Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c923ecc-ee26-3b89-bdd3-1e5444c353eb.roa
File: 7c923ecc-ee26-3b89-bdd3-1e5444c353eb.roa (raw, json)
Hash identifier: CdMjh2Z/xBSceNPLi4XudA72LjxJvNHk5/QC2BXoyV4=
Subject key identifier: 62:5E:CD:F5:D4:97:EA:69:35:55:51:07:FA:DD:D0:19:AA:0D:6C:63
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584898D61C8C93C233812B1C4790
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c923ecc-ee26-3b89-bdd3-1e5444c353eb.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.192.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:1c:8c:93:c2:33:81:2b:1c:47:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=a9cad8e7-c983-46a3-a8d7-3089847d65e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:81:e7:2c:84:0d:e6:9c:7e:f2:dc:e7:bc:
d5:ab:88:44:0b:96:b6:bd:1b:0c:95:7b:51:40:ea:
fe:4b:ae:4d:11:f6:49:12:17:cf:39:51:33:23:ca:
94:11:8f:a0:2d:c8:fc:cf:46:c1:85:7b:fe:58:bd:
d9:bb:e0:11:f8:d2:33:bd:d5:6e:57:70:2f:eb:a0:
5d:77:d5:57:9a:68:7d:52:54:d8:86:d4:ed:c0:fe:
30:cf:07:4b:87:6b:ba:6c:03:45:49:16:00:8b:97:
1a:7f:3e:66:ca:6c:3c:ad:c5:e3:41:d2:25:3d:20:
6b:e8:73:ff:3f:af:b6:65:a0:27:84:28:98:18:7e:
70:6d:16:8f:3a:d5:91:81:60:81:6b:37:cf:a4:d7:
07:b4:e4:f4:da:e5:47:c4:25:08:5c:6f:d8:51:97:
b2:74:cb:8e:2f:d0:24:de:7e:9a:f9:bd:01:0c:27:
04:5e:27:97:77:36:1e:80:5e:44:64:ec:03:2f:fb:
b5:6e:a0:68:a8:96:0a:4a:76:d8:fe:73:63:17:9c:
e7:a3:be:7b:9d:d0:a8:ae:b1:41:56:18:4d:60:21:
0c:c7:f9:9d:86:32:e5:bd:0c:a8:06:41:f8:11:8e:
7e:15:36:45:a3:44:64:30:53:4f:d4:db:fc:79:e6:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5E:CD:F5:D4:97:EA:69:35:55:51:07:FA:DD:D0:19:AA:0D:6C:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c923ecc-ee26-3b89-bdd3-1e5444c353eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.192.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:6f:de:3c:07:8b:60:66:c0:f5:8f:cc:a5:78:f7:b0:ac:9d:
9b:6e:99:28:4b:d7:85:7c:05:f5:5b:2c:3c:ec:4d:c9:99:f2:
39:e1:1a:82:74:b7:39:f4:d4:bc:0b:f3:6e:69:42:df:d7:af:
91:aa:c1:d7:91:4a:9d:f8:2c:2b:6c:ae:95:ed:34:68:87:44:
2d:9e:db:13:8c:16:ee:d4:12:1b:46:2f:e2:ed:2d:03:3e:cc:
8c:22:e3:c9:f7:cf:14:75:03:13:c4:2e:49:74:ee:9e:8e:e2:
19:df:2d:8c:8d:f8:3b:95:11:6c:78:94:db:8d:e4:58:2c:24:
e5:28:13:1d:60:56:10:59:18:9d:fd:a7:5f:0f:cf:7f:ef:bc:
bf:d5:2e:4e:9b:83:7b:d8:28:08:26:ef:65:0f:64:5a:46:c7:
a3:b4:26:1b:91:cf:0b:b4:69:79:5f:5b:a3:d8:c4:31:59:9a:
a2:b6:3d:18:80:4a:68:50:fa:cc:b9:e8:50:ed:b0:d2:de:45:
a0:4a:05:a0:c4:db:fc:13:de:fc:20:30:c9:1c:e8:d4:c5:52:
f4:ef:04:1f:93:32:4f:8b:a2:71:7f:c8:3e:ca:a8:64:cb:66:
01:bb:83:56:50:89:76:ae:fb:bd:89:1a:2c:1f:b4:cb:c3:f4:
60:40:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:42 2025 by rpki-client