Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7943d69d-e4e4-314c-b67b-4e28ffaf7f34.roa
File: 7943d69d-e4e4-314c-b67b-4e28ffaf7f34.roa (raw, json)
Hash identifier: 0Dfm2gUVycLimuiuKuSohZ/ymwzwVzPWL12A5wOXNYs=
Subject key identifier: 61:5A:C7:02:44:99:40:48:03:08:2C:13:B9:29:96:90:8D:D4:86:28
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F65BD59A7014B4E2CDDEB400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7943d69d-e4e4-314c-b67b-4e28ffaf7f34.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 16625
IP address blocks: 23.36.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d5:9a:70:14:b4:e2:cd:de:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=5903ff2c-41e8-4c3e-9d76-6e1fb6a1f292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:21:81:12:ee:f0:43:e0:1f:be:00:16:65:48:
44:7a:10:4d:e3:20:ba:24:f7:ae:19:c1:ea:f7:af:
4a:ee:85:b3:8d:4a:b4:82:2d:90:20:fc:af:6f:36:
9d:f2:d9:3a:9e:2e:df:7f:84:83:f7:d8:75:e7:6f:
39:90:3c:ef:22:9b:96:32:58:64:be:2b:7f:47:fd:
e7:1d:91:35:c3:95:a0:2a:b2:85:eb:5b:82:a1:37:
a1:12:38:40:16:a7:6d:18:64:a0:4f:11:34:de:d4:
d9:89:1d:0a:ac:0d:6d:ee:d4:40:bf:e7:82:3e:8f:
4b:b7:59:ce:56:6b:89:28:e5:30:83:0d:21:21:ca:
65:f1:55:fe:3e:b1:a2:07:5e:7f:44:7d:b6:87:c5:
78:be:eb:a6:d3:5b:d7:99:ea:5a:ed:bb:2c:7d:ca:
76:8f:f6:58:16:90:75:b2:dd:f8:f8:27:15:ed:75:
f9:03:25:3d:7b:9e:ba:71:f0:0d:2c:96:c5:70:2e:
dd:e3:cd:07:6b:8a:c6:48:84:ed:96:b5:0c:a9:85:
dd:ae:03:a7:9b:fa:e0:ee:67:57:bd:48:d4:c9:84:
eb:f0:6e:be:a4:a7:7e:9a:14:29:46:81:61:49:4e:
50:c3:e9:43:45:7e:24:91:ea:21:ae:64:d5:95:cf:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5A:C7:02:44:99:40:48:03:08:2C:13:B9:29:96:90:8D:D4:86:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7943d69d-e4e4-314c-b67b-4e28ffaf7f34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:47:99:37:91:0c:9c:20:17:fe:a9:06:8c:ff:ec:9e:77:c6:
c2:d1:83:55:c5:44:e9:53:7a:5d:bf:eb:7c:e5:b1:e5:87:f0:
e9:72:7a:67:c2:4a:3b:52:4c:06:1e:44:f7:f1:08:8a:06:29:
9b:e1:78:36:a0:a0:2d:16:37:da:87:75:3d:a7:63:69:1c:e4:
02:b7:51:ec:c4:b2:f4:2f:8d:f0:ed:9e:54:7c:49:f2:67:f3:
8f:a3:02:e2:34:f7:45:61:a4:95:5b:a7:42:2d:b8:10:c1:80:
63:84:2c:d2:cd:04:0f:4b:aa:95:96:8d:7d:9c:af:7c:53:59:
39:fb:bf:d0:59:c0:37:5e:50:f4:71:c8:45:3f:b7:06:59:0b:
0e:d9:d7:ca:18:30:d6:85:e3:1f:31:ae:0d:b1:29:80:c4:c6:
e7:a4:09:ca:7d:5b:94:3a:cb:a5:80:30:46:b3:9a:9d:69:13:
72:d6:23:38:52:37:19:dc:2b:0e:db:64:e0:98:ea:02:a8:cf:
8a:a6:0e:f4:0b:65:41:b3:7a:9e:a3:37:f4:26:42:99:fc:63:
10:c7:0d:47:8a:69:ba:c8:f9:d5:67:c5:f1:90:be:74:44:67:
5f:ed:dc:7b:58:10:c7:cb:35:6a:45:a2:ea:ce:77:e3:0f:fc:
0b:81:95:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:07 2025 by rpki-client