Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddc77088-857c-3b1f-b5ea-34bcc6209011.roa
File: ddc77088-857c-3b1f-b5ea-34bcc6209011.roa (raw, json)
Hash identifier: 2Pt8XmMO4lf5bXAm9CNT+TFsGPt85PW+wDzwf/GNCUo=
Subject key identifier: A9:0E:E5:FF:50:A4:7A:8B:B6:60:95:F6:C0:34:8F:84:61:45:F7:82
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848960B5F87D858A92BEB4B5CC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddc77088-857c-3b1f-b5ea-34bcc6209011.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.223.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:5f:87:d8:58:a9:2b:eb:4b:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=9710c036-c392-4e59-b333-699cde6251ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:09:63:5b:57:58:02:5a:7c:c2:20:b7:1b:
53:65:3d:b1:1f:24:b2:05:8e:8c:f3:bb:f6:d0:ca:
d4:3b:99:23:22:3b:6e:35:4f:69:63:5b:ed:c3:e1:
21:48:68:3c:97:16:8b:86:d8:04:07:cd:af:02:bd:
58:61:05:0d:6d:9c:4b:4d:f1:c2:ec:96:92:05:31:
72:b5:a9:95:53:36:cc:47:fb:38:20:64:e6:c7:4e:
2d:8f:27:a1:af:01:dd:d7:99:ea:63:49:f5:8a:64:
f7:06:c9:df:32:9b:cf:a8:e0:2a:d5:00:56:3d:16:
ef:9e:03:f3:47:70:b7:a0:3e:21:63:f1:f9:b2:85:
44:6c:a8:69:79:d1:46:69:8b:41:f3:3b:71:e1:02:
97:79:a7:6e:a9:68:58:4d:3d:6d:ec:e8:60:f0:99:
8c:af:c4:6f:57:28:1d:3f:1e:18:c0:e3:2e:0b:2f:
e3:a0:e3:90:db:65:83:34:79:0f:4a:05:87:8f:31:
d3:5a:2c:4a:c2:b7:f8:85:c4:4f:39:77:5e:52:42:
e4:c7:dc:53:96:cf:d0:3e:13:36:1a:e1:05:3a:4b:
6a:20:5a:70:34:bc:1a:3e:10:3c:29:51:52:b1:ca:
ce:04:5a:00:94:12:e9:85:74:ef:5f:c2:3a:1a:8e:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:E5:FF:50:A4:7A:8B:B6:60:95:F6:C0:34:8F:84:61:45:F7:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddc77088-857c-3b1f-b5ea-34bcc6209011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.223.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:9f:6f:1d:d7:92:db:a0:bb:e9:fb:71:a2:69:c1:ec:0c:28:
b6:c6:69:57:b6:f9:23:82:5e:ad:8b:e2:ce:ee:f2:98:9c:fe:
4b:2a:55:47:31:91:ea:44:5e:27:cd:f5:84:a5:09:52:35:1f:
40:a3:87:0c:56:43:a1:e8:e2:53:69:65:10:5d:ff:17:1b:79:
fb:d4:93:06:6d:44:61:7d:6e:48:dd:c1:4c:0d:10:00:79:95:
c0:f5:fd:a2:b9:ae:1a:e4:30:7b:42:7f:d7:7a:da:38:50:31:
0f:8b:6f:91:3b:14:55:f5:71:0a:e8:61:e7:f8:af:fc:65:7a:
55:b1:9b:cc:14:18:d9:cf:30:25:bc:2d:34:13:cb:e5:a0:ed:
2c:46:e4:83:3a:9e:d4:63:b5:1c:8c:f7:7f:0d:1f:2b:8a:17:
6f:6e:e9:68:0f:59:94:8e:da:5c:57:91:89:d2:d6:78:42:55:
89:d6:59:0a:d1:f5:ce:38:06:fa:33:23:b5:59:7e:49:2f:29:
21:2b:21:78:81:92:ce:9c:a3:16:a0:2a:00:52:4d:c3:a8:2e:
bd:8e:b2:2a:cd:e4:a2:90:57:50:ee:dc:b3:7d:77:4b:93:38:
9a:43:92:b4:62:79:66:c3:2d:c1:9c:c3:68:e5:59:24:71:ad:
33:06:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:34 2025 by rpki-client