Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa
File: 87929612-bcbe-3cd7-b635-f1d289884be4.roa (raw, json)
Hash identifier: E6FfgG4TFUIYleKZM9yxJreNqhmZ9IEpnW7XpSKkRGA=
Subject key identifier: 8D:74:3E:A6:70:4C:F0:83:93:8A:B5:B9:F8:5B:B2:4E:EE:A8:ED:0E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858497544697382A8229A05EF5480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa
Signing time: Tue 08 Apr 2025 13:00:59 +0000
ROA not before: Tue 08 Apr 2025 13:00:59 +0000
ROA not after: Mon 07 Jul 2025 13:00:59 +0000
asID: 20940
IP address blocks: 23.223.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:75:44:69:73:82:a8:22:9a:05:ef:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 8 13:00:59 2025 GMT
Not After : Jul 7 13:00:59 2025 GMT
Subject: CN=85dd9daa-a376-464f-bd27-38847bcf7d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:37:ca:74:0b:05:9a:4e:0e:36:22:ad:6c:
8f:6b:c0:da:26:1d:6c:80:7d:55:9d:09:fa:73:1b:
c6:86:42:b0:e7:f0:75:12:e6:83:cc:e4:15:0c:9a:
74:c4:80:50:1a:c8:c0:24:83:89:1a:55:b3:b4:55:
88:ad:aa:c6:5c:cc:43:d3:6f:be:89:76:ed:b8:56:
df:a6:96:1c:61:50:00:cb:71:20:57:f8:b0:f7:12:
7f:4e:ef:d2:af:4a:de:c7:f1:e1:0b:4c:a6:62:fc:
50:02:41:2d:27:ea:27:d4:f4:d3:71:af:b5:db:7e:
da:a5:b4:3b:fa:4e:8c:7d:6b:59:81:a2:54:d0:78:
63:e6:49:3b:f0:ad:44:48:4d:45:59:4f:3f:5c:dd:
ab:c1:dd:f5:e8:cf:35:10:8b:6e:4e:9c:0b:69:95:
cf:ee:b8:a6:df:c1:e2:7d:3d:45:51:7a:97:8c:8d:
57:9e:1a:3f:3f:d6:48:51:4a:c4:cf:51:83:d5:74:
5e:da:01:49:b2:a5:78:6f:78:0c:10:d0:2c:ba:5a:
fb:b8:00:78:d9:45:d0:9f:fc:52:d4:f2:56:f0:69:
e2:64:ae:c4:79:be:a3:8a:93:9d:a7:98:0b:d2:1b:
52:01:d8:a2:f5:be:2e:e7:cc:74:99:94:5c:95:d9:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:74:3E:A6:70:4C:F0:83:93:8A:B5:B9:F8:5B:B2:4E:EE:A8:ED:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87929612-bcbe-3cd7-b635-f1d289884be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.223.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:a4:5a:43:7c:ab:2c:1d:b8:82:99:af:6b:45:8e:c5:16:f1:
0c:1e:5b:37:46:8b:81:15:2d:b7:a2:f9:d8:8b:e8:20:aa:95:
b9:18:26:75:cc:71:d8:26:b5:b2:37:9f:cd:55:04:a0:9e:91:
ec:3e:e1:75:80:3f:c1:dc:95:60:d8:75:5a:85:04:74:43:88:
ad:b9:93:bf:b4:ae:bd:9c:68:cb:e7:7d:42:7d:99:8d:c8:97:
bc:17:72:27:c6:03:43:98:dc:76:c9:04:04:83:33:6b:0b:bb:
36:06:28:2e:32:72:ac:4b:14:70:55:0c:a5:3c:fa:ab:8e:f1:
2e:ee:93:22:bf:51:e4:05:47:ae:78:66:50:db:b3:16:a0:5b:
cb:7c:a4:3a:0a:0b:07:18:78:a9:d5:87:ff:ad:97:dd:bc:03:
ae:db:43:dd:5a:13:1e:37:4c:cd:90:f4:11:87:66:75:e2:ba:
9c:06:8d:26:d8:b9:84:7f:e5:7a:52:25:7f:c5:fd:9a:0a:f5:
5e:44:91:6f:2b:9f:da:88:c0:3b:39:f5:26:5d:ea:e8:21:22:
93:78:6e:76:8e:46:72:46:bb:f2:bb:65:e2:38:c7:de:0e:aa:
6e:9e:82:a7:10:cd:75:87:c0:82:a4:15:71:1e:ae:47:63:31:
7e:17:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:24 2025 by rpki-client on console.sobornost.net