Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74a380e0-ee97-3374-9a06-7b2afac09d11.roa
File: 74a380e0-ee97-3374-9a06-7b2afac09d11.roa (raw, json)
Hash identifier: J3MuEON322+DAVk8LBlyuGu9QaF/y+FHaki7sMOtwJg=
Subject key identifier: 4A:81:64:7C:2D:0F:AB:EB:CE:70:07:49:4B:C5:DB:76:17:11:6E:61
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB895626EF4743D8A12000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74a380e0-ee97-3374-9a06-7b2afac09d11.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.209.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:89:56:26:ef:47:43:d8:a1:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=7b524e8b-645e-4f54-8b95-9a4e8296ddd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:d0:46:ff:f7:0e:6f:d0:63:fa:78:aa:a0:
52:fe:43:94:31:9f:48:13:c3:3b:99:9d:ad:9a:6a:
82:ed:cc:0b:7f:e6:54:3a:02:de:eb:d0:bb:fe:80:
9d:8f:dd:ef:b7:58:23:f1:a1:44:13:07:a6:14:86:
5f:c4:88:a4:81:96:d0:b1:e3:be:54:34:53:50:87:
d6:9d:3f:34:42:8c:a6:14:b4:3d:fe:40:f2:49:21:
31:47:e0:59:2b:a5:f3:eb:49:d0:7b:0a:a9:28:eb:
87:cc:60:eb:f3:86:3f:ac:98:a7:8b:0c:6a:87:3b:
cb:ca:13:50:a9:ef:12:5e:ea:f4:49:2b:74:03:fa:
b5:2e:95:b8:35:b7:25:5a:17:52:40:24:4b:b2:9c:
7e:7d:e7:45:44:f5:54:4e:a5:83:ca:b7:5e:62:90:
d7:f2:0e:73:72:2f:41:aa:20:de:04:8a:c8:5c:57:
c5:c1:b7:3d:56:26:7d:18:30:a7:c0:dc:44:0c:82:
ee:5a:92:7e:57:a9:6c:3d:ae:4a:58:e0:b5:31:82:
a6:19:42:6d:d7:ef:d8:9a:ed:03:06:38:3b:b1:83:
42:2a:a9:8f:01:e9:66:30:13:12:b7:ee:fa:92:db:
17:08:82:89:bb:e0:f3:81:c4:bf:db:5b:c9:0e:48:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:81:64:7C:2D:0F:AB:EB:CE:70:07:49:4B:C5:DB:76:17:11:6E:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74a380e0-ee97-3374-9a06-7b2afac09d11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:ac:77:26:5f:ad:d6:73:84:68:2e:60:a4:25:4f:5c:58:3c:
72:99:fb:61:ca:66:9e:a2:3f:30:3d:f7:ce:4b:00:08:5e:ec:
d6:98:5f:1a:ab:9b:6a:da:3a:f3:a3:32:a6:fd:a1:e9:54:16:
f8:c1:60:4a:e7:b8:3c:2b:a7:bb:68:f1:30:1e:d4:a9:30:52:
e7:4b:04:16:30:f6:ca:68:d7:86:f2:35:03:2f:7f:b0:1e:89:
f6:75:d7:f0:ac:a7:bd:ed:29:24:e4:6e:93:0a:df:54:e9:a5:
98:cf:b1:75:89:d2:c9:4d:62:56:f1:84:43:cc:91:5b:0c:bb:
01:97:c2:c7:78:b6:6a:7d:f3:ac:a6:fd:40:fb:a9:59:0a:6c:
b9:b0:21:92:13:ba:b6:54:a6:b8:d7:10:ef:1b:b3:81:62:7f:
08:7d:43:24:21:f1:4f:22:1d:3e:ca:62:e8:24:89:1f:9b:be:
10:86:16:33:6f:3a:cb:11:a3:27:4f:20:bc:12:b4:64:0d:a9:
31:c4:eb:9c:c7:3a:65:f1:81:f5:e1:b9:3a:f4:b2:ab:97:46:
66:d2:5e:b0:b8:c1:e6:91:0b:4b:86:d9:02:31:35:15:66:e5:
12:42:ed:7d:5c:47:59:4f:9f:3f:9a:ad:f9:b0:e4:db:c2:d3:
f4:74:56:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:09 2025 by rpki-client on console.sobornost.net