Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa
File: d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa (raw, json)
Hash identifier: aHEaDiyOHKRgxYLwaAvyg7Gud+tB2NrMfYz/jnqNisc=
Subject key identifier: 70:12:7E:5D:C5:A1:21:EF:9B:DD:99:7F:09:6C:DE:85:4E:3A:75:CA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494CC955FCF9A493105068F580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.32.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:55:fc:f9:a4:93:10:50:68:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=8612410c-98c8-4887-acb1-a47d67413cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:13:9e:19:21:94:b6:91:c0:29:7e:8e:a7:
97:77:ff:34:2f:45:70:16:7a:39:75:43:8a:cb:b5:
83:3e:91:e5:79:65:14:d0:fe:29:17:fe:52:2a:c1:
5c:fd:78:76:6c:94:a5:2b:56:2a:ee:89:d3:57:98:
51:ac:e6:5f:fb:be:50:48:b3:7c:bf:34:76:85:35:
9d:e7:f0:6a:9e:dd:3a:20:96:fc:ac:ed:bd:80:a5:
2e:af:8d:a6:25:f6:26:c0:68:b1:f9:4a:3b:44:d3:
4c:4e:84:f5:e2:bf:bd:c1:e1:38:70:af:f7:1b:63:
04:a6:77:ff:a3:94:a0:f6:21:9b:68:48:90:05:0d:
8a:f3:6e:00:f6:01:e6:c5:a0:a8:e7:db:b4:42:0b:
f4:39:f1:f5:19:3e:f3:6c:7d:94:d8:70:1f:f9:9f:
ef:af:4d:7e:c2:0c:8c:4e:81:dd:51:39:4e:7d:51:
fa:9e:86:a3:cf:5e:6f:66:b2:b1:df:59:82:1c:dc:
46:85:49:a0:ba:76:8e:bd:63:1e:59:11:0a:28:b8:
85:b0:f4:85:58:42:3a:93:60:32:c0:12:62:6e:99:
fc:f7:0f:54:8d:47:6d:bb:16:e7:e2:f5:c2:b9:9f:
a8:f7:52:07:31:2b:e0:a9:4e:2f:56:41:17:58:05:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:12:7E:5D:C5:A1:21:EF:9B:DD:99:7F:09:6C:DE:85:4E:3A:75:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2f64399-183a-3ce1-8f6d-55aa64d82c6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:9a:91:d5:55:ca:4e:5c:ae:ea:63:40:10:14:f6:1f:0d:e0:
b1:36:a4:0b:ca:60:8c:69:5c:5e:87:5d:39:44:77:1b:b2:45:
2e:7f:a4:6f:32:74:4e:d0:ad:e7:ae:b3:eb:e9:0d:14:1d:92:
08:41:b0:3f:dd:72:75:cc:ea:e4:d1:67:f7:8d:46:a5:e3:83:
7e:1a:c9:48:40:f8:3b:26:81:69:8f:f2:cc:05:a2:e1:4f:51:
28:30:11:4c:b8:d8:ab:4e:44:28:67:0d:71:27:32:f2:c6:09:
f8:79:ba:15:fd:4f:93:db:47:0d:75:3f:c3:2b:90:0a:b2:33:
ae:ea:da:a3:49:54:65:75:21:71:71:0a:00:56:5a:98:1e:68:
5d:52:d0:63:7e:fc:c9:9d:70:1a:25:6c:66:3f:8f:29:76:d8:
35:c8:bd:c1:97:fa:0e:0e:52:b0:b9:6d:b1:7f:32:45:e2:09:
e0:1d:6a:e6:eb:ae:fb:e1:eb:7c:cc:37:b9:8c:c3:f2:4f:7d:
cc:b8:de:ec:93:6a:ca:f0:00:db:64:d9:b6:ee:22:4b:ff:6d:
55:2a:09:16:d4:50:16:e6:ab:84:5a:12:da:cc:d7:de:1d:7c:
8e:5e:e5:41:fc:17:60:6b:af:8c:45:cc:32:9d:35:b3:80:88:
6a:16:1b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:04 2025 by rpki-client