Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa
File: d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa (raw, json)
Hash identifier: XjX1TvySkZqptBIG8t2uQq7jL6OfbpbSTJCo6OyC89M=
Subject key identifier: 78:4B:7C:75:23:F9:AB:95:F7:F8:9D:EE:E8:74:E3:C1:DA:25:89:EB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491D7164CDBB6F7238AC7A3980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.209.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:64:cd:bb:6f:72:38:ac:7a:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=9187e9f4-2304-4045-8637-e57edfebd2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:64:ee:97:65:92:50:d4:f7:7e:11:2d:0b:14:
dd:26:46:53:42:ce:d0:9e:09:70:3f:b0:89:91:be:
7d:1b:06:a6:91:5e:94:d7:17:5e:f6:73:58:ba:f6:
21:31:c3:fc:97:55:48:d7:6d:31:6d:3c:4e:e9:a5:
7d:8b:94:6d:73:e4:58:a8:b7:70:6c:ca:76:ff:62:
6b:9a:f4:20:4b:e2:f8:ec:f6:13:3b:b0:0e:5b:11:
79:0b:22:55:19:bd:98:c7:e4:1e:a1:33:fe:b2:58:
ce:0d:9d:5f:87:c9:1f:4a:7b:71:ac:74:87:45:4f:
86:85:21:63:94:04:a2:b4:4d:52:2f:f2:c0:73:76:
f1:21:20:49:8f:f8:73:07:a9:1a:31:fe:89:e6:62:
9c:0a:73:4c:f2:cf:40:37:de:96:5d:00:6a:16:20:
a8:f3:05:46:c0:9b:5f:b0:66:c3:ec:ec:7d:23:49:
4c:b1:8e:d7:16:ff:98:a6:56:a5:fd:ab:14:6b:28:
2e:c4:f3:ef:e0:76:0b:9e:e0:0c:10:a9:37:84:ba:
68:76:b5:9d:46:7e:0a:56:f5:a7:7a:06:ac:71:ae:
7a:cf:d2:8b:92:14:4b:1a:2f:99:6d:59:75:02:3e:
8f:2e:cd:f5:62:fa:32:6e:98:a5:d2:13:bc:5b:c6:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:7C:75:23:F9:AB:95:F7:F8:9D:EE:E8:74:E3:C1:DA:25:89:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d01ac20a-36cd-3f02-b13d-e12feb88da0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:b4:dd:bd:80:b4:c1:f0:71:74:40:2f:9e:db:4f:a8:99:89:
fa:1d:c2:5f:ff:d0:3f:e2:92:cd:47:75:47:bd:42:3a:e1:85:
dd:17:77:03:67:f9:08:17:3f:59:c4:ec:93:fe:9d:06:c3:0e:
9d:5a:c1:17:a5:09:6c:d2:ab:dc:6e:ab:4f:85:24:b4:22:dc:
f3:7e:42:7b:76:96:d2:d1:02:00:19:74:a9:93:3f:16:39:41:
51:74:a8:64:e5:8a:03:57:fc:f7:f8:83:5c:e0:a0:72:cf:fc:
74:4a:80:2c:3e:87:b8:d8:91:c9:62:8c:28:8f:e3:48:f9:30:
ac:96:f5:39:1f:d4:2b:41:87:46:27:34:8d:87:52:a1:c0:c3:
88:34:2b:e0:e3:c7:1e:93:fb:4a:ed:b5:51:75:4d:03:e4:53:
80:e8:01:0c:8e:ba:2d:b9:1a:5b:c8:3d:7c:75:22:f6:1e:cc:
eb:82:6c:3c:19:8c:8b:7b:99:89:44:74:64:21:cf:f3:3a:81:
dc:f6:18:93:84:b0:ab:87:bd:af:31:1c:cf:2e:5b:db:e9:2d:
07:bf:5c:31:41:e2:85:d5:ce:77:be:d9:3f:b1:89:ce:4e:f8:
fe:6f:c1:61:9a:c8:2f:e5:e9:b3:17:83:62:d1:4b:8e:06:03:
a7:6f:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:39 2025 by rpki-client