Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df649329-7e0f-3186-ab7e-43f288c65a55.roa
File: df649329-7e0f-3186-ab7e-43f288c65a55.roa (raw, json)
Hash identifier: VXaP1hdpOaDcHgw/5XqOfqK6uIhOb7rZ5yKd5mCl80M=
Subject key identifier: CD:CF:7F:1B:A3:AC:85:2A:35:C6:04:9E:B4:7C:B3:58:CB:E1:51:F2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858490021512E150C2EB6DCFF7A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df649329-7e0f-3186-ab7e-43f288c65a55.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 24319
IP address blocks: 23.79.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:51:2e:15:0c:2e:b6:dc:ff:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=911fe8f4-963a-48c4-9a56-7725478b90f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:b8:1a:72:05:07:36:11:be:31:18:8a:c8:
0e:2a:44:3d:e1:15:6e:35:f5:fd:46:ba:17:73:3d:
b0:0f:49:5f:4c:ac:4e:27:cf:4e:63:55:04:4d:1e:
ad:a5:b9:3d:43:bc:e1:f4:0a:40:2c:66:be:36:61:
a8:12:d4:8b:42:60:78:22:8f:59:02:31:45:fe:40:
08:66:36:9b:88:47:ea:45:3b:91:d8:d7:a4:4b:eb:
f5:01:bf:35:03:83:7a:88:d5:dc:fe:56:ee:be:c0:
d9:64:73:22:ca:f9:18:72:c7:29:38:42:5e:6d:1f:
ee:37:15:e1:00:b1:e0:b5:bc:4d:47:0e:1e:2e:93:
ea:1e:e4:8e:41:56:db:15:bf:9e:30:67:26:53:38:
d8:e2:e3:bd:40:26:d1:90:fc:30:92:d9:f5:2f:b0:
26:7d:ae:a6:57:01:ee:6f:2f:a0:51:20:69:b3:8f:
6c:e4:d1:70:3f:16:0e:58:f4:cb:2f:f6:37:ff:d0:
5c:15:20:fb:8c:c7:0a:8a:68:71:5e:d2:60:7d:ec:
46:6e:48:75:35:f8:e5:95:b4:fa:b8:12:67:7a:9b:
a3:1e:61:85:5f:7d:c1:b4:a9:80:ff:9e:14:70:fd:
1b:71:ca:e4:c6:22:05:33:5b:b4:ba:1e:f0:53:c3:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CF:7F:1B:A3:AC:85:2A:35:C6:04:9E:B4:7C:B3:58:CB:E1:51:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df649329-7e0f-3186-ab7e-43f288c65a55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.79.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:c3:59:b3:e7:40:6c:b5:80:97:40:45:4e:9c:f2:2a:78:9a:
09:bd:92:1c:95:10:ef:b6:df:c8:39:00:ee:77:3e:33:a0:62:
5d:b8:44:01:45:de:89:a3:3d:cd:89:16:e2:9e:65:1e:4f:d7:
2b:4c:fc:a0:22:1d:84:74:0e:e8:8a:98:96:50:35:5e:ca:0b:
b8:b0:c7:cf:05:70:82:af:78:a7:13:92:d3:fc:79:ca:cc:2b:
d9:84:90:37:da:cb:10:01:8a:3d:22:8d:b5:c3:3d:d4:37:e1:
3c:2f:a5:ff:98:c8:49:9d:f4:fd:c9:f6:5b:b5:b6:6d:8b:bf:
4c:b1:84:79:c0:d9:01:b0:e3:f5:b4:f8:b2:7c:26:ca:eb:5e:
25:f7:7d:61:8d:23:aa:1c:3a:8e:83:c3:22:91:a2:ad:02:5d:
de:8e:06:cd:02:49:35:c4:3c:dd:ba:ac:7f:06:5a:c0:07:15:
0a:fc:f2:d7:57:da:75:7b:9a:2b:23:c7:2e:27:65:cc:4d:64:
ef:aa:42:96:b6:63:99:92:3a:32:9a:44:57:25:16:1c:00:15:
f9:d8:93:fa:18:5b:5f:31:61:28:dd:37:e2:2e:7f:db:c8:d8:
af:cc:db:bb:bd:04:7f:7f:fb:fe:e5:39:46:24:72:48:d9:02:
88:75:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:54 2025 by rpki-client