Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3d83cba-04d8-3b99-bf44-d687c57affe2.roa
File: a3d83cba-04d8-3b99-bf44-d687c57affe2.roa (raw, json)
Hash identifier: 6xIV7DstqcspZdp/38G2qaKEwHdusFMh/BlhrFZeniA=
Subject key identifier: E1:AD:5D:2A:E6:C2:18:2E:C0:7E:FE:63:69:11:8C:44:01:7C:85:CD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848811B17BB02C5613A90C7E100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3d83cba-04d8-3b99-bf44-d687c57affe2.roa
Signing time: Sat 11 Jan 2025 02:00:39 +0000
ROA not before: Sat 11 Jan 2025 02:00:39 +0000
ROA not after: Fri 11 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.49.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:81:1b:17:bb:02:c5:61:3a:90:c7:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 11 02:00:39 2025 GMT
Not After : Apr 11 01:00:39 2025 GMT
Subject: CN=9ed8bc03-6458-43fd-bfcc-6b07317b8d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:64:26:bc:cc:08:ca:8a:87:08:f7:42:42:42:
54:1a:f1:82:e0:82:2e:0a:e1:4c:b5:3c:84:7d:df:
64:78:7f:d5:72:89:e9:48:13:c3:17:53:5b:d9:78:
9e:f7:a5:32:ed:28:67:3f:6c:fc:b8:e7:9d:74:25:
45:d7:28:b6:a3:31:15:54:80:34:20:b8:d3:48:db:
13:df:5d:b0:fc:b0:fb:62:37:dc:6a:8d:05:43:86:
f6:90:52:52:53:3c:79:f2:35:3a:8e:a7:8f:ff:ce:
8b:dc:e5:00:59:7a:2e:d7:87:1f:74:38:6d:bc:75:
0f:10:a8:2d:5c:fb:c4:80:3e:f6:f7:da:0c:ef:86:
77:97:56:0e:a7:a0:13:90:5e:10:16:ba:79:53:ea:
c0:da:17:ae:ab:51:0d:74:91:4e:2e:1f:ba:bb:a4:
97:11:04:90:a3:b6:3e:8a:1e:3b:8a:a1:41:9b:91:
9f:1e:6c:f5:9e:92:7a:d7:f0:f6:9c:96:f1:28:cc:
72:3b:7b:17:17:94:85:f4:54:83:17:7b:f7:51:ce:
ed:92:e9:16:a7:4d:13:af:65:89:27:7b:74:cf:75:
3a:25:da:13:45:76:64:29:88:dc:04:4a:e2:a0:8c:
07:bd:be:93:65:11:99:ae:76:6c:3e:9e:07:20:2c:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AD:5D:2A:E6:C2:18:2E:C0:7E:FE:63:69:11:8C:44:01:7C:85:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3d83cba-04d8-3b99-bf44-d687c57affe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.49.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:73:54:ba:96:5c:87:93:c0:7e:ad:6d:71:7a:77:20:cc:d2:
a8:57:b0:42:f4:02:47:2b:bf:04:04:d2:c8:7b:f4:52:65:b7:
6c:2c:c1:8f:67:80:50:da:9b:6d:30:d2:cd:a4:71:1d:8c:5d:
e3:0d:e7:d3:48:ac:21:71:a5:b0:5c:a2:7a:57:c5:2e:d6:5a:
91:e6:87:41:54:de:eb:99:9f:81:8c:0d:ae:43:23:6b:a2:5c:
74:7a:b3:f1:d9:27:a9:03:3b:40:8c:b2:da:cf:7c:5d:b7:34:
2e:93:fb:ed:e2:38:bc:8c:77:c5:ac:d3:7b:a3:f3:ee:90:5c:
a5:db:0c:b5:95:57:3f:ce:38:4a:62:da:f2:88:be:b3:c3:67:
65:29:b6:80:6c:cc:bb:32:da:00:ae:45:72:e2:29:fd:b5:22:
c9:88:5f:c9:86:ce:71:e5:5e:96:c5:33:80:8e:4c:96:5a:8a:
42:41:d8:90:cb:a1:75:f0:25:5a:12:02:8b:9d:6d:91:21:f7:
10:06:ad:2f:81:60:0b:22:92:53:bd:1a:f1:24:31:59:40:1a:
20:8b:db:b5:55:b2:80:43:5f:ed:a5:fb:99:c1:01:a4:00:c1:
ce:02:93:00:a4:2a:61:f0:7f:59:82:04:c0:f7:3a:ed:3f:1d:
a6:c4:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:37 2025 by rpki-client