Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa
File: 94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa (raw, json)
Hash identifier: 8odiQ2S1dwA0955f32esHwhAi+mbdduXKqfs6M4XBTY=
Subject key identifier: 76:61:AB:47:FA:D3:46:72:A7:5E:2B:A0:AD:2C:62:3A:9E:C1:EC:BB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB4A394F853379DE8346C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 35994
IP address blocks: 23.44.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4a:39:4f:85:33:79:de:83:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=f881e7a0-c7b2-4a3f-90d6-dc093891afcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:8d:6a:90:6e:58:50:af:d6:56:01:c1:f1:
6b:2b:5c:23:72:15:ac:bd:0d:7d:e9:3e:48:ed:37:
bb:22:06:f1:27:09:9f:c3:fc:d0:46:1a:5a:3c:cf:
0c:c7:39:b0:1e:64:2d:41:c4:55:53:ff:a3:5b:ec:
c8:2a:fb:6f:86:bf:d1:98:dc:9e:6f:94:e1:85:d0:
9a:1f:78:74:15:7d:cd:ca:b5:58:c5:52:12:0f:6d:
cb:94:b9:0c:1a:cd:de:18:8a:0c:d9:42:5f:8b:09:
32:e9:bf:c8:ea:7c:68:8c:ca:1e:58:ba:fc:6d:79:
db:48:60:65:8e:f6:70:9d:57:d9:84:5e:59:0c:b0:
30:15:3b:35:50:22:cf:86:9b:a1:6e:f4:f6:a2:6d:
ec:30:94:1b:5c:33:89:40:33:7f:43:a4:61:65:a1:
9e:cf:d3:4c:73:61:1a:12:60:1a:bd:a3:77:97:66:
a5:3e:90:db:db:dc:10:44:ce:b6:7a:33:1b:52:5c:
22:76:bd:ad:5f:71:55:2b:68:5a:81:29:fd:f2:f9:
75:5c:ec:89:66:44:85:47:39:92:56:d4:e6:66:16:
69:f5:63:21:26:fc:ac:93:a4:1f:ad:04:be:ac:f0:
bd:00:b4:9e:fb:6c:cf:44:0c:cc:50:ec:69:dc:a7:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:61:AB:47:FA:D3:46:72:A7:5E:2B:A0:AD:2C:62:3A:9E:C1:EC:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:16:02:91:59:72:70:13:fe:13:fa:5f:0c:db:8f:ee:8e:87:
40:81:1a:97:40:96:82:94:64:6f:5c:b6:a6:a0:2d:2a:2b:e6:
11:2d:1d:4f:f9:9c:01:da:27:17:d8:58:e8:78:f8:fa:d0:5e:
77:e9:7b:f7:22:ed:b3:df:4e:24:ca:82:cc:42:e5:e7:eb:e2:
9b:64:f7:ad:4d:82:c5:ce:f1:97:6a:cf:73:0c:12:97:b3:6b:
e0:2e:00:1d:ec:f4:30:ce:dd:08:cc:5b:84:76:e5:63:14:98:
f3:35:a3:a5:75:b2:dd:f9:45:2b:2e:80:57:92:7c:1e:03:d6:
bf:90:9c:05:86:a3:0e:e2:34:51:34:d4:59:44:03:0f:e3:f1:
46:f1:2d:2f:7c:66:38:54:a2:6d:85:82:db:67:63:ca:34:8d:
ae:96:7c:19:0c:b2:27:18:e7:7f:ef:65:fc:85:ed:83:57:b5:
f8:e2:17:25:79:31:70:93:26:52:4d:09:77:3b:a4:66:b2:51:
b7:bd:13:b4:a7:74:f2:72:dd:34:bc:85:a8:35:35:78:b6:c8:
b3:16:ad:1f:ad:82:00:76:67:2b:9b:44:a6:31:55:31:d7:39:
b8:38:3f:d5:9c:77:4f:e9:25:48:a4:46:47:ff:59:f5:16:91:
39:20:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:28 2025 by rpki-client