Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc72b5e9-03ce-34c7-823b-2311c9cf0d33.roa
File: dc72b5e9-03ce-34c7-823b-2311c9cf0d33.roa (raw, json)
Hash identifier: +Pw9ikcGMih8GgkvAHNrxNvDEi0IbRss8HwwSB0SyBo=
Subject key identifier: C3:4E:02:E4:EC:47:EA:4F:04:DE:BD:8D:FA:B2:C3:E2:CC:CA:96:2D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A6CB6D1CA4283C4C25FFD580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc72b5e9-03ce-34c7-823b-2311c9cf0d33.roa
Signing time: Fri 24 Jan 2025 14:00:52 +0000
ROA not before: Fri 24 Jan 2025 14:00:52 +0000
ROA not after: Thu 24 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.199.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a6:cb:6d:1c:a4:28:3c:4c:25:ff:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 24 14:00:52 2025 GMT
Not After : Apr 24 13:00:52 2025 GMT
Subject: CN=97021974-665a-46c0-bd44-ece08dc700b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:f6:80:40:02:5d:07:5a:65:c3:14:0e:22:
14:d4:23:35:ad:00:0b:1f:5d:6e:ab:f3:b7:7b:2a:
f1:8a:cb:83:e7:c3:2b:ad:ff:be:33:1c:54:db:6a:
4f:25:13:71:01:b0:c4:40:d7:81:4c:96:5f:14:a0:
6c:09:82:3c:6a:7e:c0:87:95:a2:7e:55:15:8c:a4:
33:0a:4e:5b:5b:10:9e:9d:ba:04:b6:6c:31:5e:d3:
93:56:f2:7d:97:c8:8a:1d:c3:53:1e:40:b7:79:f0:
52:cb:4c:22:ab:00:cb:a6:51:01:fd:1c:60:6c:20:
25:25:61:11:28:c4:24:77:f0:04:ab:a6:84:6d:38:
05:91:98:8b:40:44:8d:37:79:ab:02:04:68:d1:6f:
ae:d6:0a:8f:d9:27:d4:50:59:61:b7:be:59:14:23:
d7:b4:5b:96:0d:f1:a1:da:53:6c:16:1c:23:d3:3c:
7f:cb:42:15:cb:27:d2:04:2d:f1:a9:bb:17:c5:e9:
79:a8:bc:a4:55:9e:f8:be:1b:09:5f:87:01:68:d9:
31:6c:37:92:24:41:a4:8e:2e:9f:f8:3f:50:57:f2:
cc:46:f1:10:24:de:94:1b:b0:b8:6c:93:25:f8:22:
0d:90:88:bf:e2:f2:8e:4f:88:2f:98:c8:2c:63:dc:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4E:02:E4:EC:47:EA:4F:04:DE:BD:8D:FA:B2:C3:E2:CC:CA:96:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc72b5e9-03ce-34c7-823b-2311c9cf0d33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.199.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:a3:3f:8d:65:ba:9c:ac:a4:cf:42:ca:cd:fe:40:fa:9f:d6:
0e:37:b9:74:0b:b8:b9:59:e0:a1:d3:34:4e:3c:79:63:b3:1c:
dd:b7:c2:c1:b7:17:26:6e:88:59:93:e8:7d:61:19:41:dc:a1:
39:12:30:f0:f8:bb:1c:85:40:c0:ba:b3:f9:05:a2:9e:a0:43:
c8:68:2f:36:10:33:7f:35:2f:2c:59:25:e5:6e:ed:a9:05:d8:
0e:d6:4f:9b:73:63:9c:06:41:11:82:35:d8:27:d7:85:ec:5f:
ab:09:87:59:06:49:29:6d:a0:c8:0f:e2:89:b7:8d:82:0e:7c:
e5:37:65:a8:b8:e9:0e:70:6a:7a:fc:24:58:ae:2a:77:b8:6c:
c7:45:67:33:d3:b8:8d:eb:c3:9e:d0:48:bc:fa:3b:57:9e:45:
2d:30:19:0b:08:00:39:be:f7:ff:f1:dc:5d:9f:ad:6f:33:df:
e6:f4:96:6d:88:d0:8d:56:a9:b6:38:48:1c:3e:68:76:78:2b:
42:3b:a1:72:10:08:ac:91:ff:4b:2a:ff:ae:ed:19:cf:88:db:
55:be:76:56:ba:7b:b6:4b:07:87:81:9a:ba:c6:4c:df:2f:b8:
fc:f2:0e:3d:20:e9:93:d5:09:8b:11:03:39:ca:4a:58:f8:d8:
65:b4:bd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:34 2025 by rpki-client