Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44d6d319-2090-3fd4-a170-3c6cdaa1ad0c.roa
File: 44d6d319-2090-3fd4-a170-3c6cdaa1ad0c.roa (raw, json)
Hash identifier: DL+dDXJzU8bjm9DUEN4xvHDSgFWzFQn/dP7Jr+KeixE=
Subject key identifier: CD:D1:FC:CC:5B:AE:4C:FB:4A:41:CA:74:87:86:BA:01:B6:A0:01:A3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BDCC1315C74A283342C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44d6d319-2090-3fd4-a170-3c6cdaa1ad0c.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 16625
IP address blocks: 23.213.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:bd:cc:13:15:c7:4a:28:33:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=d0645e04-ff94-488c-aaf9-b5f31f971b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:ca:35:08:ff:b5:47:63:9d:22:dc:e0:6f:
8a:74:ea:69:bb:3d:72:43:32:d5:3e:07:c0:ae:08:
15:ae:cd:3b:d0:f8:27:f1:d6:64:29:14:69:3d:b0:
b0:f1:f9:51:e1:16:fb:b4:06:4b:47:c0:a0:3f:f9:
54:72:b6:72:57:43:a1:26:37:a6:5a:91:a8:79:1d:
4f:47:c4:db:88:be:73:7a:8f:52:f4:04:3a:5c:5a:
7b:93:c0:46:dd:ea:2d:4e:a0:a6:da:69:44:4a:3f:
09:6b:1c:4e:cc:b5:f1:a9:0c:5b:ab:08:6a:ba:df:
00:d3:ef:02:93:ca:82:e6:95:45:7d:d8:56:16:fa:
f2:42:8d:f5:e7:cb:74:b3:ca:00:ae:54:eb:01:52:
f3:6e:53:a6:03:11:44:bf:9c:0a:5a:ef:30:37:65:
0b:8e:3b:ba:91:df:b7:73:af:f3:42:a0:07:e7:71:
c5:f1:dd:a2:aa:c2:b4:c8:9d:b0:50:d4:81:06:9f:
1c:4a:cb:83:65:c3:02:76:e6:bd:b2:67:95:c6:e6:
0a:12:46:ab:3f:9e:ef:32:cd:b9:83:85:46:0d:fd:
18:e0:13:2a:92:0f:31:4b:9b:ac:be:37:79:8b:52:
b7:c5:43:4a:10:0f:44:ca:d9:b5:9e:b0:f8:10:90:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D1:FC:CC:5B:AE:4C:FB:4A:41:CA:74:87:86:BA:01:B6:A0:01:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/44d6d319-2090-3fd4-a170-3c6cdaa1ad0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:73:2b:23:b4:ff:9e:11:16:df:64:7b:11:fe:ce:06:8a:5d:
22:05:d8:6f:fc:62:c7:90:9f:15:8a:62:b1:32:b9:86:74:c2:
73:88:ce:bb:00:14:ef:fc:ac:d7:4c:a4:48:7b:f0:07:81:bd:
aa:65:c6:5b:17:28:37:8f:e2:b3:3c:ae:71:71:ab:97:c4:cd:
7b:9f:48:67:4e:e4:59:e0:b4:46:21:09:85:05:92:e2:b6:62:
45:1a:fa:d8:75:c8:b7:01:00:f7:20:c3:54:ae:19:0b:5c:7b:
67:f3:33:3a:e1:ee:2b:9c:40:d9:23:5e:2d:91:38:5e:b4:55:
ae:6c:db:f4:28:a4:d7:3b:69:e1:3e:9d:3f:28:a7:0e:04:f7:
84:1f:7e:d2:0e:95:94:fd:f3:be:6e:4b:75:ae:2b:e9:25:2b:
c2:30:2a:ee:63:e5:52:41:ed:d3:a5:94:46:92:9d:80:96:4f:
c0:c1:55:f2:8b:7e:cc:c3:b6:0a:0c:84:b0:2c:b1:58:53:03:
43:9d:e6:90:5e:da:43:c0:43:97:96:f8:ae:42:a1:e7:c1:75:
55:ad:45:12:aa:34:69:91:40:d2:b1:61:5d:af:42:a6:b5:47:
6d:e6:c6:54:24:2f:e8:94:da:4a:45:cc:ff:ba:ce:2d:f1:e2:
11:de:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:47 2025 by rpki-client