Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c2f1a51-8782-369d-8ee3-2041611ab896.roa
File: 9c2f1a51-8782-369d-8ee3-2041611ab896.roa (raw, json)
Hash identifier: tp7LeXz69tq84iLv3FtmWafkpZusdl8++n+EkKl2WLw=
Subject key identifier: E0:E6:AC:75:41:A8:B7:AB:AB:3B:16:D1:54:00:C6:C0:59:8B:17:48
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340B5A8CFB3B35A3CC70700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c2f1a51-8782-369d-8ee3-2041611ab896.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.203.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b5:a8:cf:b3:b3:5a:3c:c7:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=b588a47d-067a-42bf-bbb4-f8a5726c0416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:3c:99:b0:fd:5c:90:8d:81:5c:f9:dc:64:
38:76:a7:0a:8d:c6:47:6a:b5:fb:b5:13:9f:29:1f:
62:a9:0e:96:6e:cb:cd:4d:c6:e4:19:f7:3b:b3:d5:
96:e1:d7:34:0e:e7:8d:5b:96:cf:db:2a:c1:de:d0:
42:32:6f:fd:e7:c1:05:7f:f7:89:1f:be:90:41:45:
f8:fb:5f:ed:cf:43:28:06:c3:40:5c:9e:9d:03:12:
9f:ff:17:4f:b9:5c:e0:f0:c6:ed:b2:fc:f4:67:9c:
11:fd:45:6f:91:36:45:60:ab:d6:7b:0e:5e:c5:95:
52:80:25:f2:bb:45:1f:8d:b4:aa:00:a3:b4:f6:b1:
f3:66:e7:0e:7a:ba:e7:46:84:c0:0f:95:cb:42:bc:
34:45:6d:20:ba:d6:37:c8:54:0c:5f:ff:e6:8e:68:
b6:7f:6c:4b:b0:1a:ef:95:78:88:9d:7e:16:b4:a1:
45:65:5a:ee:09:0a:5e:7b:7e:f0:8c:42:00:21:62:
10:c7:77:67:a3:e7:61:7b:c7:73:15:71:90:a6:cc:
3c:08:22:d6:11:c8:4d:93:a7:ad:8e:cb:47:26:2e:
60:a2:7a:36:df:d9:40:05:ac:d4:69:d8:eb:2c:d8:
97:09:57:7a:81:1a:d7:c8:1e:7e:43:37:e6:28:da:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:AC:75:41:A8:B7:AB:AB:3B:16:D1:54:00:C6:C0:59:8B:17:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c2f1a51-8782-369d-8ee3-2041611ab896.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:4a:3e:9a:43:e1:f6:3d:1c:ff:91:79:3f:2e:d8:e6:3f:fe:
c2:0f:5d:d9:dc:ed:08:d9:18:59:23:24:03:cc:24:3a:6d:bf:
c1:e2:20:86:b9:1a:70:c1:19:c3:0b:0b:7e:1d:94:3b:8b:b9:
46:c9:ac:e4:6d:fa:df:0d:46:c5:79:44:8e:84:50:c7:00:84:
f8:9c:d3:f9:f4:f1:20:b3:74:22:ba:74:74:b9:4e:fb:30:84:
50:ec:e1:36:e4:58:97:17:cb:a8:07:e4:99:95:30:c1:a1:5b:
d0:16:0a:30:4b:5e:73:50:ec:f6:c6:36:cc:4b:ac:e2:58:e2:
1b:67:1a:95:ec:7e:81:b0:51:bd:9d:ae:74:ac:ae:41:d1:fb:
97:2d:db:38:f4:1e:51:d8:8f:7a:eb:af:8e:f1:c9:8c:a8:5a:
18:5b:e4:01:8b:a1:c2:01:e1:62:63:4d:87:be:0a:a6:ec:25:
33:9f:fd:c2:fb:24:3f:e7:bf:f6:2c:f1:0c:d8:3a:09:1f:c6:
fa:e1:93:70:53:40:a0:fa:cb:84:57:70:3d:fb:66:f1:17:ee:
d7:83:ba:c6:96:44:7a:e3:22:d8:82:5c:7e:81:5d:ba:f3:27:
f1:d9:dc:db:02:6c:83:d7:74:05:cd:a5:9b:21:d8:fa:7f:db:
74:f6:ba:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:16 2025 by rpki-client