Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d04df263-5938-3dc1-a3ac-0077e53bcc4c.roa
File: d04df263-5938-3dc1-a3ac-0077e53bcc4c.roa (raw, json)
Hash identifier: bkdBw2UZhrWhWH4gwZKouZhSr6d1QaQ9lLmrAQ1m2lc=
Subject key identifier: 77:9F:7F:41:17:15:7D:C7:FB:E4:AC:22:F1:AD:E3:8B:AD:CE:D0:83
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209DDCC29C7B465821BF80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d04df263-5938-3dc1-a3ac-0077e53bcc4c.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.40.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9d:dc:c2:9c:7b:46:58:21:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=4b8bf9af-e6c7-4770-bde6-aa9670c73991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:80:71:f6:a3:c8:b1:77:c3:84:da:a7:60:
4d:c2:97:27:c7:a3:04:03:ca:34:99:12:68:c0:e9:
47:79:bc:04:9f:80:91:1b:79:8d:99:27:aa:b4:a5:
14:b6:6b:c6:76:91:58:10:34:00:b8:ca:72:f2:be:
f3:0c:36:a2:6c:5d:2d:09:2b:84:4d:89:07:3f:cc:
99:fb:4b:14:90:50:ab:ea:21:62:f4:9b:3c:a8:84:
86:ee:29:7b:88:cf:14:23:1c:b2:57:31:62:a5:24:
77:7b:4c:3e:cd:a9:5c:33:1f:ec:fc:fc:c3:b4:d7:
6b:e2:e9:49:6f:54:df:9f:e5:6e:3e:30:8b:99:bc:
e5:85:5f:82:8c:2a:3a:85:7f:63:35:b6:66:f1:4f:
40:dd:d8:c0:2d:cd:79:ff:ea:9a:97:72:17:28:db:
97:80:25:36:ca:bd:da:c8:dc:24:2d:d9:dd:65:28:
a5:2a:77:41:41:44:0c:9c:f8:a6:99:6d:f7:17:6d:
17:9f:83:c2:29:31:88:4f:09:2e:c5:b1:78:a0:4a:
71:58:9d:8c:64:c9:7d:12:0e:28:d1:7e:1b:ef:63:
65:09:25:53:48:f5:de:b4:7b:ea:0e:42:a3:fc:7e:
32:af:6c:35:00:42:f1:c6:c2:2d:bc:1e:89:8a:25:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9F:7F:41:17:15:7D:C7:FB:E4:AC:22:F1:AD:E3:8B:AD:CE:D0:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d04df263-5938-3dc1-a3ac-0077e53bcc4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:7c:da:67:33:e0:2c:fd:88:6c:b2:8c:5a:65:78:18:ef:56:
7c:1a:1b:26:28:e7:51:bc:16:1f:46:2e:32:4c:57:d8:6e:ee:
21:27:5e:64:b5:4d:3c:56:1d:f5:5c:86:1d:e8:9e:e9:70:c1:
1c:33:53:6f:17:63:ea:d5:f7:04:50:ca:01:58:b0:9c:44:a7:
12:be:ae:70:0c:b1:4a:6a:83:c8:a8:41:50:9c:a0:c9:07:c6:
63:1a:c6:a3:fb:cb:f9:64:27:9e:51:5d:8f:8d:2e:ce:d8:aa:
38:5f:55:76:94:d7:59:9a:c8:46:3c:65:38:b1:3b:04:d0:82:
62:a2:bd:c3:ec:d7:1d:85:4f:b8:a0:8e:b9:11:c1:b6:2d:51:
bf:e9:f3:0c:c3:d8:37:f7:3a:d7:35:e6:59:c8:9c:0a:75:49:
d1:36:e3:b0:52:08:19:98:f1:a9:e4:65:30:5d:ea:55:fe:b0:
ab:72:5d:f6:23:ac:a1:92:64:65:be:ae:bb:d1:7f:24:22:d5:
6f:b1:11:a0:8e:cd:bb:a1:37:f7:1a:2c:39:70:e9:1e:3e:6c:
51:3a:88:72:8b:55:d1:90:71:06:50:1d:a3:a5:6e:9a:6e:41:
05:39:84:9e:35:0e:9d:1a:70:9d:4a:bf:35:ce:f5:b5:a9:a9:
b7:fd:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:39 2025 by rpki-client