Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7383d9d2-3a75-31ee-83bd-d81676ba11da.roa
File: 7383d9d2-3a75-31ee-83bd-d81676ba11da.roa (raw, json)
Hash identifier: Xb0VSpNM8cM0e+XzIl2Pr3F6lXnSQfgbUKz2kfIomXI=
Subject key identifier: 08:8A:B5:36:8F:64:32:59:86:00:8E:FB:7A:6A:83:D8:9C:8A:27:DA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A6CB6C8B5C36CCEFEE3BF640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7383d9d2-3a75-31ee-83bd-d81676ba11da.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 35994
IP address blocks: 23.199.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:6c:8b:5c:36:cc:ef:ee:3b:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=070b4ad9-897d-4c71-987e-843ceaf7de0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:22:9c:d1:c8:64:a4:df:c1:73:23:72:b1:
8d:27:7c:73:e3:30:d0:d9:93:d1:e5:f3:a7:19:7f:
a2:f5:aa:81:91:39:64:e8:c7:43:b8:0b:2a:73:c3:
aa:26:0c:03:db:cb:6c:bc:56:51:73:de:5c:c8:75:
f8:33:92:37:35:96:bd:3c:a2:3c:1c:ae:18:ee:9e:
e6:09:ac:55:df:a4:be:f1:8d:da:1f:cd:a0:b4:c8:
db:b0:10:7f:19:d4:00:06:d3:4d:c2:48:95:b5:33:
02:a8:1c:80:53:41:a8:35:e1:b5:b8:ae:23:04:eb:
58:43:ee:f5:d7:d9:e2:26:ac:f1:bf:f1:6c:7f:70:
46:18:47:62:f3:27:99:b8:f8:59:2a:5b:42:29:ea:
17:58:c6:ef:3a:03:75:3c:d5:1d:ae:b5:5b:50:36:
db:d6:50:ce:00:7f:b2:d0:65:ab:4f:9b:7c:9d:60:
b1:ab:f2:7c:1e:24:9f:60:ea:95:42:45:8c:0d:ac:
83:fe:9b:eb:89:8c:44:3c:de:7f:1a:ec:dc:8a:63:
27:f4:91:42:03:3f:e6:a8:19:3e:23:08:fb:e1:f9:
c4:b3:f6:33:09:66:21:bc:56:c3:49:c9:58:6a:e9:
a1:ff:1d:f4:81:a6:7f:1d:56:3f:19:90:40:1e:86:
d4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:B5:36:8F:64:32:59:86:00:8E:FB:7A:6A:83:D8:9C:8A:27:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7383d9d2-3a75-31ee-83bd-d81676ba11da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.199.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:0a:42:74:0a:6c:20:20:15:95:43:57:e3:4a:6b:c0:15:1b:
60:e6:f3:94:a3:e4:ca:5b:86:aa:f3:ac:4b:ef:56:ff:f3:5b:
dd:d9:fc:0d:19:f6:cf:77:8e:0f:09:4c:9f:a0:16:13:b9:4b:
81:3c:a1:4e:c0:d4:d5:4c:6f:58:df:ce:2e:32:1c:e8:5e:8c:
a3:21:d6:7d:80:63:7c:fd:94:c1:ea:83:9b:4f:2e:e0:10:06:
6c:e8:db:dd:35:4d:cd:85:80:d9:5c:2d:ce:13:d2:39:a4:9f:
3d:a9:3b:ee:11:40:29:94:d9:2a:0f:cd:d4:f6:b1:66:ba:cf:
f3:d2:72:ff:f3:35:62:ce:ac:c2:23:9d:e5:75:6f:aa:05:6d:
48:71:62:b8:5b:9c:66:32:32:43:ce:c7:b8:b3:16:62:51:c6:
a9:a1:97:ae:75:26:5a:6d:67:51:93:1a:ac:1b:10:1e:e0:9b:
cb:d9:20:3a:43:06:5f:8f:84:4d:f9:60:48:6f:93:fc:38:70:
00:0c:09:df:01:3f:d5:9d:87:67:b6:3b:44:66:1a:24:d1:21:
02:a3:2d:6a:cd:34:11:57:25:d3:fe:57:7c:87:08:c8:cc:df:
d0:78:ac:d9:52:cc:69:2c:ee:12:e2:d1:02:4c:6d:f9:12:c6:
03:5e:89:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:24 2025 by rpki-client