Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f5c9445-2b59-31eb-94ac-dab3c3d45eb8.roa
File: 4f5c9445-2b59-31eb-94ac-dab3c3d45eb8.roa (raw, json)
Hash identifier: CeUyrmGWN8DWefKPBKaUt1Oz0sTtdjhQcy46d7tqc0I=
Subject key identifier: 4C:6A:7D:D4:B5:B5:23:85:4C:BA:D5:DD:05:0F:BE:E6:73:EE:FC:7A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847EA5A07180EC4D23EBBB2AC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f5c9445-2b59-31eb-94ac-dab3c3d45eb8.roa
Signing time: Mon 18 Nov 2024 02:00:27 +0000
ROA not before: Mon 18 Nov 2024 02:00:27 +0000
ROA not after: Sun 16 Feb 2025 02:00:27 +0000
asID: 20940
IP address blocks: 23.218.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ea:5a:07:18:0e:c4:d2:3e:bb:b2:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 18 02:00:27 2024 GMT
Not After : Feb 16 02:00:27 2025 GMT
Subject: CN=7c3f25be-fdf0-4c50-871a-afa5dcc6b9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7d:c3:69:0a:40:0d:90:f1:1d:58:09:5f:7e:
10:be:fa:09:cc:71:1d:80:97:87:0a:6c:bd:46:28:
e2:b9:f3:7d:ed:4d:c9:0f:2e:98:b4:19:c7:e2:c4:
ff:35:4f:0b:90:56:bf:c5:7f:c8:5b:34:a9:8b:aa:
6e:bd:e2:a8:df:85:33:31:b9:40:65:c3:80:b5:9f:
1c:d2:44:3b:cf:5f:b0:de:d1:91:39:29:b0:13:0c:
f5:bc:f7:4b:f8:82:29:55:bc:1a:b8:7d:e7:2d:74:
fa:40:15:5e:43:ad:e9:76:0b:9c:b5:b5:94:f9:d7:
75:27:fe:9f:f2:b2:fb:1f:eb:ae:cf:ab:b1:c1:93:
67:5a:1c:08:b9:88:3e:72:3c:14:52:63:f5:45:ae:
a0:4f:16:69:24:83:85:2b:cf:46:e2:03:89:76:59:
65:98:7a:36:50:18:6e:a8:a1:57:02:4d:ec:86:d7:
5f:3c:43:ab:11:d8:fc:9c:bf:5a:0a:9a:5e:d5:15:
04:64:0b:12:0b:a5:31:3f:d4:13:2f:50:fc:29:8c:
19:0e:e1:fc:ba:ff:7a:fd:3a:50:da:88:78:97:db:
9f:93:42:2a:e9:db:61:b9:57:9c:a9:9b:ae:18:d4:
55:28:51:23:a1:32:bb:db:ec:54:eb:14:c6:a1:b7:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:7D:D4:B5:B5:23:85:4C:BA:D5:DD:05:0F:BE:E6:73:EE:FC:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f5c9445-2b59-31eb-94ac-dab3c3d45eb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:4f:5d:18:36:e3:f8:8e:87:20:4a:de:d6:80:24:c5:a6:54:
ab:30:ac:fc:cb:ac:7e:39:73:ea:c5:b9:87:cd:39:4b:13:55:
04:3b:42:70:dd:af:4b:f2:ec:1b:d7:f8:79:52:37:4a:ba:5f:
f8:3e:63:75:74:25:46:2a:1e:68:15:ec:f1:f3:af:49:4d:7e:
34:0f:6f:ec:e5:e5:44:bd:04:8b:0c:7c:32:7a:13:de:3e:e4:
aa:c6:b2:88:fe:27:26:f3:69:97:fc:79:63:c1:a5:b2:10:37:
51:ae:20:27:fb:09:2e:a1:92:e0:f9:16:7c:2c:a3:70:0f:71:
e6:ab:13:bf:12:bc:e5:99:d1:fd:ce:03:7d:f1:eb:7a:9d:5a:
84:12:3b:0a:d2:a8:04:2d:70:e5:54:d0:ca:b3:d2:d7:61:48:
d1:2e:28:c9:ed:ce:62:0e:fe:09:43:3a:59:97:1d:a5:81:42:
5a:cd:d1:3b:e1:49:48:92:aa:d9:ed:2b:78:cd:b0:e2:5f:ea:
c5:1d:45:97:1b:a2:81:2c:f4:e5:62:01:da:b4:27:18:fe:a5:
48:07:c5:bc:e5:47:8a:cf:b2:f6:85:24:79:19:c1:66:29:1d:
f6:5f:fc:4e:36:4e:e6:0f:61:af:63:2b:3a:9b:b4:91:e7:38:
2a:6c:09:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:00 2025 by rpki-client