Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a74ef77c-a1d9-379a-a9ba-aa655badf17e.roa
File: a74ef77c-a1d9-379a-a9ba-aa655badf17e.roa (raw, json)
Hash identifier: j7urqA5yiudQ9747K+1jepd4PmSZZs1G6GK4bd6tp7o=
Subject key identifier: 77:BF:36:E5:F6:B2:B6:96:AC:12:CC:D7:50:7B:40:E9:42:9F:03:3E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848C9B0E2B29BA21839860FE2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a74ef77c-a1d9-379a-a9ba-aa655badf17e.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.219.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:e2:b2:9b:a2:18:39:86:0f:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=728d476f-b62a-44ef-872b-7bfffd9827a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:86:4a:57:bc:d0:fc:a7:ab:60:c3:02:78:
fd:42:9c:f9:eb:14:53:a4:0c:3e:c0:ae:c2:9d:4d:
f0:b6:e7:e2:09:7f:8a:48:f6:c7:06:24:e9:29:5b:
1e:7a:4d:a7:55:c6:96:c0:5d:3c:75:7f:1e:c1:ee:
15:f9:ae:ee:ce:27:03:f1:9a:8b:35:46:8f:9b:a7:
bd:81:8b:7a:e2:39:69:d9:0d:68:62:23:d6:0b:5e:
32:70:bd:ef:f5:ee:a9:09:40:62:33:97:0d:65:39:
f0:0c:33:95:77:0d:f2:02:11:4e:02:16:3d:c7:77:
87:92:1c:ab:0e:48:3e:54:49:0d:68:e0:cb:b5:56:
54:81:5a:02:ee:9b:9b:0b:8a:46:89:b1:65:d8:58:
4e:d2:4a:3a:00:a6:4f:6c:c5:80:b0:b2:04:ac:66:
c1:e6:39:4d:2b:4d:29:e7:5f:af:fe:7e:76:f1:6f:
71:fa:b1:9e:ce:3f:1c:09:08:be:e4:f9:14:25:b0:
a1:96:04:54:ea:f1:76:eb:be:1b:18:ce:ad:2d:09:
6a:c8:8a:43:ac:56:ba:e6:28:50:48:f7:f9:4a:57:
06:73:54:16:a1:de:0d:de:40:44:48:52:12:e7:77:
17:1c:7b:64:39:c8:88:91:c0:67:48:a6:72:e5:0e:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BF:36:E5:F6:B2:B6:96:AC:12:CC:D7:50:7B:40:E9:42:9F:03:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a74ef77c-a1d9-379a-a9ba-aa655badf17e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.219.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:40:97:34:d5:2c:06:e3:9b:3d:e3:01:86:a6:55:8d:26:80:
c4:8e:a8:77:fa:05:c6:59:ff:4d:4e:52:e4:10:28:09:16:ee:
76:01:3b:41:30:ad:51:4e:69:29:cb:54:05:83:82:6b:ae:26:
d0:24:ee:30:39:9a:22:8e:2b:0b:e7:07:7e:97:3a:e4:be:e6:
50:0a:32:b8:f7:57:e9:00:e1:3c:80:f4:7d:4c:58:fb:44:7a:
d1:d0:7f:2a:b6:99:ec:ea:9e:24:60:b5:a9:96:fa:0b:55:cb:
a9:54:38:f2:a8:95:04:25:bd:91:2f:40:eb:44:e0:29:0a:6a:
3f:52:d9:3f:40:98:d6:41:f3:6b:cc:a4:6b:66:91:1e:07:19:
0e:4c:12:83:da:10:23:74:e9:05:00:49:b0:6e:de:51:f6:9e:
6c:64:18:e3:9d:65:66:78:c9:49:a5:d5:8c:d3:15:67:dd:5a:
4c:a1:aa:04:2a:a4:f7:d0:43:bd:3c:a8:05:d6:dd:60:ef:73:
92:5e:5b:44:96:39:d8:d3:3a:50:44:19:b6:8d:ed:a5:94:73:
98:e6:cb:4d:71:6f:d1:53:0d:9d:3c:c1:5a:ca:97:a6:e8:62:
89:b0:03:a4:12:f9:99:09:60:87:dc:4c:2d:3e:48:eb:9f:0d:
95:04:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:06 2025 by rpki-client