Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3c6d839-12a8-3d27-85a8-c68cfaf6362a.roa
File: e3c6d839-12a8-3d27-85a8-c68cfaf6362a.roa (raw, json)
Hash identifier: JvIx9lr/J2mnHHQ0varInOE6vbr3ztSnwiXvK8LE+zY=
Subject key identifier: 0D:42:78:C9:58:62:B6:B8:9F:4B:54:B4:78:2F:72:03:F0:A5:79:B7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209CB809869D02C3608980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3c6d839-12a8-3d27-85a8-c68cfaf6362a.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.39.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9c:b8:09:86:9d:02:c3:60:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=dfa52a1d-3e29-4ead-955c-9c2b7a80e292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d3:bb:e2:12:5d:b6:0c:43:69:f4:f0:83:4e:
b3:45:4e:72:b5:2a:8c:69:39:40:da:30:94:8a:ef:
6b:37:79:eb:91:8a:82:35:eb:69:08:51:f9:1c:49:
f7:d5:d4:02:b7:37:1b:78:4d:47:77:74:a2:97:45:
7c:d5:f3:53:d5:dc:c8:55:ae:c1:66:d9:eb:b9:89:
80:73:64:13:d1:59:1e:7b:dd:be:b6:3b:92:ce:59:
8b:55:46:ad:04:b8:cb:aa:0a:a4:5f:23:83:58:e1:
79:63:c0:37:06:9b:d5:e5:be:db:3d:8b:0b:9b:25:
33:8c:35:07:a5:34:46:01:1d:58:ec:32:2f:f7:8a:
e0:76:c5:ce:44:f5:eb:4d:26:3e:99:9f:b5:99:73:
8b:90:56:34:13:36:6b:31:20:3f:61:af:87:a4:94:
17:e2:ff:bc:63:04:32:26:eb:1b:f0:51:7c:29:25:
0e:d1:0b:e1:92:92:96:92:67:f0:64:3e:51:56:e3:
99:20:f0:96:1a:8e:f2:72:15:8b:9e:9d:df:0a:dc:
2a:1f:55:86:c2:40:7d:f1:4a:02:e9:bc:5c:fd:36:
20:b1:ce:d0:2d:9f:db:3e:24:36:fd:0c:96:02:44:
3a:e9:83:9b:6f:81:44:b7:3a:fb:55:69:f3:a9:83:
d3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:42:78:C9:58:62:B6:B8:9F:4B:54:B4:78:2F:72:03:F0:A5:79:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3c6d839-12a8-3d27-85a8-c68cfaf6362a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e4:c4:9d:65:c0:89:ff:29:99:40:bd:7e:ad:54:fb:4f:3d:
94:f2:f7:02:12:2e:56:2e:ae:f2:64:d8:8b:3e:ec:da:57:e9:
85:c2:10:6e:86:ef:95:be:ca:55:4f:e0:1b:4b:a7:79:2b:dc:
ed:1c:0f:c9:c7:ff:4a:ab:da:b3:72:47:06:da:5b:48:f8:9c:
50:87:01:e1:dc:74:5c:05:17:f5:ca:47:2a:62:54:73:8a:d6:
23:63:4b:87:c1:b4:a2:ae:4b:50:ff:e9:c8:e7:95:1d:e6:ab:
c6:06:b4:66:25:10:17:4c:62:c2:74:1a:c0:31:bf:ea:e7:84:
e8:cd:6a:e3:3d:9d:56:bb:ea:a4:01:5f:9a:26:9d:2d:6a:32:
ed:35:2e:be:5b:ac:f9:30:5b:2a:cf:99:09:ca:5e:2c:7a:3f:
75:81:30:04:dd:40:a9:d3:81:7d:8c:cc:e9:e8:ba:d1:99:f7:
3c:d6:1b:8c:12:ce:bd:45:42:44:d4:bd:42:d6:ff:0a:56:fe:
9f:40:ed:f8:e7:05:54:fd:b1:a5:23:5d:87:03:e7:39:04:e4:
c7:f3:81:8a:98:08:77:1a:65:1f:8c:e8:55:98:61:fd:51:ca:
53:59:d3:86:9e:3a:03:12:73:0c:af:05:d0:61:4d:db:7a:0b:
bb:52:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:31 2025 by rpki-client