Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa
File: 3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa (raw, json)
Hash identifier: tj+SlhJOgLXBbnffdgobL4nMYL28QaufjgpPAYSntOk=
Subject key identifier: 8D:46:5C:84:00:60:53:11:46:AD:07:CE:48:23:96:66:44:41:E7:AF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847DF2F60656D199F17514507EB
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 16625
IP address blocks: 23.217.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:60:65:6d:19:9f:17:51:45:07:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=fe645389-4386-43a6-bd77-1fcd2dfa78da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ec:8e:2c:f0:2d:da:64:3c:aa:f8:c3:85:41:
0c:d3:4a:82:72:7b:6f:ec:c4:c2:7a:84:6a:dd:e6:
8d:75:22:84:a2:75:aa:11:e3:56:1a:7e:39:b6:0a:
99:56:32:57:26:ca:3f:6e:3a:51:5d:61:86:ea:c5:
4e:86:72:c2:20:81:39:ca:8c:59:22:74:cb:fe:3c:
d9:1a:8b:29:37:c2:e7:e9:58:41:da:5b:c8:57:3e:
e3:59:ec:65:cd:f9:7d:27:3b:99:59:f3:44:23:46:
86:ba:0d:f4:af:d4:b9:81:06:a1:88:82:e5:57:af:
82:e6:28:a5:ee:27:9b:c1:d6:11:86:4b:5f:6c:4d:
a8:d7:68:7a:3c:49:b2:f7:98:3d:51:6b:74:41:61:
49:98:9c:a5:90:f4:9c:a3:e4:e3:50:6f:24:84:3e:
c0:3e:95:93:40:1f:e8:fb:b2:44:c0:62:cf:8e:d9:
f8:5b:a5:40:d4:90:e7:2f:5e:25:b1:2c:19:02:e2:
e0:d2:bf:6f:fc:29:b9:4a:98:19:98:cc:de:4e:01:
cc:34:9d:e8:ec:96:d6:3d:0b:66:de:a5:9f:cb:41:
21:97:a9:7f:3c:d4:c7:15:24:44:b9:dd:cc:16:dc:
46:5e:0e:c5:54:ab:f4:e6:cc:26:19:fd:c5:e7:d9:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:46:5C:84:00:60:53:11:46:AD:07:CE:48:23:96:66:44:41:E7:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c1631b2-8192-3aa6-a0c5-7fe18a0ef5b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:41:e4:bb:a4:f8:10:ce:2c:32:65:f9:09:2c:4e:2e:cc:c4:
4e:c2:69:a8:84:89:bc:eb:0a:ce:66:df:b0:bc:77:28:af:76:
15:10:26:cb:22:24:b9:68:2d:1e:8e:8f:c4:5c:5f:07:ac:7f:
85:bf:5a:31:0f:0a:fa:22:6d:e4:a3:d7:eb:e3:d6:21:dc:d5:
d7:f7:3c:d1:8d:60:c6:99:40:61:de:af:ac:f9:22:43:07:d6:
44:47:fd:c3:28:3b:f0:8b:0e:f7:eb:d7:d9:5b:88:ad:c2:ba:
bf:e4:dc:92:dd:88:ef:27:f4:59:f7:92:29:da:1a:fa:bf:ec:
ef:d8:1f:ab:2c:c5:82:e3:84:92:f5:7f:bb:dc:e7:38:70:fb:
cc:cb:84:0a:7f:7f:55:f0:40:fd:bf:bd:13:0b:a7:69:e6:ea:
85:05:f3:90:b0:66:1c:91:b2:5c:49:a5:69:7d:15:c7:a9:a8:
e2:38:60:2a:15:f4:ed:70:cb:e3:f8:4e:d3:91:84:bc:ef:d8:
65:8e:58:ed:c8:a1:2f:55:d1:3a:f2:5d:f0:48:c6:4e:9b:03:
58:43:87:5d:4e:f7:a6:ff:13:16:b4:ec:fe:89:8f:0e:43:91:
71:ef:ad:b0:bc:f2:fe:eb:19:57:f7:cb:52:b0:4b:9c:c8:43:
20:be:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:39 2025 by rpki-client