Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cd1f5d-91d4-3d4b-83d1-701626205531.roa
File: 88cd1f5d-91d4-3d4b-83d1-701626205531.roa (raw, json)
Hash identifier: 6dpYbgXSO691G5aENe8xuOy6uIIfcndaRT29j7bLohQ=
Subject key identifier: 46:BD:93:19:41:BA:F9:4E:31:3C:EA:03:9E:A8:BE:77:9F:21:7F:49
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A20981443381F538210BE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cd1f5d-91d4-3d4b-83d1-701626205531.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.36.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:98:14:43:38:1f:53:82:10:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=27b84f97-d189-4f87-8a8c-60f84fb05f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:8e:e4:fb:5f:18:9b:4f:0e:f7:57:45:40:
db:11:d9:02:e0:23:90:63:91:1a:fc:d3:33:92:8c:
64:53:67:b8:ab:f3:d7:83:67:9e:06:1b:4f:60:92:
eb:60:5b:ae:17:b4:4a:64:61:82:4a:3a:d3:b4:bb:
bb:65:8a:b5:26:00:e3:52:1a:7c:c4:95:e8:a3:5c:
f3:a9:38:b0:db:70:cd:e0:ae:40:01:47:98:b7:df:
de:22:fb:a5:7f:48:83:72:88:94:06:3b:73:31:c2:
6b:26:99:78:79:f6:dc:6a:5c:88:b0:96:f2:b4:f0:
da:15:38:30:80:cb:5a:59:7b:8c:53:57:af:55:12:
79:4a:54:49:83:7f:b7:8d:57:f1:af:9e:6a:b2:2f:
ac:b5:77:7c:d4:45:f6:a1:6c:a6:27:a7:93:ec:25:
68:b0:88:a0:e0:25:af:20:dd:f6:ec:5f:5a:be:c1:
ed:26:d1:fb:74:d0:52:9d:71:ed:da:33:18:4e:ab:
4c:f1:a3:91:61:3c:90:7c:4e:4f:20:78:07:f6:67:
de:83:85:f6:a1:4d:ed:e0:ee:4a:b9:40:bf:49:06:
dc:00:79:11:20:66:df:42:80:2a:07:c0:d9:32:be:
ad:57:3f:e6:26:57:7e:23:72:9a:cb:ec:c0:ee:7d:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BD:93:19:41:BA:F9:4E:31:3C:EA:03:9E:A8:BE:77:9F:21:7F:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88cd1f5d-91d4-3d4b-83d1-701626205531.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:b8:c9:cf:43:92:c1:ff:3b:c8:9a:4d:2a:2b:97:72:f8:fe:
d1:65:d8:7f:37:30:07:dc:a9:9f:2d:0a:53:c2:82:3b:25:17:
03:66:82:95:d0:04:c1:57:1d:bf:d3:3c:2c:23:02:5d:ae:fe:
a6:4b:47:0f:95:a9:60:28:cc:f5:bb:48:25:e0:27:c9:10:f4:
a8:19:e1:8c:c5:a6:55:c4:81:21:2f:42:25:96:d3:28:37:f9:
f4:c3:00:8c:d7:a9:49:54:3a:3c:29:5a:01:01:2c:6f:4c:e3:
08:6d:24:3a:a8:6a:0e:03:9d:0a:b2:60:8b:b9:e7:7f:c2:d5:
cc:01:f0:10:91:a9:68:2c:a8:3c:64:e9:c9:57:30:da:0b:ef:
94:54:c1:12:19:26:c5:84:76:f7:f5:f1:be:e8:42:74:c5:f2:
20:5c:8d:61:63:58:bb:df:10:b2:62:c3:a3:02:f3:e8:3f:63:
30:94:1b:87:6b:73:46:58:40:5c:ac:d9:31:d1:00:c7:b9:af:
73:72:81:47:4a:dc:02:c7:ea:00:28:37:d5:83:65:18:44:11:
c4:da:ce:bd:61:24:96:fb:9f:e8:0c:59:25:53:f2:24:22:70:
96:c7:3f:17:7b:6a:e7:47:70:49:58:f3:75:cf:71:39:b2:22:
c3:c3:1d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:16 2025 by rpki-client