Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cd6133c-17bd-3695-bc3f-08c47150081d.roa
File: 4cd6133c-17bd-3695-bc3f-08c47150081d.roa (raw, json)
Hash identifier: 4Mzcya9YAXpHT5iqRbRxj6qNTIDon1vrree6SCwBzZE=
Subject key identifier: 25:25:D6:31:4B:6A:14:68:DA:FA:43:00:30:8D:74:09:38:D1:D1:CC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849648452EE7C4E53AFF38B1B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cd6133c-17bd-3695-bc3f-08c47150081d.roa
Signing time: Wed 02 Apr 2025 13:01:01 +0000
ROA not before: Wed 02 Apr 2025 13:01:01 +0000
ROA not after: Tue 01 Jul 2025 13:01:01 +0000
asID: 20940
IP address blocks: 23.52.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:64:84:52:ee:7c:4e:53:af:f3:8b:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 2 13:01:01 2025 GMT
Not After : Jul 1 13:01:01 2025 GMT
Subject: CN=70c4cedf-00f4-4e4d-9ef5-a4ae2c1fe2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:37:8f:b4:a9:77:7c:30:29:e6:10:bc:e5:
80:ca:05:76:32:9e:cb:ce:30:22:37:ca:64:a0:2a:
ea:62:26:d5:bf:9f:cc:2e:92:84:16:62:02:a5:f9:
78:ab:f8:79:e1:4c:1f:5b:fc:4d:c4:81:de:b8:fa:
37:66:0a:4e:ae:a2:40:65:58:59:8e:73:ff:8f:62:
51:c8:60:ac:17:2f:2d:ef:ce:a1:7c:93:53:43:40:
45:be:45:c3:7a:32:4f:70:f7:e2:52:25:1e:9a:b8:
f4:3a:d2:4a:00:2c:ee:64:d6:1a:c4:60:02:7b:4a:
b6:5b:d0:89:cc:8e:3f:39:6e:fa:d6:6b:1a:46:ad:
10:be:30:61:7b:9f:c7:a0:da:48:9e:5a:94:a3:1c:
73:99:1f:bc:1f:96:6a:b8:2f:59:a1:71:c0:56:40:
55:1a:dc:d9:f7:70:f0:14:02:dd:fe:01:ac:bb:c4:
63:c5:c9:db:b1:48:ee:a9:b9:39:93:26:b1:84:5c:
15:d6:29:36:b0:de:17:b2:73:ff:28:63:90:50:e9:
12:1f:dc:f2:30:d5:b4:bf:30:17:63:cd:ca:da:e1:
4f:98:e6:16:91:88:9a:79:57:9e:32:42:2e:4c:33:
2b:98:81:4b:ff:35:f5:c0:9c:07:90:25:52:1e:c7:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:D6:31:4B:6A:14:68:DA:FA:43:00:30:8D:74:09:38:D1:D1:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cd6133c-17bd-3695-bc3f-08c47150081d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.52.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:9d:56:64:43:d5:66:f7:54:66:a1:b1:90:e7:c5:fa:00:49:
60:5c:ca:d2:ee:1f:f3:c6:7d:81:38:d3:30:d7:63:cf:4b:d9:
1b:bc:6d:43:e0:9b:47:bf:f9:34:c4:2f:08:0b:23:d1:28:ea:
df:d2:db:33:1f:3b:ab:2a:e9:a9:0a:7f:18:c4:7c:b5:a6:a1:
78:52:45:42:ec:af:9c:a1:26:66:24:84:c0:ea:8e:d4:ad:92:
b5:6e:0a:88:a2:b0:84:a4:71:b5:1e:a5:dc:da:95:48:58:67:
97:5a:49:f9:be:3d:ca:62:c0:3f:5c:81:b0:02:c9:b4:15:b1:
f7:a6:0e:c0:fb:db:83:44:29:08:ef:d6:40:c4:bd:a5:10:bc:
d4:f1:97:6a:54:6e:76:f9:8c:4c:ba:06:b1:bf:34:11:01:b8:
a0:a9:7d:cb:0d:39:fa:57:1e:71:c1:eb:34:fd:4a:ff:db:fb:
a1:2c:3c:24:19:eb:f3:d9:5f:0c:60:89:53:be:b4:e8:70:77:
7d:64:00:9f:ad:2b:af:d2:65:f0:56:28:2b:d8:e7:79:51:f4:
00:e0:d9:43:7c:42:53:2d:51:ef:8e:32:d8:d5:84:c5:7d:ad:
31:b3:b8:05:65:27:41:14:c6:4a:e3:e4:4d:c3:26:0f:a5:fb:
07:ff:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:59 2025 by rpki-client on console.sobornost.net