Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0572ad1-8045-3c6d-9907-9a86871dee9d.roa
File: a0572ad1-8045-3c6d-9907-9a86871dee9d.roa (raw, json)
Hash identifier: BWJFRcuW6c4DkoqC+4Nmjb9EGdiBjId5e9vMZVL7xxw=
Subject key identifier: 32:7B:E1:5D:2C:16:B1:3A:B4:5E:CC:4A:72:EE:E7:C2:89:65:CE:25
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB69E0695E3E9D5B5CDC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0572ad1-8045-3c6d-9907-9a86871dee9d.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.56.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:69:e0:69:5e:3e:9d:5b:5c:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=500e85a7-9a70-4ad8-b52a-f77f0ee5b9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:50:27:52:7a:bb:60:37:93:8e:39:92:b5:74:
62:f5:cb:dc:a6:29:15:fc:1c:d4:27:23:1e:b1:16:
e1:09:4c:b5:4f:d0:7a:5d:df:30:58:71:0f:8d:23:
9a:e8:be:ce:b4:7f:f1:3d:42:6a:bb:68:c8:46:37:
b7:b0:67:69:d4:f6:2d:98:ac:5e:7d:92:3e:22:8f:
bb:50:83:02:9f:61:9e:30:92:b9:45:d8:15:b6:96:
0b:8c:b0:38:91:80:1b:2e:ee:ef:4e:93:86:f2:a3:
0b:61:31:2a:ff:df:73:9c:dc:fc:57:fa:21:fe:d0:
85:83:15:f3:3c:60:ba:c2:52:bc:66:73:a3:a6:24:
e0:2b:61:59:79:72:ce:7a:a7:ef:f2:d0:23:a5:df:
bd:79:79:33:f8:a1:57:a3:97:e0:ba:70:56:2c:02:
19:25:e8:7c:b6:71:b7:3c:d5:31:6d:ac:2e:24:35:
10:b5:cb:db:e5:fe:44:a5:97:21:5e:45:51:96:78:
26:11:b7:77:72:8b:e2:d8:72:a2:14:c1:09:1f:4c:
c9:06:7c:dc:7e:d9:8a:d7:7c:93:2c:3f:de:fd:4a:
00:1e:5e:5a:99:a8:a0:e1:15:76:7e:51:b0:20:6e:
4c:f5:f8:d7:fd:20:eb:e7:9f:4d:e9:b9:0f:8a:e8:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7B:E1:5D:2C:16:B1:3A:B4:5E:CC:4A:72:EE:E7:C2:89:65:CE:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a0572ad1-8045-3c6d-9907-9a86871dee9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.56.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:97:8f:98:44:0d:73:f9:9b:0f:a4:8a:b6:44:de:54:2b:99:
91:4b:b5:bd:0a:c1:de:fd:23:47:1f:53:a5:40:ea:8c:44:ae:
f0:0c:96:7a:9c:98:98:fc:e2:8c:24:45:8b:0f:45:08:ee:5b:
67:eb:5e:78:34:f1:ec:9d:19:63:ea:d4:73:83:08:a5:3e:a4:
10:9c:39:05:71:76:75:79:e7:5f:6b:75:bb:30:48:92:ee:5b:
db:7a:29:bd:ac:aa:46:17:5e:1c:ac:85:71:0b:9e:d0:d7:c3:
51:40:5a:73:59:01:a6:dc:51:2d:3d:e5:f2:7a:dd:09:e0:c9:
dc:87:8d:4d:9d:28:5f:12:d3:38:3e:4c:db:dc:19:8a:4e:1e:
52:e1:9a:b8:d1:95:d8:2b:03:3a:15:44:69:be:f6:02:6f:68:
78:17:48:c1:0d:35:7f:76:89:ad:3b:a1:cc:2e:e8:fb:c3:58:
fd:37:ac:03:a7:cd:01:da:95:0f:b2:d5:0c:e2:3b:80:17:42:
f9:7f:a9:78:ed:e6:cd:13:f6:c2:49:0d:81:b7:1b:ad:23:1a:
34:1d:0f:4f:b5:cd:f5:b8:92:8b:e0:c1:7f:bc:ce:32:17:46:
b3:3d:2f:e4:5c:c6:b4:c5:71:9f:58:80:d5:96:2e:1e:10:8b:
87:8c:4b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:07 2025 by rpki-client