Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/702331d7-a2da-34fb-8e7c-a7904182f939.roa
File: 702331d7-a2da-34fb-8e7c-a7904182f939.roa (raw, json)
Hash identifier: lKrNPk28mQPqJGmT98FI+EYrAuo1ASrheZi+NtV24XI=
Subject key identifier: 15:D6:03:57:1D:EB:72:97:15:F3:1E:89:86:38:A8:95:47:7C:3C:3D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A6CB6CC10239B6B1ED542100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/702331d7-a2da-34fb-8e7c-a7904182f939.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.199.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:6c:c1:02:39:b6:b1:ed:54:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=4528d1cd-4cf3-44e4-a1a1-f9db99ff409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:a9:26:01:52:88:7f:bb:66:db:04:6c:9f:
92:6f:8e:44:89:14:ba:f9:b2:bd:ad:76:f4:0d:8e:
2c:7b:23:02:ed:d2:2e:e3:3a:64:ac:5e:6d:78:6b:
45:7d:98:a9:fe:58:1b:0e:41:b3:3d:f0:62:04:40:
54:ee:08:ee:4a:a1:17:62:bd:9d:16:49:c6:f8:b0:
f3:5d:e5:07:59:22:74:0e:90:eb:ec:ff:a3:8b:b8:
36:d2:56:c0:16:f1:52:81:62:b7:7c:f3:35:7e:25:
b4:13:49:32:a6:a9:ba:cc:47:82:04:b1:f9:15:03:
e8:40:35:6d:d5:dd:48:0b:84:13:5e:5c:e3:a0:b5:
b3:b6:df:af:06:45:ee:b5:6d:29:a7:5e:20:25:89:
01:84:30:c9:b8:8d:46:68:c3:b7:25:67:63:15:a4:
9a:c8:f7:b9:41:d8:dd:15:75:bb:05:d6:40:99:07:
52:6c:c8:9a:12:65:12:14:ab:0b:31:af:3a:75:8e:
5d:5c:5c:9c:01:b1:69:27:ed:ad:1c:8d:ed:0f:3f:
e7:79:31:a6:b0:00:a7:bb:f6:e1:f7:c5:0e:fe:88:
45:a9:d1:2f:ba:95:29:d3:63:4d:d1:e0:0e:9b:ea:
5c:13:3e:df:33:4b:2c:d6:74:04:55:14:70:64:26:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D6:03:57:1D:EB:72:97:15:F3:1E:89:86:38:A8:95:47:7C:3C:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/702331d7-a2da-34fb-8e7c-a7904182f939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.199.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:b7:e1:de:20:88:c6:dd:a4:6b:a4:de:77:d6:7f:38:5e:3b:
48:0d:fd:76:4d:bc:da:0d:0b:6b:6d:b2:c3:c0:f1:3c:62:3c:
d4:65:34:fb:39:aa:39:f8:21:ff:24:4b:c0:8c:64:4c:ff:f7:
37:26:50:cc:66:8a:95:13:04:b3:9f:67:e0:ff:9e:71:87:85:
a8:1f:cb:88:b5:97:ec:b9:83:00:e7:a3:d8:89:99:41:1f:72:
87:34:80:5f:7f:6b:74:54:18:e1:ff:9d:1e:8b:83:96:ae:d2:
0d:aa:2f:08:a6:20:d0:ec:14:15:fc:b3:a1:90:a7:47:e2:38:
87:a7:db:e1:f5:1d:0d:90:d0:b5:12:b9:63:c2:69:5a:05:53:
7f:80:9f:cf:ec:11:94:9c:e7:64:49:a2:2c:11:ed:c1:0a:1c:
c2:6f:2a:28:f8:47:3b:ae:cb:51:30:a0:a0:fb:1d:1a:7f:93:
5d:83:db:8c:53:2e:c6:05:6e:60:ea:8f:b1:6d:14:6f:f8:82:
eb:c1:76:14:f8:1e:f3:fa:ea:c3:01:fb:6b:7a:f7:23:5b:cd:
45:30:5e:7c:be:27:ac:fe:cd:7a:f9:e6:85:f4:a1:e7:21:14:
cb:ce:3c:1c:c2:ba:49:7b:77:8a:4e:0a:f4:4b:71:5b:4a:00:
da:d2:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:32 2025 by rpki-client