Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ec7d4ff-25bb-3a19-9f40-d44526888ed1.roa
File: 9ec7d4ff-25bb-3a19-9f40-d44526888ed1.roa (raw, json)
Hash identifier: sUnm0NUwDYNhhXHlonNsjPHhvA29x2wbeqKGhyI9T2s=
Subject key identifier: E4:FB:ED:40:B2:F7:56:C4:76:CC:B1:0E:30:A7:48:1B:C2:2A:5F:4E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BAC33E2DFA5326B06F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ec7d4ff-25bb-3a19-9f40-d44526888ed1.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.203.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ba:c3:3e:2d:fa:53:26:b0:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=5118a47d-473e-4a96-818c-75b0f2ae517e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:84:7d:ea:c9:28:95:9f:09:ea:4a:65:30:
6c:6a:52:12:53:60:43:7c:bf:28:5f:91:43:d3:2e:
52:ea:ac:28:ee:40:93:55:13:3a:e6:0e:8e:ac:84:
9b:8b:8e:99:f5:2b:e1:2c:01:f4:40:30:1a:79:56:
49:9f:e6:38:c9:21:e9:4c:6e:b4:3f:76:f0:70:b4:
0c:30:30:77:e8:ef:0a:ca:83:b2:cf:d0:99:ee:ef:
1f:e9:ae:ad:fe:8f:1b:52:a1:2a:5b:ab:4f:09:e5:
9a:9b:96:f1:de:b9:99:e1:58:41:07:3f:13:dc:5a:
a8:30:1f:fe:09:3a:68:4c:b9:75:c4:a5:4e:5b:ba:
f2:8a:fd:3a:46:0e:64:12:fd:43:6e:ad:9d:73:81:
80:1c:61:58:85:57:6a:4c:e9:ab:99:d6:c9:70:48:
91:c2:d0:5c:3e:41:01:f8:e1:eb:22:35:ad:a6:e9:
4a:0c:cc:ef:97:07:c3:56:ef:ba:3e:1f:35:60:01:
ed:69:db:f3:6e:db:6e:13:63:34:55:89:02:32:cb:
f3:07:3e:8f:51:39:88:8f:7d:76:bf:4c:90:09:a8:
3b:84:8a:de:8d:b4:94:b6:ed:08:1a:1a:95:9a:92:
cf:cd:2a:b1:b5:1d:b3:aa:fb:f2:e0:d8:9c:71:b3:
5e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:ED:40:B2:F7:56:C4:76:CC:B1:0E:30:A7:48:1B:C2:2A:5F:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ec7d4ff-25bb-3a19-9f40-d44526888ed1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:21:cf:50:43:48:0d:bb:d2:ed:f3:5f:a7:b4:f3:81:fc:ae:
b2:eb:35:54:c8:ff:c6:d9:e4:93:4d:5c:87:cc:bd:00:8b:f6:
88:0d:a0:3e:0b:bc:c9:f3:fc:05:c6:32:7a:f0:40:4f:f5:9e:
9a:ff:20:59:85:05:e7:80:e4:b3:2f:12:19:3d:ec:87:78:7f:
04:bb:30:a5:d7:89:82:4a:e2:6b:b8:89:15:7b:b1:04:8b:4f:
0c:2d:98:99:23:35:38:81:e4:c5:0a:47:1c:38:cd:55:dc:d4:
cc:64:0d:4a:4c:c5:36:aa:73:98:66:2f:ee:54:9a:4f:29:ca:
fe:37:76:da:98:ef:75:5a:00:5a:4d:bf:77:99:12:98:92:62:
17:75:79:1b:53:62:b7:cc:e6:7c:cd:50:3b:bd:89:66:2e:07:
fb:1c:a7:b2:42:ed:4b:84:16:52:b7:8b:4c:98:cb:4a:74:55:
3f:76:a4:51:61:22:95:c5:3c:89:85:95:48:89:49:5c:e0:41:
09:9b:b3:24:34:7d:c4:d7:be:09:fc:d1:8c:ad:ed:46:6d:e0:
54:3d:6c:cc:64:48:c0:02:88:62:42:a6:7e:e3:0d:90:49:45:
cb:cf:a5:6d:af:87:fb:36:70:2e:05:19:d4:53:a2:eb:f9:db:
0e:26:42:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:36 2025 by rpki-client