Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85a091d8-df8c-3f31-bd0d-9871013ed458.roa
File: 85a091d8-df8c-3f31-bd0d-9871013ed458.roa (raw, json)
Hash identifier: A8PqLlT3VMvumDbWRQ/jZT/P3E4ERCPHC3ezBGBRKm8=
Subject key identifier: 40:6E:66:E5:59:6B:3C:F2:EB:CB:04:B4:EA:B0:F6:B8:30:5B:5F:C9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830B87E83E8B7F2B6087480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85a091d8-df8c-3f31-bd0d-9871013ed458.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 35994
IP address blocks: 23.200.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b8:7e:83:e8:b7:f2:b6:08:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=d0c7d30f-03d7-4d5e-b58c-538e655b49e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0e:a6:4d:16:e2:d3:76:5b:3c:2b:b7:b8:be:
5c:5d:01:51:62:af:0f:53:26:85:aa:ab:af:f7:33:
bd:dd:8a:b0:62:b7:4f:ec:63:48:40:eb:29:0e:78:
6a:c4:b6:86:09:40:fd:f2:64:6c:fb:d7:e6:3a:85:
c8:e6:12:60:65:da:30:83:b7:b8:de:c9:31:d2:73:
6f:52:36:e8:fb:44:2b:2a:e3:ba:b6:75:43:ef:e3:
8a:10:58:f7:32:dd:29:45:c2:11:88:db:30:ca:87:
4a:2c:ab:9d:b3:6e:93:71:e1:2e:94:bf:f6:a2:d0:
2c:1a:48:38:9c:13:b6:a5:3e:c6:83:b4:ca:23:0d:
f3:21:7f:36:af:46:e6:b0:ac:a2:27:bd:62:c2:6c:
09:c2:a5:93:e4:87:49:54:4d:b3:26:b0:80:96:84:
f5:c5:c7:87:bd:cc:a8:49:57:a4:7d:3a:56:7a:ba:
43:2d:bb:65:1d:50:e3:09:1e:c5:8c:bf:12:c8:ac:
01:44:69:91:d4:e8:aa:e2:03:c1:67:ad:85:a0:85:
e2:e1:2c:cc:eb:b7:a2:80:fc:b4:4f:5b:a6:ae:f4:
06:47:f5:ed:28:c1:2c:7e:63:16:cb:86:a9:66:dd:
27:d0:5c:03:20:c9:81:b0:bd:c7:44:c2:e8:12:b4:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6E:66:E5:59:6B:3C:F2:EB:CB:04:B4:EA:B0:F6:B8:30:5B:5F:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85a091d8-df8c-3f31-bd0d-9871013ed458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:f7:e9:5f:86:34:49:85:5b:0d:88:6d:e3:17:f5:7d:55:04:
8d:8a:23:95:58:73:10:cd:31:d6:a0:98:92:c4:b3:6b:5c:52:
96:c9:48:83:54:61:12:93:f9:9d:4e:d4:ec:9d:28:cd:d3:a5:
09:22:03:67:c9:1f:5c:0b:35:9f:a4:2a:7f:63:f7:fa:89:c2:
fe:37:99:1c:c0:7f:56:7a:22:ac:51:dd:a0:56:86:6d:fe:65:
90:ba:5e:aa:a0:38:fd:97:1c:47:99:de:34:01:1b:68:2c:cf:
9a:d3:e7:23:34:6c:37:a2:ee:00:f1:74:80:d5:79:58:25:e8:
de:af:57:ec:bd:6e:ce:19:65:c8:ef:d9:4e:b5:cc:f9:0d:d0:
bc:a7:b4:d0:ee:e6:e5:e6:1f:9f:ef:72:ce:f9:ba:25:2c:36:
d1:23:89:b1:65:0d:fc:55:7e:d5:7b:c9:03:ef:8c:6c:dd:44:
69:84:9f:d2:f8:aa:2e:09:8e:0b:14:c6:e1:fe:62:a9:e1:cd:
a1:a5:21:14:92:1d:d5:20:d3:23:6f:e8:28:c7:a0:9f:b0:1a:
00:be:5b:e2:50:2b:6f:fc:04:18:c9:00:ed:db:e6:5a:0e:d7:
ef:92:07:2f:2b:36:4d:de:71:21:78:98:b0:a4:bf:37:ba:57:
c2:fb:70:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:56 2025 by rpki-client