Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72af04e0-953c-3693-9995-ef46a31663d5.roa
File: 72af04e0-953c-3693-9995-ef46a31663d5.roa (raw, json)
Hash identifier: bqppG1oNGd3sjoKwrmPVjRBirJ0C7hI1pqwV0mQbHsA=
Subject key identifier: 3D:B1:FA:CD:55:4C:F6:9C:C5:2B:C3:30:A0:54:DF:81:04:A3:15:15
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A2092C1F5886CED41BD0640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72af04e0-953c-3693-9995-ef46a31663d5.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.38.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:92:c1:f5:88:6c:ed:41:bd:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=7c00c366-c7b6-4381-812c-536154bec7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:fa:c1:da:6c:6e:8e:4a:30:3c:bd:a7:2f:
cb:d1:37:07:25:dc:92:3e:ed:7f:b7:48:8c:6f:28:
e8:74:7b:76:fe:44:0d:53:02:bd:d5:f9:23:e8:3a:
cd:09:5c:53:b7:17:5b:f9:26:a1:87:b6:9c:7f:ec:
dc:eb:88:c4:0d:b0:0c:5c:b0:6c:b0:6f:95:60:af:
1f:c4:5a:9b:69:c3:61:b7:66:d1:61:19:73:12:87:
96:17:dd:e6:d9:fb:f4:10:80:38:b4:82:6f:1b:cd:
20:1f:82:29:cf:c2:5b:2f:66:80:4e:9c:43:56:20:
a2:5f:31:03:05:88:f0:93:1d:e4:49:e9:d6:a8:32:
f8:b6:1a:20:7b:60:82:77:3e:42:f0:f7:af:0d:61:
7c:af:cd:8a:e7:5b:6c:4e:e8:72:58:44:23:e8:8e:
e3:b7:62:0f:d3:a8:5c:c6:ed:89:66:28:ec:25:65:
e6:b6:6b:64:9b:c4:6a:48:75:4e:64:fa:ed:12:1f:
3c:42:a1:5f:ae:de:d2:b7:57:55:49:14:67:82:af:
1c:54:98:06:02:60:8b:c1:99:5d:e1:f6:1b:72:e7:
34:5f:5d:1b:1e:29:06:30:35:12:60:ea:e3:00:4b:
ea:f3:a3:36:8d:ee:86:f1:e4:ad:fc:86:36:2b:f3:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:FA:CD:55:4C:F6:9C:C5:2B:C3:30:A0:54:DF:81:04:A3:15:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72af04e0-953c-3693-9995-ef46a31663d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:9b:21:95:39:c7:63:0b:8a:3f:77:f6:20:ae:aa:7b:a2:fb:
4d:65:47:10:72:7a:1b:72:89:6c:7e:d5:97:2a:81:68:9d:d0:
0c:fe:cf:e4:a6:9b:70:a2:2c:da:ef:43:80:f9:8e:7b:5c:50:
43:d7:08:ad:5f:e5:e2:fa:67:96:26:9c:dd:74:0c:83:bf:03:
fc:7d:ec:84:b1:0a:59:7f:13:4c:3e:a2:73:e8:32:c8:9e:c6:
22:39:d1:b1:24:82:b7:93:80:ca:f6:47:5e:6b:36:36:7a:a5:
e8:aa:a5:05:bc:98:f7:16:4c:90:f4:4e:37:d3:09:50:9b:8e:
19:df:95:ae:53:68:86:4d:ec:99:8c:ef:2c:e2:10:01:7b:ca:
92:04:29:ea:bb:9a:5e:65:82:25:fa:b0:0f:8c:12:01:2a:0d:
0a:7d:01:6b:03:96:6a:a1:84:31:2a:f5:ae:b5:00:29:9e:8c:
7c:e3:7f:f2:69:20:4e:b7:82:47:44:af:38:4b:b9:bb:e8:27:
1b:de:f4:b8:f4:11:af:a0:c8:73:6e:72:da:02:ff:c9:47:6f:
8f:c9:df:88:94:05:10:b1:93:fa:90:ca:4c:7e:76:e7:01:e9:
97:f0:25:11:fd:b1:c8:d1:1a:38:2c:1b:16:03:e0:28:8f:f5:
ce:ce:b6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:17 2025 by rpki-client