Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c5ab95-2d79-309d-8d10-6932ade7e9bb.roa
File: 94c5ab95-2d79-309d-8d10-6932ade7e9bb.roa (raw, json)
Hash identifier: 1WR11eucSNv+7BPKyEIpybYvfIAhQyy1uk6LK4cIw1g=
Subject key identifier: 29:FF:58:5B:53:E3:39:4B:0C:D6:AF:F9:92:44:0A:E8:67:2F:51:4C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849674EE78600DB52E1B0FA9900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c5ab95-2d79-309d-8d10-6932ade7e9bb.roa
Signing time: Thu 03 Apr 2025 13:01:02 +0000
ROA not before: Thu 03 Apr 2025 13:01:02 +0000
ROA not after: Wed 02 Jul 2025 13:01:02 +0000
asID: 16625
IP address blocks: 23.208.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:67:4e:e7:86:00:db:52:e1:b0:fa:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 3 13:01:02 2025 GMT
Not After : Jul 2 13:01:02 2025 GMT
Subject: CN=97e70c16-f14e-45b5-b17d-003f87fd6bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:60:08:dc:84:48:75:53:2e:f0:de:91:7c:
09:bd:e0:10:a6:b2:52:46:b8:c3:ae:d2:5b:ba:09:
5f:5a:df:1b:a5:a5:c5:f7:7e:43:29:57:b0:29:63:
ec:66:0c:c6:c4:cc:aa:a0:01:00:f2:fa:e8:60:4b:
0f:2f:d7:b9:42:6a:a7:64:33:f2:89:61:24:0b:ab:
66:3a:c7:f0:58:4d:ca:de:9b:25:2a:bd:62:9d:25:
a7:50:68:46:79:dd:3a:67:67:1a:24:00:02:da:a0:
bf:ae:85:79:de:ad:13:e6:30:c4:72:cf:ec:9d:cb:
18:73:1d:64:4f:5a:93:9d:25:76:e8:2e:06:b9:a4:
20:e4:c1:2f:ea:54:30:44:28:a6:34:37:ab:5d:1c:
46:99:98:ff:73:95:b3:39:d3:d2:bd:9a:cc:0f:57:
5f:fd:fa:23:74:95:15:03:2b:d4:b4:24:93:12:7d:
ae:ff:2c:73:51:3e:f4:c2:9f:1c:18:35:17:6f:f0:
94:c5:25:bd:76:27:5c:e3:00:24:84:4f:e3:ef:25:
22:c4:70:4f:3e:db:7d:03:e7:a2:15:51:27:87:16:
14:17:f3:49:58:c0:41:d4:9e:27:f3:e3:ea:19:dd:
e0:4d:75:33:10:52:8d:70:54:a9:fe:27:74:d7:36:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FF:58:5B:53:E3:39:4B:0C:D6:AF:F9:92:44:0A:E8:67:2F:51:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c5ab95-2d79-309d-8d10-6932ade7e9bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.208.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:6c:c5:b4:84:bc:c5:61:af:54:f7:f0:66:3e:31:19:b4:8a:
4f:be:df:72:a7:25:7f:ff:f7:05:28:4d:79:d1:f8:33:6b:24:
5b:fe:50:dc:50:77:e3:3a:4a:b1:fd:29:fa:66:be:e4:6a:6c:
c1:a6:9e:12:86:50:9b:a4:f6:90:11:bd:05:3f:ca:77:42:4e:
d7:bf:e0:4e:61:9e:a5:6b:97:d3:27:fb:27:c0:ec:3b:56:57:
ac:6f:aa:b7:ab:d8:cc:95:08:00:61:09:f5:8a:41:fe:f9:5c:
1a:19:5c:54:c7:a9:44:9d:60:66:92:53:9c:02:04:87:46:b8:
72:2d:aa:49:87:7e:69:b5:e2:98:d4:53:a2:67:34:42:68:76:
a4:3b:b8:af:f7:0d:e4:e6:85:ba:ab:ce:64:a7:a5:9a:54:c0:
08:79:fb:37:98:9d:3d:5b:fe:16:45:3d:60:72:49:13:cf:c8:
0e:4a:13:da:44:34:6e:87:8e:04:88:37:5c:43:80:06:bc:23:
91:b8:b4:89:de:14:0b:5d:af:8f:19:ff:64:c3:76:14:03:93:
40:65:73:8a:8c:76:46:19:a0:ba:32:a9:b8:b9:eb:a8:97:9b:
47:5f:08:7f:bc:a5:ab:3d:50:13:56:1b:08:d5:53:fa:0a:af:
36:e6:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:29:28 2025 by rpki-client on console.sobornost.net