Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/951e92c4-60b2-3938-8b8e-2136c0cef151.roa
File: 951e92c4-60b2-3938-8b8e-2136c0cef151.roa (raw, json)
Hash identifier: ToFeX+QyCZr2/JLb8oVS3kuWm5GPktUPUi6BMkLr2qI=
Subject key identifier: 70:C0:55:58:91:D9:FE:E7:27:2A:68:88:16:E5:B5:C9:92:52:FB:63
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848CC7BA7D4B59C837B164B0800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/951e92c4-60b2-3938-8b8e-2136c0cef151.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.220.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:a7:d4:b5:9c:83:7b:16:4b:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=b3787cdb-20a5-4e91-a7e8-27265c3414b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:4f:6e:0e:3a:5b:70:60:2c:86:19:19:a9:
5c:2a:24:51:e8:b2:0e:b5:4d:29:c6:9e:12:d9:72:
35:3d:14:f8:59:40:49:a6:c1:1a:69:ee:ee:25:62:
37:82:dd:6d:9c:e3:2b:03:95:35:e7:cf:d4:55:96:
4b:85:dd:e9:5d:47:e7:16:36:d0:f5:63:e0:a8:7f:
1d:6f:05:91:85:1f:eb:c7:67:d1:f2:77:e9:54:de:
ce:20:0f:b0:4b:e1:6e:30:9c:61:ea:1f:f8:a7:3c:
a3:36:68:aa:73:28:8c:bf:81:66:c5:73:cd:2a:ef:
9d:37:7c:4a:93:ed:44:cd:df:5d:04:29:8a:2e:50:
88:16:91:67:69:e6:8b:d8:0b:12:0a:a7:b5:32:39:
a6:ff:d8:01:fe:ad:c5:b0:7e:9c:e9:e1:4f:21:c9:
00:62:e8:47:05:14:52:c4:e6:1c:ba:16:27:12:68:
0b:ed:be:fe:22:63:26:e1:28:ec:8c:0e:b8:f8:c1:
ed:4f:b3:dd:97:8c:28:e4:ea:4e:83:27:1a:b3:36:
a2:f7:6f:63:35:99:bf:8e:8b:b1:87:ad:90:c7:91:
71:db:da:e5:f7:8a:f9:e3:c9:f9:19:c3:17:aa:e1:
98:39:e2:b9:95:74:0e:be:44:f6:42:b9:e3:0b:67:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C0:55:58:91:D9:FE:E7:27:2A:68:88:16:E5:B5:C9:92:52:FB:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/951e92c4-60b2-3938-8b8e-2136c0cef151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.220.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:75:2f:db:de:84:ab:4b:7f:9a:e3:5d:00:6d:29:13:84:3b:
f9:78:4e:1c:2c:e5:68:23:a3:bb:ef:34:76:68:9d:b6:75:eb:
4e:70:90:f1:51:43:a0:20:a3:1a:68:89:5d:0f:25:aa:d9:37:
02:5c:7b:31:c3:5d:7b:9d:c6:06:2a:60:7c:be:87:15:b5:49:
84:fa:cc:54:63:38:92:82:01:e5:85:70:83:92:bd:19:50:5c:
c3:af:a1:dc:5d:b3:3e:8f:03:51:e0:e7:fc:33:e2:65:86:39:
79:af:d5:1d:aa:05:37:2e:92:c8:b8:28:c6:81:cc:1d:58:4b:
8b:4a:bd:f7:c7:b9:e6:0c:46:b8:c3:15:ce:0a:87:90:0e:79:
f8:28:83:0a:90:3b:00:6f:72:e9:48:d7:d2:56:c8:4a:b4:f6:
8c:5e:3c:e2:61:08:4d:ac:ce:0d:d1:3d:08:b2:b4:68:82:46:
be:ba:ca:ce:68:a1:92:2d:0b:28:eb:78:32:74:78:8b:48:58:
d0:a1:43:60:f1:f1:d3:8c:7f:c6:8c:67:38:83:2f:45:e0:ee:
e0:58:e1:ae:46:f5:f6:03:ea:12:b3:77:71:f5:15:6a:8f:ca:
7d:3c:d5:ca:33:a7:06:e2:27:7f:46:ef:18:bb:af:64:bd:e2:
9d:ec:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:35 2025 by rpki-client