Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b59e483-af63-390a-b234-703b07da92d2.roa
File: 2b59e483-af63-390a-b234-703b07da92d2.roa (raw, json)
Hash identifier: pBif7Jz4qgYgJDOiuyfVkgx0W7362nHn/YzEs2/JqUI=
Subject key identifier: 58:12:48:08:77:55:24:CC:2A:D9:67:62:8B:85:E5:0B:11:1A:E9:6B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847F584DD8A853238FE31DDFB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b59e483-af63-390a-b234-703b07da92d2.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 20940
IP address blocks: 23.213.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:dd:8a:85:32:38:fe:31:dd:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=2c3b518a-98a1-4dd8-a288-28e0d3a4c6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:fd:8d:50:8e:98:46:97:48:c4:53:f7:82:
74:00:da:10:c2:79:41:b5:09:dc:b7:5b:0f:b0:35:
c8:24:0e:9c:cd:3f:19:0e:7c:57:d5:d3:96:4a:5d:
d4:bb:54:f8:27:fd:cf:5d:fc:49:cc:2e:8e:fd:81:
0d:fd:9d:58:ed:4e:f3:8f:c4:f8:79:b1:12:60:d7:
c3:27:6e:7a:1f:a1:08:fa:ac:7d:bc:ee:70:b1:e9:
52:b7:8f:e3:9b:7a:13:e0:9e:62:6f:5f:06:38:de:
cc:75:2e:84:c8:75:83:33:b8:92:8f:78:5b:c0:4d:
14:e4:80:07:77:9e:19:59:4a:af:3e:be:46:84:4e:
9c:4c:c2:ce:47:e6:05:14:1c:52:4d:cf:b5:2a:d3:
48:8e:26:0b:66:62:97:27:24:4d:d6:db:e1:dc:89:
8e:7c:b7:60:67:54:16:5a:db:34:58:84:17:1b:2c:
fb:bd:5d:37:27:60:dc:77:df:a7:1a:2f:9c:60:ec:
f3:8a:c1:4b:77:5f:87:12:1f:5a:67:9c:be:32:ea:
cd:d7:95:c9:ee:c9:40:cd:26:18:38:52:cc:2e:1f:
bb:f8:cc:7d:d7:ca:5a:e2:7f:df:31:1e:c2:52:0e:
5f:97:27:26:64:05:9a:33:0d:6e:08:37:79:69:e3:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:12:48:08:77:55:24:CC:2A:D9:67:62:8B:85:E5:0B:11:1A:E9:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2b59e483-af63-390a-b234-703b07da92d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:28:f8:93:5a:4e:9f:05:fc:52:2e:22:00:c9:6b:f9:ec:8d:
2b:d9:d1:51:d5:3c:76:67:cd:0b:6e:c0:46:05:33:b6:e2:b2:
09:f4:0f:4c:d7:bb:8a:d1:c0:04:70:54:ee:9b:f8:16:51:eb:
9c:88:9f:1a:55:1c:26:ae:0e:15:eb:5f:46:44:76:3d:8c:84:
f0:bf:fd:c2:cc:01:ea:34:52:7a:8f:23:4e:29:ab:d8:57:03:
44:dc:73:2a:5b:e5:d2:6d:97:ff:ad:96:e0:f5:bb:de:89:8c:
3c:1f:e9:f1:e9:50:84:7c:ca:b8:40:18:cf:95:b9:01:88:43:
9c:63:c2:46:ea:da:61:a4:dd:0d:b1:cc:40:c9:55:3a:f8:24:
e6:eb:c0:61:ea:56:9c:20:ef:f0:f1:27:35:cc:8d:a7:60:e8:
d1:06:e9:a0:08:94:8b:f1:41:24:8b:95:4e:20:be:20:2a:d6:
b4:c8:ca:24:b8:36:df:7c:25:ad:c3:57:0a:c6:19:92:8c:81:
f3:01:40:d4:08:99:a8:bd:6f:da:e4:60:f7:09:72:e4:89:1c:
e9:b7:36:06:bf:b9:43:2e:7b:13:09:90:46:05:b0:7b:cb:97:
a5:a5:51:8e:46:2e:4d:8d:90:76:2a:cd:29:7c:8c:cc:5d:b4:
7c:56:1f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:54 2025 by rpki-client