Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866f8c17-1f2b-339c-bc40-93ddda97bf28.roa
File: 866f8c17-1f2b-339c-bc40-93ddda97bf28.roa (raw, json)
Hash identifier: q4Mm/BYd55PrqOPz6ZoGZMBki+oXpMiem5IVdIp+B78=
Subject key identifier: DB:E1:9D:33:C4:1D:ED:7B:21:FB:73:82:74:2B:9C:81:58:3E:31:6D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848897B1BD276929D4728B60126
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866f8c17-1f2b-339c-bc40-93ddda97bf28.roa
Signing time: Tue 14 Jan 2025 02:00:39 +0000
ROA not before: Tue 14 Jan 2025 02:00:39 +0000
ROA not after: Mon 14 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.32.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:89:7b:1b:d2:76:92:9d:47:28:b6:01:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 14 02:00:39 2025 GMT
Not After : Apr 14 01:00:39 2025 GMT
Subject: CN=0bea3581-192b-4733-89e5-c4381067e4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:8c:a2:82:74:e2:cb:f4:94:1a:b8:a5:98:
c5:3d:1c:04:67:71:4d:23:7b:74:e7:ef:bb:26:10:
67:58:eb:2e:2b:87:94:4a:fe:f7:fa:64:10:2f:95:
59:80:91:a5:b0:dd:3e:32:f6:1a:0c:09:64:4b:e9:
1d:a8:b3:15:b3:12:45:88:56:86:6e:cd:67:73:23:
78:e3:b6:cd:13:70:cf:c2:01:1f:67:34:df:74:a9:
6a:de:77:3c:8d:5f:32:f7:b5:af:03:a0:7d:62:cf:
f4:c8:19:21:85:30:3f:36:0f:e5:c4:c1:47:65:30:
67:57:2a:9f:9f:29:b8:25:46:2c:68:81:bd:48:2e:
57:1b:36:f1:21:3c:ec:4b:c2:6b:5d:b1:e8:f8:d2:
1c:f8:fa:64:b8:06:27:70:f5:3a:e3:fd:81:29:65:
18:5c:0a:56:c8:9e:c6:67:6a:e2:f4:7b:14:6e:5c:
ef:c8:6f:bf:02:90:3d:be:55:da:9c:57:21:44:29:
b1:29:4b:ec:a1:9e:ac:35:bc:42:14:e2:f2:29:7a:
de:ea:c3:11:87:75:fe:8c:b4:49:34:55:c3:1a:59:
f0:c0:82:c4:39:23:48:92:87:9b:a7:32:7f:88:ce:
c8:8b:d4:c5:41:29:a1:4c:22:c6:a8:ba:8f:a0:e0:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E1:9D:33:C4:1D:ED:7B:21:FB:73:82:74:2B:9C:81:58:3E:31:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/866f8c17-1f2b-339c-bc40-93ddda97bf28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c6:1d:e0:5f:d9:c9:0f:a6:8e:05:e4:d9:e8:d0:bf:33:80:
09:9d:3a:10:02:89:32:2b:e0:4b:d8:a6:52:de:db:76:5e:60:
f8:5c:9a:21:59:8e:39:f2:02:31:3c:be:0d:22:47:7b:c1:1d:
73:b8:48:78:65:45:91:38:0e:bd:35:ce:2a:55:96:66:5a:c9:
56:df:30:55:b2:99:6c:ad:6b:93:5c:59:9c:67:cb:a9:72:39:
cd:6f:3e:62:18:ec:25:d8:a4:4e:8a:ac:d2:57:72:f7:a7:46:
1e:7d:84:3f:9d:d6:27:4a:de:fb:e5:5c:b3:f8:56:db:ab:a0:
29:5a:66:db:42:34:a7:c5:11:83:eb:81:eb:d6:a6:b4:fc:d8:
b0:20:55:d1:2b:c2:9d:d9:05:7b:8a:c5:a8:3d:82:51:0c:a7:
c4:47:de:b6:89:a8:cf:86:42:b7:53:4f:a6:36:80:f8:e3:60:
73:2e:4c:b8:ce:db:3e:2c:73:77:36:e9:9e:5e:32:aa:00:c4:
c0:eb:83:0f:3b:ea:06:e1:8e:e3:df:88:b9:f5:7a:5d:7b:45:
68:7e:3a:71:d3:02:02:69:4e:36:c2:27:ca:39:5f:de:9d:92:
a8:92:ac:bd:4a:70:3e:5e:33:5b:42:4e:f9:6d:6c:08:89:ef:
81:eb:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:53 2025 by rpki-client