Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c588837b-ecec-34e5-9a02-6b872078d923.roa
File: c588837b-ecec-34e5-9a02-6b872078d923.roa (raw, json)
Hash identifier: 7X7YZ2Br82+8fc+sUQvATr19EHFxSVM1SLZpecS40wE=
Subject key identifier: 10:4D:5E:AC:99:3F:DE:FF:0A:F8:A9:4C:99:02:84:D8:B3:3C:B3:87
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400CBED4C4652A15E248680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c588837b-ecec-34e5-9a02-6b872078d923.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.197.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:cb:ed:4c:46:52:a1:5e:24:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=fe0182f7-2968-457b-a2be-a9c0b04d9b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:d5:63:f6:b7:0f:80:6c:db:14:72:c0:d9:
22:9e:24:f7:d7:87:ee:0b:44:47:4f:3a:83:9f:d4:
a2:69:64:d1:d5:c8:c8:f0:1e:36:38:9f:0a:3b:60:
a1:1e:c9:23:66:61:10:ef:84:ad:3b:d8:9e:bd:b4:
d0:cb:27:be:d4:f1:29:c1:47:4b:15:9b:69:f9:7d:
fa:48:0a:cb:c8:6d:f2:b1:dd:29:74:8d:6a:3d:d6:
db:9e:04:0d:b5:10:e6:52:fe:11:92:42:8c:49:5f:
11:b8:a1:44:94:f5:84:b4:40:25:6f:e7:9a:d8:03:
26:15:84:0b:21:80:d1:d6:54:57:5d:be:14:2c:aa:
00:e6:a5:ad:53:5b:43:05:1a:aa:6e:8c:73:72:f8:
87:30:c6:ca:1c:29:1e:36:66:4f:a8:00:bb:cf:e6:
2f:d4:06:fc:3b:11:46:f3:12:e1:67:a4:b5:3a:6f:
8d:5e:e0:49:61:84:ff:88:0b:9e:2f:b4:58:82:af:
1b:1a:19:25:c8:4f:3b:19:2d:d9:4d:e0:fa:ca:bd:
ba:18:97:da:9c:b0:48:3f:cb:3f:f0:5a:8a:f2:68:
b1:11:fd:8f:f6:e6:98:25:c2:0e:34:e0:35:2a:30:
be:dd:a4:d2:48:b0:d6:a3:91:8a:84:54:1a:5d:a3:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4D:5E:AC:99:3F:DE:FF:0A:F8:A9:4C:99:02:84:D8:B3:3C:B3:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c588837b-ecec-34e5-9a02-6b872078d923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.197.207.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:ef:41:55:97:fd:de:5d:b9:03:cf:ec:00:30:34:fd:fc:82:
e3:64:5d:40:1c:03:0b:ee:dd:de:56:d0:01:e4:be:7c:24:bf:
c1:ca:65:fb:c4:cf:03:d3:54:95:15:f2:06:04:6a:ae:80:a3:
0f:27:95:5e:e0:dc:60:44:f7:31:d9:47:2c:26:0b:5f:7c:47:
5c:4d:3c:b7:9a:1c:88:38:c4:ab:6f:52:66:04:5c:14:e4:36:
26:15:e9:f6:87:f5:02:a9:06:b8:0d:5d:ad:45:82:9c:14:00:
93:ae:ba:45:8f:ed:5d:c2:54:72:55:b6:15:c6:1b:7c:75:dd:
6c:80:80:52:d1:20:4e:67:d0:ba:29:bb:46:25:23:8a:f3:eb:
af:cf:aa:ff:4d:53:db:7b:8a:e7:8b:6e:6f:32:aa:46:48:29:
6e:c2:4c:a6:f7:ea:a3:ca:47:1c:b1:f4:a1:1c:f2:8f:19:4a:
cd:c6:18:e6:97:0a:54:77:df:d4:2e:bb:98:78:1b:a1:6e:9b:
c0:fa:91:87:4b:b8:cc:31:6b:07:b5:ef:e7:c9:39:ed:35:9d:
19:6b:d5:11:fc:f3:82:8a:0a:7b:a5:d1:54:15:bc:37:74:fe:
f3:f6:7a:4c:b6:fd:9c:a2:df:c7:16:3d:89:b5:9e:4a:a3:55:
0f:fe:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:25 2025 by rpki-client