Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a975f7c-99d3-354f-b910-9bdd31a55729.roa
File: 3a975f7c-99d3-354f-b910-9bdd31a55729.roa (raw, json)
Hash identifier: tCc1RI5zdTZ1IIpq155fcP4L+OwsUHEALH59Ps4V3C4=
Subject key identifier: 4F:D9:E4:04:E1:85:50:33:E7:B4:A2:83:33:6D:72:6B:77:74:59:DA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847F2BA3D7FE4E4D5EAED405880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a975f7c-99d3-354f-b910-9bdd31a55729.roa
Signing time: Thu 21 Nov 2024 02:00:38 +0000
ROA not before: Thu 21 Nov 2024 02:00:38 +0000
ROA not after: Wed 19 Feb 2025 02:00:38 +0000
asID: 16625
IP address blocks: 23.42.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:ba:3d:7f:e4:e4:d5:ea:ed:40:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 21 02:00:38 2024 GMT
Not After : Feb 19 02:00:38 2025 GMT
Subject: CN=03750bc2-8403-4136-9af8-77c4d230a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:86:0a:09:e0:e3:bb:a3:70:9e:9e:bb:00:8e:
b4:28:c9:c9:01:d5:71:60:07:bd:29:71:59:cb:04:
68:a4:e9:f2:ef:34:27:7b:98:b4:c1:03:94:a7:78:
23:dd:44:ad:c2:41:27:5a:62:e9:c6:03:74:61:a8:
8d:dd:9c:b9:df:cb:52:81:c1:86:b2:b0:16:05:ff:
17:a5:40:bb:4a:0a:a9:39:7f:db:08:62:b8:c2:4a:
d2:4a:45:b8:c5:62:1c:8f:52:da:44:4a:b3:95:f8:
a1:c9:44:43:a5:74:65:59:49:58:7a:10:32:06:5a:
9d:c7:8f:90:57:e0:ae:04:79:20:d5:fc:0c:2d:54:
29:1b:05:3e:7b:98:0b:ee:8e:d9:f7:c1:9a:32:b3:
d5:25:ae:30:77:4f:10:ee:14:fd:fb:f0:1f:6f:3c:
84:95:cb:b5:77:e2:8c:81:d1:62:bc:43:e5:a3:c4:
14:72:21:8b:27:4b:a6:65:98:4f:c6:6e:06:1b:94:
67:bc:4a:7f:45:9f:66:7b:f2:3f:0e:dd:37:6d:b5:
c7:85:4f:bf:35:d2:ed:fb:eb:0c:42:0e:f9:11:f1:
c1:ca:21:80:df:07:76:c1:8d:a3:dd:a4:c5:1f:46:
90:02:43:ed:c4:ad:f5:91:fa:52:4a:e5:6e:be:17:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D9:E4:04:E1:85:50:33:E7:B4:A2:83:33:6D:72:6B:77:74:59:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3a975f7c-99d3-354f-b910-9bdd31a55729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.42.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:d1:c5:3a:4b:39:43:3b:9a:74:1c:d4:e7:75:08:3f:f1:68:
32:8c:4d:d3:0c:45:70:f9:bf:5e:0e:ed:49:77:78:30:53:31:
ae:df:f9:7a:2d:3f:b0:83:27:46:61:d5:95:af:e5:cb:1d:b2:
9f:17:7a:50:c1:30:81:12:75:4f:6d:d0:88:df:d2:48:db:b3:
01:c4:f0:bd:88:df:77:68:22:2f:01:8a:80:66:5a:87:4d:63:
ae:54:26:65:da:5a:a9:44:0d:e5:60:6b:fc:4d:8f:c0:36:70:
ff:1a:aa:68:7b:ec:90:67:15:1f:91:1d:55:8b:93:4d:6d:44:
d9:19:ea:c9:c9:a4:79:d6:63:b1:33:37:54:7f:df:8c:2c:59:
5f:39:d6:07:21:7d:6d:b3:ba:d9:08:2b:a8:b1:c9:70:59:5d:
40:55:41:b2:af:a3:82:55:11:12:c3:93:7e:81:16:f6:55:76:
20:16:d1:40:81:78:aa:b7:03:e4:68:5b:24:61:1c:a1:c3:94:
16:b4:87:da:b2:e4:fb:1c:3e:b1:b7:a1:72:ea:7d:13:11:3e:
43:16:7b:c0:19:41:2f:f0:65:5b:e4:1c:85:73:e5:15:95:db:
13:ef:a1:79:55:d3:fc:db:eb:45:0e:82:6c:7b:e1:d9:de:17:
9d:d0:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:51 2025 by rpki-client