Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52660d2-4fb4-39fd-afd7-4fa5d9e67249.roa
File: e52660d2-4fb4-39fd-afd7-4fa5d9e67249.roa (raw, json)
Hash identifier: nlG/cpv0BzHGN+yBY4vfQtzR207BDn+wZSD1hTFJj0w=
Subject key identifier: 0C:D0:4E:0A:D2:3B:DC:56:18:87:AE:21:10:19:A5:F3:1E:D9:25:34
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848D2114851A536BB3B7531A7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52660d2-4fb4-39fd-afd7-4fa5d9e67249.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.59.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:48:51:a5:36:bb:3b:75:31:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=5c6cac57-429e-4ad8-996b-0effe6dcab30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:d0:c5:43:1e:ca:c9:c5:14:80:5b:84:07:
54:16:2c:06:d4:5c:0e:b1:ac:2a:66:24:e6:ee:87:
6a:bf:e6:81:90:b6:58:6c:30:8e:41:78:18:bf:c6:
7c:08:ee:ef:32:5c:4b:85:d7:3d:ad:51:a4:f5:00:
b7:e6:4c:f3:3e:2f:2c:13:dd:34:76:46:d1:5c:0d:
ab:51:82:b9:8a:91:ce:81:24:13:50:fa:9a:c0:0e:
61:ff:59:9e:d0:46:32:de:bb:87:00:6c:a3:32:b9:
8f:f2:b8:c3:c7:93:de:2b:47:e6:b6:e6:aa:8a:37:
64:85:32:70:f4:33:74:58:d7:10:5f:41:f6:74:3e:
9d:0a:01:f8:3a:2e:54:91:c6:08:92:60:e4:0c:b2:
29:e8:81:ec:c3:c8:52:0c:2c:2f:2b:9c:c2:72:24:
51:96:ea:b8:4f:78:f5:10:f3:20:d4:72:89:a4:64:
e9:6c:e4:9a:bf:84:0b:8a:b5:d6:28:6b:2f:0f:63:
6c:a9:6e:18:af:c1:eb:9f:12:ca:03:61:8c:57:ea:
7d:ba:c5:a8:d8:9e:b3:d9:e0:bf:b2:03:b7:d4:35:
15:78:14:26:85:44:c2:a0:30:2a:93:d5:d5:1e:47:
e0:b1:af:99:bf:33:38:2d:b6:17:8a:b9:98:c8:08:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:4E:0A:D2:3B:DC:56:18:87:AE:21:10:19:A5:F3:1E:D9:25:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52660d2-4fb4-39fd-afd7-4fa5d9e67249.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.59.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:c5:8d:f7:95:03:87:34:71:db:0e:82:2c:65:a3:45:e6:ee:
02:7b:3f:b1:20:b8:0f:60:7f:b9:5d:8e:fe:16:9d:24:b2:36:
e3:a7:28:cf:7a:ff:e7:8a:1b:fd:43:74:85:e5:41:f8:c1:dd:
6f:95:d7:79:d4:3b:e6:11:61:a3:da:0e:86:1f:49:3c:1a:10:
f9:ec:2a:eb:c2:c3:d7:01:d5:a8:ea:32:5e:74:93:c2:22:9e:
5e:f5:a6:dd:03:96:89:01:19:c8:be:eb:a3:a1:a4:66:4a:60:
51:e0:05:cb:f1:aa:a7:82:28:83:04:ae:11:62:76:1c:80:61:
cf:3f:11:df:89:db:c0:f7:c8:48:39:97:68:a2:3b:ef:14:89:
5d:61:ca:48:23:b8:2d:9c:0d:20:6a:15:92:ae:38:04:05:6f:
ff:4a:ed:1c:e7:de:6b:30:52:84:8f:dd:0d:60:eb:1f:c4:f2:
09:4a:de:ad:09:bb:14:2a:8f:b7:6d:d0:ef:51:e0:d1:88:ca:
4c:fc:04:d8:63:b1:56:ae:5e:1d:bd:f3:87:6e:28:d7:2b:f4:
18:14:79:ff:f4:16:50:ca:9a:58:8a:6f:62:fa:34:2b:37:11:
be:f8:06:10:9a:ce:b0:ae:00:dc:2f:c0:21:f0:90:b4:52:52:
d4:16:90:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:10 2025 by rpki-client