Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e837bc-6779-3e9e-9867-843d0a93bf0f.roa
File: 27e837bc-6779-3e9e-9867-843d0a93bf0f.roa (raw, json)
Hash identifier: tbMUq92fph/Mp1Vz8cJBny7gPEHx+fyZb39CsSJnJSE=
Subject key identifier: ED:0A:AD:B0:84:23:1C:79:D1:94:F8:C4:2E:95:68:CD:00:34:E0:02
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858495C2452AB20F5A978785F2380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e837bc-6779-3e9e-9867-843d0a93bf0f.roa
Signing time: Sun 30 Mar 2025 13:01:02 +0000
ROA not before: Sun 30 Mar 2025 13:01:02 +0000
ROA not after: Sat 28 Jun 2025 13:01:02 +0000
asID: 20940
IP address blocks: 23.43.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5c:24:52:ab:20:f5:a9:78:78:5f:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 30 13:01:02 2025 GMT
Not After : Jun 28 13:01:02 2025 GMT
Subject: CN=bebd02a3-4e30-4cf2-b0d3-393117885f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:0d:cd:ab:c8:5a:65:ca:8b:67:28:c3:7e:
c7:77:dc:0f:e3:d4:62:b9:38:7b:f3:a5:ca:94:c1:
48:c2:88:94:77:ed:d6:28:0d:9f:3e:4d:43:46:3d:
9a:10:9c:ba:2f:3a:d7:33:c9:fe:97:41:62:c0:ee:
6b:c5:74:6c:1b:ec:06:ed:58:bb:a1:8f:33:54:e2:
75:71:e6:aa:ea:77:d8:4c:6d:8c:fb:80:c3:ca:e9:
a7:92:37:d8:b1:21:85:2b:b8:9c:00:46:35:e7:b0:
d3:66:8c:a2:59:23:b8:93:4c:f1:ee:53:6d:36:8c:
46:24:8c:da:96:77:e1:da:23:51:6a:44:f9:ae:a5:
66:db:c5:2e:95:55:22:64:5b:4a:af:a1:84:1b:38:
78:47:53:88:7f:64:f1:0c:4c:f1:37:b3:fc:50:25:
d9:c8:79:74:3d:6d:85:fb:83:c4:e3:d8:f9:8a:bf:
a1:2f:e1:a6:8b:1e:9f:50:8d:7f:0f:fe:7c:23:bc:
cd:fb:ef:9b:da:96:d8:9e:a7:50:8e:d4:5d:68:17:
a8:13:c6:a8:7c:ec:36:23:77:8d:dc:d8:98:06:8f:
e6:7a:60:dc:c5:64:4b:01:d9:53:16:52:1e:8e:a9:
f8:23:c9:72:45:c0:bd:9d:36:54:97:87:c2:96:a0:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0A:AD:B0:84:23:1C:79:D1:94:F8:C4:2E:95:68:CD:00:34:E0:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/27e837bc-6779-3e9e-9867-843d0a93bf0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:15:e4:e6:97:e8:c1:b8:d3:0c:25:a4:df:4b:be:82:10:2e:
99:5a:0a:48:76:8a:98:94:a1:70:cf:0a:2b:f4:b0:11:8c:3c:
be:91:d1:1d:28:e5:53:51:6c:db:f8:50:84:51:24:f0:d1:52:
1f:b1:30:64:50:90:2c:37:19:eb:f1:90:94:67:e2:67:e9:af:
38:62:1c:22:aa:5e:67:d2:e4:9d:80:27:67:14:56:2f:af:0d:
31:b8:df:b7:c4:a7:70:63:0a:28:16:38:80:d0:85:a9:54:c8:
58:47:a3:2f:e4:f3:b7:d4:96:77:84:9a:da:3b:9a:cd:3f:c7:
0a:8c:38:13:9a:28:dc:2e:b6:3f:55:66:69:3b:4f:bb:ae:5c:
b6:24:01:d3:22:d4:31:f1:b5:b4:7d:43:d5:be:fd:7b:98:8a:
13:86:2a:12:1b:a2:5f:66:34:13:e4:70:ad:66:c0:a8:7b:4b:
f9:5a:24:ba:5c:22:c4:3a:bc:74:6b:1b:ec:c8:71:e9:42:8d:
ec:58:48:c0:43:88:3b:a7:f4:ef:d1:af:ab:c8:ae:4e:4a:44:
58:bf:72:30:d8:dc:11:1d:42:fa:0d:49:5c:72:a2:8c:09:68:
9c:fb:13:c1:59:97:5e:79:d8:05:ab:cb:d5:01:6e:a8:ea:c5:
b7:ba:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:39 2025 by rpki-client on console.sobornost.net