Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc6dac7d-98f4-33ff-83bd-d116ab031a72.roa
File: bc6dac7d-98f4-33ff-83bd-d116ab031a72.roa (raw, json)
Hash identifier: utBiLtOD+fhiNp3YQKJ1AsAsp2RUO8iY+S4ak2ByEn0=
Subject key identifier: D5:FF:87:12:D1:95:FF:D5:50:18:0E:92:0C:3D:69:26:43:C6:AD:1C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB6F11A51E9307511BEF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc6dac7d-98f4-33ff-83bd-d116ab031a72.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.60.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:6f:11:a5:1e:93:07:51:1b:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=f8865067-61f2-4792-adc9-b5413f3f13ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:8b:5c:76:4b:f7:8a:ff:01:69:ab:71:3f:
a2:37:80:4c:35:56:17:17:58:ea:23:50:95:5c:09:
e5:5c:a5:b2:82:63:a9:e4:e7:be:d1:ab:18:e3:65:
47:5d:b4:ea:0a:cf:3a:76:23:be:ed:0e:bf:55:c3:
55:54:33:63:4a:81:e7:40:92:15:20:27:6a:6a:ca:
a6:6d:2d:cd:45:fd:cb:8f:ef:eb:f0:73:c4:27:f8:
d7:70:14:b6:c4:51:39:70:d1:20:ce:ec:39:08:af:
cb:bf:f9:39:06:73:8c:50:3c:57:bc:df:43:e3:be:
41:7c:73:a8:eb:4d:04:ae:a1:2f:52:21:e7:e1:09:
6d:6c:46:c3:bc:e2:72:3e:6e:1c:3e:41:6c:dd:ee:
85:d4:ab:c5:5e:84:11:89:36:00:42:ca:16:ff:96:
0e:51:7c:c3:92:0b:3b:d6:25:33:61:46:0c:b8:57:
d6:21:f3:5f:54:94:4e:98:8b:7f:9f:f2:78:a3:f7:
5a:b5:b7:62:39:5f:c8:bf:ca:8c:e0:4d:c4:83:f9:
47:a1:b9:b0:27:1f:cc:29:c2:d3:f1:42:a8:84:12:
b1:a4:2a:ed:a4:40:15:21:96:2c:53:c5:7e:21:3b:
70:a0:6d:08:d2:15:48:4a:57:98:24:51:86:f1:cd:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FF:87:12:D1:95:FF:D5:50:18:0E:92:0C:3D:69:26:43:C6:AD:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc6dac7d-98f4-33ff-83bd-d116ab031a72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.60.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:20:dd:e8:f6:18:85:ce:c3:70:e3:c3:cb:5d:ef:8f:7f:1f:
53:ed:04:61:74:a8:d4:90:27:22:fc:94:a0:71:e5:4a:a7:65:
1f:e0:43:2f:9f:b5:23:46:6e:ed:2c:56:e6:bb:1e:7f:ee:3a:
58:fc:34:30:fc:e8:df:28:ff:eb:67:c4:fe:1c:1e:1c:84:5c:
6b:27:13:c4:f4:e2:ab:58:05:be:83:c5:3b:c0:7f:9c:46:9a:
82:23:d7:8d:17:67:19:3a:08:a8:56:19:b1:4c:50:2a:ad:8e:
83:14:4e:bf:98:88:c1:25:c3:80:25:ba:07:fc:b1:df:d7:47:
28:66:4e:b0:aa:7d:9e:40:83:b1:a4:73:81:82:6e:3d:6d:38:
26:b7:8a:f9:4e:e4:9e:ca:9a:5d:b7:62:f4:0a:ce:04:d4:cf:
18:0a:cd:11:6a:3f:08:09:3e:2a:25:be:4f:59:8e:0c:ae:4f:
9c:fd:4a:d2:d4:3f:1a:4e:87:ff:64:22:02:ac:b9:79:ab:d1:
31:02:f5:b1:66:88:6b:67:b3:97:fd:50:27:a4:02:71:70:80:
90:d9:ae:6f:1e:4c:91:27:d2:de:aa:fb:4c:df:9d:5b:05:14:
73:0b:d5:69:3f:cf:3a:b7:c1:0a:39:a1:b9:dc:58:a8:bf:0b:
f4:b2:f1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:14:13 2025 by rpki-client