Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f70bafc6-d058-3f62-ba1c-7be3e872fd0f.roa
File: f70bafc6-d058-3f62-ba1c-7be3e872fd0f.roa (raw, json)
Hash identifier: MuON0MDROeCYEhaljg1GfbWGvsoWvfpU1NIPtm/HE10=
Subject key identifier: 58:8E:5B:5D:32:0B:91:19:65:4C:12:88:A3:76:B3:19:6E:5D:E6:EE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A830CCD5E7DD92E97173BC40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f70bafc6-d058-3f62-ba1c-7be3e872fd0f.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 38040
IP address blocks: 23.200.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:cc:d5:e7:dd:92:e9:71:73:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=2df895e6-a18a-4d00-b148-5e902b2498c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:9d:42:26:19:5d:dd:0c:7e:bc:0f:9d:9b:
85:e6:bd:29:b0:1b:c1:7b:8d:e0:40:5e:0d:f6:b4:
49:06:51:97:7a:35:d8:4a:1c:cd:af:98:cf:ab:00:
25:11:e6:65:3a:0f:cf:71:58:43:1b:01:b4:75:28:
43:6e:8c:a3:59:77:1b:dc:27:69:53:9f:0e:c4:1a:
ff:d9:61:9f:d3:d8:83:5f:e1:25:c4:c3:65:8a:d8:
cb:22:89:16:d1:ca:4a:0a:d1:92:5d:17:02:82:3b:
39:8a:f1:95:8c:38:a1:55:6e:f6:2b:88:ca:0b:eb:
e8:53:12:b0:dc:1a:ff:d0:16:b1:f9:6d:39:e8:1c:
9f:9e:5a:91:16:68:6a:f5:b7:53:c7:c4:69:ba:6d:
66:c9:73:e0:ad:38:57:f4:1b:55:e2:9d:f8:9c:e0:
c0:8e:5c:4b:ac:5f:80:ce:39:e5:77:6b:3a:a8:9e:
c2:27:68:38:70:6f:ea:e0:78:1a:cd:46:37:15:a9:
d1:d0:2e:81:91:01:7d:31:bb:02:64:7e:eb:2f:f1:
19:2e:96:29:c0:3b:69:b9:80:93:24:18:39:09:51:
ee:65:e2:dc:0b:28:29:94:03:19:92:3a:5d:de:a3:
de:8f:09:fc:9d:33:71:e2:58:b8:49:6a:c2:fc:a9:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8E:5B:5D:32:0B:91:19:65:4C:12:88:A3:76:B3:19:6E:5D:E6:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f70bafc6-d058-3f62-ba1c-7be3e872fd0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.200.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:f4:5a:a8:e7:94:f7:20:6c:ae:2c:85:db:3b:8d:c6:e2:b7:
b8:d4:82:c9:db:bb:6d:1d:d1:96:c7:71:9f:b9:62:76:1b:3f:
4a:81:cc:82:80:c9:d4:22:ed:75:43:d5:03:6a:99:48:fd:aa:
6d:37:71:cc:6a:64:66:d0:ce:f0:d4:4e:e2:8a:f1:d8:26:9f:
b5:41:fd:9c:68:ee:f7:af:2c:e0:3e:08:4e:f2:42:37:3e:53:
23:d8:77:c2:82:7c:5d:45:27:da:4f:3c:4f:50:bb:a9:72:19:
d7:d9:62:6e:66:ba:d5:b8:6b:05:62:c1:e9:b0:26:17:6b:78:
61:be:ef:5c:7c:ce:32:ec:77:39:71:eb:5a:12:61:10:bf:d6:
bc:04:bd:c0:a0:e0:2a:a8:87:e0:dc:cc:b4:58:b7:77:58:a3:
93:f5:11:c6:b9:40:2c:7e:9f:d3:a3:03:bc:02:be:0b:19:e4:
25:e0:25:95:4e:f4:d3:c5:59:46:a7:14:12:29:40:7c:ec:60:
b0:70:2b:8e:8d:0e:76:22:12:a6:14:9b:73:ce:38:16:e1:a3:
62:ae:d6:1e:f3:56:f2:c8:1a:8d:13:e8:13:44:71:9b:01:09:
60:ab:5c:61:f8:33:de:b9:c5:2a:5b:05:8f:3a:40:d2:38:61:
b7:44:93:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:39 2025 by rpki-client