Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c78a85ea-48f6-3ea9-8183-b21d3c5dd45a.roa
File: c78a85ea-48f6-3ea9-8183-b21d3c5dd45a.roa (raw, json)
Hash identifier: ak/atbPL38Susp/ENZrjt+sUD1+OVou7RQ4bksRx84g=
Subject key identifier: 25:E7:EF:2A:46:21:23:15:BC:5A:D8:0B:C9:2D:60:E1:07:4C:C3:98
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A400E057B28223FBD80EFD80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c78a85ea-48f6-3ea9-8183-b21d3c5dd45a.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.197.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:e0:57:b2:82:23:fb:d8:0e:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=3c59d71d-4f93-4b19-9d3f-d7ae84c7c27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:06:c1:d7:89:41:fa:69:3b:25:c6:6f:3a:
d1:98:3e:84:6d:fa:93:59:e0:23:ad:4f:0e:fe:66:
7d:56:b5:7d:05:91:fb:be:4c:91:9f:12:a7:f6:54:
74:e7:dc:4c:43:9b:af:56:96:ac:c6:0d:eb:90:23:
10:d6:e9:90:92:18:61:2d:13:e7:db:11:22:1f:f2:
41:f7:8a:44:c4:92:8d:fc:f9:68:a7:18:2f:36:ec:
f7:e1:f1:90:5d:b4:c1:e1:fc:00:9e:0f:50:eb:96:
a9:15:75:42:7d:3b:22:e8:53:aa:d9:ea:cc:b3:6b:
50:84:1e:14:3b:5a:0e:51:ca:0e:90:02:e6:2e:52:
11:f5:05:a8:65:bd:6e:a2:b6:61:41:e7:ef:a0:7a:
03:a9:ef:99:74:59:04:b5:b0:bd:b6:ee:69:99:4f:
c0:40:35:ae:37:e0:04:c4:96:58:27:6f:bd:4e:20:
ad:15:32:14:e8:6d:de:b5:5e:14:73:c4:2c:6f:d3:
53:64:7f:d5:ad:d8:19:0d:13:df:61:b5:d7:2c:71:
d6:38:e9:c6:2d:9d:04:f2:8c:41:95:94:43:a7:5c:
27:58:a6:7e:3e:e9:a7:16:91:81:91:31:ba:18:06:
37:0f:3a:9a:69:de:00:c7:a1:a3:f3:2b:6a:9b:67:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:EF:2A:46:21:23:15:BC:5A:D8:0B:C9:2D:60:E1:07:4C:C3:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c78a85ea-48f6-3ea9-8183-b21d3c5dd45a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.197.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4e:23:99:2f:5c:dc:0a:78:a0:b8:58:35:6d:67:ff:35:10:
4e:81:18:5c:71:b9:54:19:53:49:94:0c:b6:6f:50:77:82:3f:
7d:58:8f:29:2d:e1:63:97:e9:4f:85:87:bf:fe:9f:f8:aa:7f:
8b:bb:89:f3:e4:3f:4b:16:de:fd:ab:05:a0:f3:5d:b1:27:ec:
67:0b:49:e7:40:ce:fd:1a:0d:7e:bb:c6:4a:26:92:3c:02:fe:
ef:8c:72:97:01:3d:36:ed:d7:f9:6c:32:ef:c0:9f:e9:4d:ce:
f0:f2:e0:5e:ac:04:db:43:88:95:41:4c:e3:87:48:93:a8:23:
4f:12:da:4b:34:77:76:4c:bd:66:d0:a2:e0:0c:cf:d1:7d:f2:
2f:1f:50:a2:17:d8:50:55:2f:c9:84:dc:c6:c8:b8:51:4c:cc:
b4:44:1a:13:e6:c3:9d:ec:a2:ed:47:f3:54:99:d7:5b:41:8b:
16:3f:52:7e:2a:23:74:63:26:74:c2:b4:8d:61:95:fe:16:be:
a0:b6:61:96:5b:9b:31:ff:cb:b3:82:97:cb:cb:1a:32:4f:48:
94:62:9a:e3:76:8f:b5:86:47:52:98:bd:a3:1a:38:15:13:1b:
bf:59:69:73:fd:60:1d:6f:9b:20:0c:c7:92:5b:d9:c2:22:58:
81:a3:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:15 2025 by rpki-client