Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3eb29c2-dfd3-39b8-b359-0372dfb920fb.roa
File: c3eb29c2-dfd3-39b8-b359-0372dfb920fb.roa (raw, json)
Hash identifier: Narw4F250KW5JeNtbXLIBjUOALsQD8p8uQbfJwfncv0=
Subject key identifier: 68:F8:77:C6:1D:E6:E3:3B:24:92:70:A0:24:36:56:E2:60:B8:89:0F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491ED6F3A654E08B2E6ABA40A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3eb29c2-dfd3-39b8-b359-0372dfb920fb.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.72.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:f3:a6:54:e0:8b:2e:6a:ba:40:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=3853ee57-65dd-4be8-929a-783b589643c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:e4:fc:ef:25:b6:1b:9f:d9:b2:f7:2b:c6:
95:31:c7:fd:40:4e:b9:37:ab:93:b8:49:81:2e:c6:
a7:b1:cb:db:29:ef:96:a0:18:f7:01:72:e1:d1:66:
0b:2c:45:2b:48:48:7d:1b:8e:74:1d:16:3a:e9:82:
71:d4:5b:f8:a6:03:ec:e4:7f:5d:14:11:13:e7:53:
aa:e5:66:2f:2a:c8:bc:0a:56:e2:9b:2b:78:58:68:
43:0b:2d:7f:eb:a6:61:fc:3e:75:16:78:4f:29:94:
f1:09:04:62:ee:21:93:37:a5:c4:7d:42:60:d0:12:
26:1f:65:ea:9a:bc:7b:68:06:36:4d:a5:02:8f:e5:
43:c9:b5:23:b6:47:f1:1e:63:4c:f3:a9:c9:52:36:
ef:67:e9:e7:55:98:4f:dd:1e:34:58:a0:5d:d0:82:
05:23:80:01:21:10:db:27:2f:7e:79:44:e5:f5:6a:
43:e7:5b:4b:d6:c8:7e:46:84:3f:7c:6b:c6:cb:d0:
85:e2:be:c4:ec:88:45:64:33:e4:6e:f6:c9:7f:e6:
3d:ba:3d:a4:e5:3f:ea:f0:4d:fa:83:1e:04:5d:df:
9d:a0:92:25:86:ca:d7:e6:02:e7:f4:c5:ee:88:cd:
f4:d2:cc:8e:c3:b2:5a:95:16:9a:90:0d:95:f4:c2:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F8:77:C6:1D:E6:E3:3B:24:92:70:A0:24:36:56:E2:60:B8:89:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3eb29c2-dfd3-39b8-b359-0372dfb920fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.72.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:3d:9d:06:57:3c:30:21:2a:7f:08:10:82:78:52:d1:ba:9f:
85:89:a3:88:ce:15:c5:f4:a7:95:14:96:76:fe:c1:4d:26:45:
eb:aa:f0:dd:66:9f:03:a0:6b:06:62:d2:79:9d:83:db:f1:e1:
f5:03:a9:8b:ab:f7:ae:d3:05:b9:ff:53:db:97:d0:53:0e:24:
6f:10:d8:1c:e9:ea:e2:4c:b3:e4:45:c0:4e:be:e4:38:25:b1:
f8:dd:41:1b:c5:89:d9:85:4c:f3:b1:3c:71:1b:6f:94:e2:79:
b0:e1:eb:09:fd:ec:3d:78:75:95:c3:d0:a7:50:c6:32:d3:2d:
9a:1b:9c:31:22:ec:9d:ed:5d:cb:10:99:e4:b4:0f:cd:90:8f:
a1:f5:75:76:5e:4e:56:f9:34:bf:d1:c9:34:cd:62:c7:86:dc:
98:35:c6:c2:61:cf:8b:f7:d4:7e:d3:5b:28:6f:b6:d2:42:be:
19:db:96:38:73:36:04:83:c5:24:bf:f9:20:2e:93:6f:f8:3f:
db:1c:08:91:69:15:22:ce:77:c5:25:7d:81:0b:19:c2:f7:f8:
5f:9f:3d:3c:4e:a7:ca:17:3d:ad:3a:01:3a:df:36:58:15:50:
5c:ae:7f:a8:5f:da:ec:0c:48:32:9f:5e:0c:b9:81:d4:52:5d:
8f:16:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:23 2025 by rpki-client