Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d967a7a-3e06-3875-9205-6cc3998ae313.roa
File: 9d967a7a-3e06-3875-9205-6cc3998ae313.roa (raw, json)
Hash identifier: cUJ+aQb4mstu222QKsI3//06lzeV7H7seOh4hEmhJuc=
Subject key identifier: D4:07:18:0F:1D:39:80:7A:B2:34:3E:EC:6B:8C:EF:92:26:F7:CA:88
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209DEC7D41605C2BFCAD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d967a7a-3e06-3875-9205-6cc3998ae313.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.40.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9d:ec:7d:41:60:5c:2b:fc:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=d39d5853-96e7-4ec4-8540-0b4f6d104e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:3e:22:92:58:a6:2b:8e:e4:fd:b0:b9:76:
ab:72:f7:32:70:08:df:38:f3:80:64:05:09:94:72:
f3:8e:1d:19:89:e9:10:a6:f9:bf:9d:25:4c:63:df:
d1:6e:62:1a:e9:2c:2d:7a:5c:50:ca:ee:f6:a3:f9:
66:82:d2:4e:f0:71:22:33:d8:d6:2e:05:62:2e:8f:
1a:42:23:0f:96:43:0c:a3:01:01:17:26:92:29:7b:
7e:a2:2e:6b:f7:d5:4a:3f:87:de:37:39:97:48:f7:
40:fb:ce:b6:77:64:10:b5:5a:dd:93:86:97:ea:00:
63:dc:4d:b8:f6:14:40:b5:28:2d:cb:15:b6:6e:a8:
d0:39:57:d2:2c:09:e9:97:04:5b:a0:d6:20:28:46:
e2:d0:ec:0d:2a:7d:03:14:b2:b3:38:29:53:80:5a:
3c:d3:16:b6:97:a9:30:61:4c:5d:0b:a7:e0:cc:8d:
10:49:bf:3c:48:ef:dd:c5:50:06:ef:d5:4f:28:ee:
ae:24:b1:eb:9a:c1:3b:d0:2f:4a:6d:90:4e:31:92:
f5:46:ab:91:bd:90:10:33:7b:3b:7d:cd:b5:97:23:
9e:ba:d3:58:cb:ec:48:d9:90:2b:d2:22:12:3a:b7:
4f:0c:8f:08:5d:f2:6a:7d:fd:06:32:f2:43:ab:da:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:07:18:0F:1D:39:80:7A:B2:34:3E:EC:6B:8C:EF:92:26:F7:CA:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d967a7a-3e06-3875-9205-6cc3998ae313.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:50:ea:9c:a5:ce:c9:62:c4:c1:16:95:4d:08:81:cc:82:b4:
99:c7:24:e6:d3:39:55:7c:77:6a:63:80:24:84:d3:47:41:8f:
19:7a:42:ed:f3:e1:d7:c3:59:2e:e1:36:bb:43:97:11:ce:a8:
c6:78:85:75:7d:e0:d0:76:7d:76:08:67:1d:4d:fe:a2:ea:60:
ee:b8:29:63:f9:33:4f:fb:31:cb:4c:4e:25:08:33:ef:9f:fd:
8e:59:b6:4d:63:ec:e4:fd:4b:9a:80:7b:e1:8c:e6:c7:45:81:
e1:5f:80:54:6c:d0:21:f7:ae:dd:36:75:21:a8:89:7b:f1:87:
92:50:84:3f:f9:31:d3:57:d5:a4:98:a0:82:e6:39:81:c5:b1:
9c:0f:fb:e3:0f:99:21:65:fa:7e:66:48:fb:36:14:c2:34:42:
88:4f:55:b4:a8:01:ae:1c:29:58:80:49:5b:54:c1:06:2b:bb:
ad:7b:07:02:82:6f:92:12:7e:c7:8d:4a:f6:bc:a7:9b:12:a7:
06:9d:23:2d:01:0d:66:56:ab:95:95:1b:d5:4a:d7:04:48:89:
84:a4:24:dc:16:0b:54:66:7f:db:2b:e9:89:ec:23:b2:38:d9:
6b:42:cb:26:36:41:5a:d2:86:07:b7:7d:c8:1d:af:69:5b:24:
f0:d9:9c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:27 2025 by rpki-client