Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71274d25-048b-3cbf-926b-e33367e763ee.roa
File: 71274d25-048b-3cbf-926b-e33367e763ee.roa (raw, json)
Hash identifier: 4dBo3Bc1CBKdQcdu0aT9+KNSluLHlsQ3K/mHGJhzEbU=
Subject key identifier: 47:3B:7B:54:76:71:BD:6E:7B:00:D3:A8:38:9C:69:E6:65:27:51:C1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494E2EB61F68BE31842FF7D500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71274d25-048b-3cbf-926b-e33367e763ee.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.33.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b6:1f:68:be:31:84:2f:f7:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=3fe03665-41f3-4696-ac92-507e478e1957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:9e:40:3b:54:84:c1:61:3b:2f:11:a5:6e:
1f:e7:6c:8b:00:57:bb:3e:69:c2:84:ab:2f:99:81:
64:0d:d3:c7:c3:18:1c:7f:4d:6b:02:4b:51:d1:fb:
87:f2:ca:2b:6d:02:b3:08:e2:bc:e2:1d:26:88:df:
51:85:a8:2d:ae:83:11:f8:fc:2d:34:8d:d4:ec:c0:
59:22:c7:c9:54:09:82:ae:f9:1d:d3:d3:b5:c8:21:
19:48:8c:34:55:00:2f:b5:7c:88:b7:01:85:61:1f:
23:cd:aa:33:3f:4f:23:69:95:87:fe:fd:8c:5f:d8:
3e:37:26:42:68:06:e1:3f:b3:5c:a4:18:95:2a:01:
25:0b:88:ac:c9:f1:f2:48:7f:39:c8:6b:0a:38:a8:
2f:ca:af:fa:3d:09:78:3a:0f:ba:a1:51:13:a8:9d:
6c:32:5f:bd:bc:a6:29:b6:6f:8c:c5:aa:ac:f8:9a:
f1:03:54:b0:61:94:95:f0:53:fe:99:be:bf:ea:cf:
ab:12:78:38:18:55:33:c1:9c:b0:be:02:f1:c1:6a:
f6:1e:0e:69:b3:d4:0c:19:27:b3:2c:f2:93:7d:a7:
11:de:28:2c:e5:3f:bf:bd:63:69:b9:a5:65:14:83:
3f:59:b4:a6:9d:33:7d:07:46:f3:93:e8:de:35:ce:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3B:7B:54:76:71:BD:6E:7B:00:D3:A8:38:9C:69:E6:65:27:51:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71274d25-048b-3cbf-926b-e33367e763ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:9a:02:a6:d6:e6:30:bb:7b:d9:0e:c3:1b:95:4a:fa:9a:38:
17:9d:a2:d2:57:35:06:2c:41:78:d3:32:2a:09:96:5d:33:b0:
57:5e:be:b0:2a:c4:42:d9:0a:bf:26:bd:a3:78:da:48:32:a7:
ed:55:01:c2:be:4a:a9:5e:b4:5f:09:c7:08:b8:d8:55:dc:ff:
62:d4:0b:06:cd:04:a9:d7:e3:6c:6d:ea:33:76:29:f0:c7:cb:
30:6a:cd:cc:6c:47:6d:fd:35:77:b5:80:f5:93:c9:2d:8a:00:
2a:41:48:f0:bc:c9:0b:21:c6:9e:18:29:a0:1c:9a:12:08:24:
9f:3b:4a:c5:a8:b3:d9:c0:41:7c:05:78:f0:30:4f:3b:f3:7a:
01:46:22:c4:56:f4:30:54:ec:0e:07:70:6e:16:ed:e3:29:63:
f5:16:59:3a:ea:f9:b1:4f:9f:28:13:1b:20:85:9c:f2:7c:33:
39:e3:cf:02:af:57:f1:95:59:48:3d:57:53:50:35:f0:43:10:
21:15:f2:63:e7:b0:b4:84:43:c3:bf:30:1b:bd:4b:a2:2b:b3:
fd:87:9a:7a:80:c5:fa:7f:7a:63:e2:31:39:ff:61:4c:54:2d:
9b:51:50:9a:81:53:38:e4:1d:00:54:f1:c9:9f:7a:c3:1c:db:
52:79:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:44 2025 by rpki-client