Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f3780eb-6382-3c23-9938-070bd9af81c7.roa
File: 1f3780eb-6382-3c23-9938-070bd9af81c7.roa (raw, json)
Hash identifier: 8RTuzjmbBAEC/FT1a8hk3Y270cHJdrf5GBii5CzET9o=
Subject key identifier: A2:2B:F7:F9:C1:62:38:90:9E:4F:A7:6C:5D:10:E1:FE:E0:3B:9E:EC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849833A0B799C2E5A53CB5FD7E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f3780eb-6382-3c23-9938-070bd9af81c7.roa
Signing time: Sun 13 Apr 2025 13:01:01 +0000
ROA not before: Sun 13 Apr 2025 13:01:01 +0000
ROA not after: Sat 12 Jul 2025 13:01:01 +0000
asID: 20940
IP address blocks: 23.193.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:83:3a:0b:79:9c:2e:5a:53:cb:5f:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 13 13:01:01 2025 GMT
Not After : Jul 12 13:01:01 2025 GMT
Subject: CN=369f3721-ae60-43f4-896d-e324c49dddde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:54:3f:fc:3d:d6:80:48:03:1d:79:80:9e:
3e:b9:e8:29:ef:b2:54:c0:e6:34:b3:42:01:d3:41:
16:ab:c0:1d:7e:1f:57:1c:bf:7e:56:a6:79:df:1c:
2c:17:9c:5a:3e:d2:84:e1:42:43:3b:0c:74:20:aa:
54:c4:d4:10:05:a4:d0:08:41:53:00:1b:a0:3f:7d:
05:78:be:2a:77:ae:54:23:82:69:35:17:ad:75:64:
b8:ea:fc:65:a8:af:d5:e7:24:23:46:a1:94:b3:2d:
dc:03:1c:67:08:de:6b:15:b8:17:de:90:e1:a6:06:
f8:ef:c5:e9:35:27:9b:cd:22:61:ac:ab:82:56:99:
6a:06:93:0d:b5:df:e8:2e:d6:b5:ef:ab:40:49:b4:
9f:16:d2:fc:8a:b2:27:4c:65:76:92:c1:b3:dc:78:
19:db:18:71:a6:fe:fb:54:5a:86:78:f5:20:af:f4:
3d:a9:d1:01:2e:b9:24:08:e9:2a:17:e7:82:63:70:
ef:c8:f6:74:a4:2c:da:35:8e:34:26:57:1f:dd:d3:
ea:38:61:5c:32:75:e7:d5:bf:bf:37:97:f1:7e:a9:
d9:17:c5:9a:12:79:23:e9:bc:05:2d:51:93:f3:38:
55:41:a8:05:4b:5a:19:92:ff:ad:8c:2a:4e:cb:45:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2B:F7:F9:C1:62:38:90:9E:4F:A7:6C:5D:10:E1:FE:E0:3B:9E:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f3780eb-6382-3c23-9938-070bd9af81c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.193.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:44:af:47:ed:4b:bf:23:0c:e8:34:c5:ae:09:95:3a:e3:bd:
b9:d2:a0:7f:73:fb:11:39:a5:4c:64:a8:b8:b0:78:ab:ca:5f:
67:8f:3e:35:87:01:5f:81:7e:7e:30:2c:ee:e1:60:59:cd:9e:
e2:e0:f7:65:2d:8c:e4:e6:08:58:86:16:7c:70:dc:6c:54:35:
80:b3:4c:db:40:74:aa:78:6c:e5:0f:f4:3f:d3:da:19:62:cd:
b9:49:b7:28:42:63:81:8b:22:0b:07:96:82:9f:65:3b:4f:8b:
0c:28:72:3f:18:7d:8b:68:fe:84:ff:fd:69:d2:cb:52:8d:19:
69:70:db:96:28:81:99:b4:6e:21:c7:cc:3e:d1:dc:9b:f6:2c:
a4:ef:3f:59:8f:6c:7c:18:d0:a7:6e:81:f8:57:01:6c:b8:46:
f0:c9:1d:37:67:85:2c:89:46:64:0a:49:4c:81:44:83:a8:bb:
c3:d4:80:e6:1b:7d:92:89:f9:8d:54:f1:bc:50:1d:3d:21:b6:
f7:18:30:57:4a:5d:4d:85:3b:2d:e8:84:b6:23:90:f4:2a:78:
30:6b:25:e4:ee:63:aa:50:77:1b:b3:96:5b:7a:58:87:17:38:
d8:10:ce:8a:dc:78:fa:38:ed:7f:75:7a:da:51:cf:ff:bc:3f:
ee:96:f8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:37 2025 by rpki-client on console.sobornost.net