Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5293dfb7-161e-34a8-9965-6521fb787b0c.roa
File: 5293dfb7-161e-34a8-9965-6521fb787b0c.roa (raw, json)
Hash identifier: AeMExXM/kOeLVn3hwzdtMjy/Gt85MBLOOE71Njt14nU=
Subject key identifier: D4:0E:2D:2D:05:2B:2F:56:03:FD:0D:3C:05:F3:BC:0D:BE:D4:92:77
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486C2B073043498747C2D0CE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5293dfb7-161e-34a8-9965-6521fb787b0c.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.208.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:07:30:43:49:87:47:c2:d0:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=5cb03d83-0cae-49d4-b675-26437e44cfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:18:52:77:db:1c:14:b4:aa:26:17:6a:c9:
df:36:7b:59:4c:1c:32:e8:92:84:83:26:25:79:b3:
20:df:f0:0e:0a:e6:69:7f:e3:db:34:dd:20:8e:a0:
c2:19:1c:f3:4d:cf:ae:57:6d:55:1c:eb:0c:90:6c:
10:6d:27:37:d6:ce:2c:ce:17:dc:e8:ff:bd:17:1a:
c7:70:17:d8:66:22:ca:56:22:2d:8b:91:c5:d3:6a:
dd:3d:e1:8e:fd:b3:81:d3:bc:b0:60:97:5b:90:44:
da:ac:9a:f0:98:4a:11:d7:cb:b6:7c:b1:2a:b2:8b:
62:21:c3:c8:18:c7:4b:42:9d:0e:3b:3d:48:d2:a9:
c9:12:5e:dd:ef:8d:cb:76:40:59:9d:93:11:7c:6d:
0a:7b:4f:40:4a:d5:b2:5e:c1:e0:27:5b:88:f6:cf:
33:3e:47:72:42:5e:9d:e3:67:c0:2f:02:00:14:e7:
7d:10:3b:f8:68:c6:0b:a3:86:e5:2b:69:63:e5:c2:
3d:a9:c0:a9:12:7f:aa:af:aa:5e:68:1b:52:45:a9:
b3:9b:e4:df:f0:93:0f:64:34:37:2c:9b:b5:10:19:
c2:4d:89:27:a7:d0:6b:5f:70:a6:bf:fb:29:5f:d9:
0a:8a:e6:6c:a4:0e:48:93:be:47:e2:10:8c:02:11:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0E:2D:2D:05:2B:2F:56:03:FD:0D:3C:05:F3:BC:0D:BE:D4:92:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5293dfb7-161e-34a8-9965-6521fb787b0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.208.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:25:8b:e0:ca:45:41:89:0a:49:1e:5c:87:63:de:4e:bb:0c:
1e:77:2f:02:fe:bd:39:e5:f9:d8:13:4c:8c:e0:b4:15:47:45:
49:38:41:f3:2b:f9:3f:cc:29:c4:f1:4e:42:58:53:2c:83:67:
9b:30:df:1d:94:5d:a9:00:05:5c:45:07:97:e4:fe:d6:26:92:
4e:90:08:6b:90:3b:48:32:8c:be:20:54:dd:ff:a4:b0:69:90:
7b:6d:f0:5a:e6:ce:79:24:35:e8:0a:39:51:52:97:5a:f1:41:
c0:09:92:ac:95:3b:0e:1d:aa:98:e2:7b:ce:05:d4:05:52:42:
47:29:65:7a:dc:20:9c:f8:0f:2d:21:c2:0d:44:45:14:d0:95:
a4:51:d2:0a:52:95:e0:3c:22:59:9c:19:5a:1a:96:56:98:46:
b6:96:75:8c:51:6e:e0:7a:14:81:bf:30:eb:60:33:8e:2a:ab:
ee:9a:da:37:87:ec:29:f9:8e:f3:4b:37:1d:76:5d:8e:38:a2:
d7:e1:e7:47:21:d6:90:4c:1e:b8:d8:8f:93:ab:a1:c3:4b:ec:
28:ee:73:5b:58:fe:b7:57:ba:93:50:67:2f:a5:fe:8d:3f:38:
18:a4:bf:be:22:36:59:ea:f9:3a:2f:f2:3e:9f:17:5a:47:f4:
34:5a:af:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:56 2025 by rpki-client