:fa:ea:1c:7f:1e:9c:47:fa:a3:7e:
37:fa:15:e7:e5:6c:b8:4a:3e:5e:36:13:a8:6a:ae:35:f5:d8:
d1:8f:48:b9:b9:83:c9:ad:5d:c8:72:ea:8e:2e:d6:2c:3a:e8:
a4:30:c9:b2:80:4a:00:f9:76:92:98:4a:ba:75:6e:06:e9:d4:
cf:63:a5:7f:8e:d2:66:07:09:21:71:30:d7:6d:af:1a:99:f0:
05:c4:df:a7:74:39:93:b7:7d:df:a9:6d:cb:e0:b9:3d:77:83:
73:d2:12:17:05:bb:58:2f:11:31:56:21:dc:9d:39:d6:f6:9d:
f3:6f:aa:47:99:29:27:a0:6b:86:d0:f7:f3:4e:8a:27:d5:00:
50:ad:1e:5d:50:c2:f1:00:4d:a2:57:42:6c:69:5b:cf:73:bb:
a1:eb:0d:de:20:22:b8:ef:e9:1e:3b:c3:3b:ac:d5:b0:3f:a2:
07:f8:de:78:01:eb:49:2b:bb:a3:01:c7:fb:d5:cb:76:71:bf:
a7:1b:6a:e5:ac:0d:b7:ff:1c:b4:dd:ac:9a:ef:dd:b1:2f:62:
7e:03:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:20 2025 by rpki-client