Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c00478b-fc86-32df-9f4f-c5c3e55fd10d.roa
File: 3c00478b-fc86-32df-9f4f-c5c3e55fd10d.roa (raw, json)
Hash identifier: WV4M03KTm9oR73klI3tNJ4lxYABH/gtFymzExt2ksf8=
Subject key identifier: EF:D9:3F:AC:03:86:9A:3F:76:CE:36:A6:DA:DB:86:85:D0:A0:49:FE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485CD036B9BF7D08E8C3690A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c00478b-fc86-32df-9f4f-c5c3e55fd10d.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.43.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:36:b9:bf:7d:08:e8:c3:69:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=6c289525-b95c-451b-9752-c1a6f13f4ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:80:25:8f:4d:8c:56:5b:c0:5c:63:cb:17:cb:
ee:e5:ee:15:f0:62:42:c4:46:72:6d:5d:aa:d9:41:
1c:0d:d0:24:77:04:59:2d:e5:e9:22:77:cf:91:da:
3f:76:74:1e:29:78:aa:7b:58:cd:b3:5a:a6:6a:34:
ac:53:66:fd:81:09:41:ad:16:87:02:7b:2c:7e:63:
1d:d5:b4:03:ac:c0:b7:9f:3e:5f:ac:92:d4:93:bd:
a8:31:f3:2a:c5:f2:3c:bd:e1:b2:ab:68:2e:08:3f:
5e:6d:17:dc:f3:7b:53:a0:62:bf:68:19:92:e5:96:
3c:02:44:fe:1c:07:6e:6a:7f:70:10:47:a3:ac:05:
0e:8b:5b:c5:14:b1:8b:f4:b6:67:54:6d:bf:3c:10:
a8:29:b1:8c:93:20:b1:5d:89:27:81:55:5f:17:6c:
79:72:42:31:3c:d5:12:88:4b:96:cb:03:63:74:65:
51:3f:67:f0:7d:6f:5a:d0:34:56:8b:e2:e5:a7:f6:
40:39:a3:cf:45:79:71:5c:ce:3e:81:5e:12:63:1d:
9c:34:f8:e6:76:23:66:9e:eb:c5:88:ed:c3:7b:c1:
8c:7d:1b:65:75:79:5e:d8:fe:13:cb:a2:09:33:24:
a2:d5:e7:ef:f4:56:f0:51:98:61:99:67:c0:87:d1:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D9:3F:AC:03:86:9A:3F:76:CE:36:A6:DA:DB:86:85:D0:A0:49:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c00478b-fc86-32df-9f4f-c5c3e55fd10d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:6e:8e:90:49:10:29:2d:50:0e:9f:fd:c8:a0:ac:cc:12:65:
cf:ba:99:eb:e4:12:36:c8:38:cc:1a:fa:0a:e5:d0:00:10:07:
7a:bd:99:b0:fa:0b:fa:62:e4:d0:aa:4a:bf:60:77:a4:1e:6f:
00:ca:e2:c5:91:54:7d:51:86:97:34:fd:3b:4b:cf:28:94:29:
a0:27:5b:b6:8a:6e:96:70:3a:63:f0:f6:40:81:98:30:75:97:
03:63:80:f9:9d:03:85:08:7c:d6:a2:62:48:0c:23:5e:7e:c9:
51:84:26:07:20:12:c0:09:41:db:ce:98:14:66:76:f3:0e:e5:
37:c1:3e:65:eb:4c:1b:3a:a0:11:82:11:80:d4:61:bb:e5:9d:
bc:48:b6:b6:d9:0a:90:7e:f8:a9:e6:30:12:99:3e:9a:6b:df:
88:f5:5f:41:f9:02:63:6d:4a:d8:e9:d8:05:1e:97:46:68:16:
f3:3e:20:dc:5d:50:e9:0e:54:c6:a5:87:dd:b0:74:19:b2:12:
30:2a:a3:33:ed:da:20:37:f7:98:f3:41:6c:a7:f1:b4:65:ec:
b7:14:bb:83:bc:9f:51:11:5c:c5:c1:75:27:52:27:7a:78:f4:
dc:d4:27:fb:a4:c1:c3:e8:3f:9d:60:c0:9e:80:0c:96:04:e5:
17:7e:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:35:46 2025 by rpki-client