Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52ada365-5289-3d2f-8c48-bd4d7fd90d95.roa
File: 52ada365-5289-3d2f-8c48-bd4d7fd90d95.roa (raw, json)
Hash identifier: w6G0OBvixQBPcyIr4F8Cr6YRvM3GjgbYFZNc/YNfXbY=
Subject key identifier: ED:AF:AC:CE:C0:35:B2:0B:9A:D0:7F:A2:86:C5:47:D9:F9:98:B8:67
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848854B6C85E74EECB04CD35500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52ada365-5289-3d2f-8c48-bd4d7fd90d95.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.52.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:6c:85:e7:4e:ec:b0:4c:d3:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=4d250752-7802-405c-b168-35708fac8516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3c:9c:32:db:ac:e3:b0:5a:61:44:90:79:f6:
5a:4b:6f:26:51:ab:6e:06:34:19:09:2d:bf:f5:7a:
c9:17:9c:b5:33:9e:6b:8d:2f:29:f5:27:c2:16:00:
94:81:fb:81:d3:82:1d:75:1e:ad:a6:d8:7f:89:76:
69:30:23:f1:b0:4c:cb:c7:b7:6c:c1:19:e1:03:3b:
da:e1:d3:f1:32:cd:08:2f:f3:8e:98:a7:b6:07:db:
f0:36:02:33:74:d5:4a:87:d2:37:08:2b:ea:3a:11:
c2:02:20:f1:38:4d:77:d2:4d:68:a3:ea:67:cb:b5:
e2:f1:ec:1d:9c:36:bc:50:20:cd:64:46:6b:c2:71:
57:7d:30:4b:37:15:7e:79:82:3b:fe:f3:4c:56:b4:
a7:db:36:96:d1:1f:a1:ad:77:40:cc:13:e3:af:aa:
ea:b7:ca:00:42:c7:16:1b:07:58:8e:09:38:fa:8e:
66:ca:6b:e2:27:41:be:47:1d:d3:66:ba:64:60:9b:
2d:8d:62:ba:4f:1a:63:01:73:d6:88:b7:13:12:02:
85:70:9e:8a:6b:55:ed:f4:bf:3f:3c:ce:1f:70:ee:
62:b9:05:38:bc:5c:34:d3:a9:5f:12:98:30:85:f1:
cc:e3:ea:29:62:2d:00:75:56:bf:1e:cf:00:d3:b8:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AF:AC:CE:C0:35:B2:0B:9A:D0:7F:A2:86:C5:47:D9:F9:98:B8:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/52ada365-5289-3d2f-8c48-bd4d7fd90d95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.52.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:fd:ce:d9:61:34:74:3b:51:a6:1a:73:64:2f:86:c8:fd:12:
48:86:18:0a:a6:49:c8:2f:fc:4a:be:4c:34:c2:32:d7:fb:ea:
5a:71:59:06:28:e5:62:07:0c:f3:88:2b:02:a0:ed:cb:2a:71:
bb:91:57:0b:f5:9e:d1:31:1b:7a:26:4f:f7:47:97:f1:ef:cf:
52:e4:e9:d8:c1:e2:ba:36:a3:2d:4b:62:08:3c:44:c3:f6:a5:
dd:37:bb:df:a1:62:c6:d7:e4:42:28:d5:ad:9f:2c:47:ab:e9:
90:8e:5c:e4:a7:c9:9e:70:2a:03:04:00:b4:a0:54:e2:8f:12:
9b:e9:f1:4a:22:ab:d4:3e:57:d0:f5:b4:0f:e6:38:87:b8:a5:
af:3a:4c:13:2e:ef:37:48:a9:e8:e3:09:a9:42:3d:43:8f:11:
d1:03:93:52:83:95:38:a6:3c:53:74:ea:1f:4f:8b:2f:b4:8f:
bd:e6:97:c7:e8:01:05:82:8c:72:f7:54:ea:1b:07:7d:ac:aa:
f6:73:b6:f2:be:a7:3d:ba:0a:a9:b8:d0:55:1c:91:5c:f1:c6:
b3:48:3c:69:b9:5e:72:68:04:e7:39:24:18:aa:0a:eb:01:34:
dd:08:49:11:9f:b4:c2:6d:05:b5:17:b2:55:28:48:ca:c9:2e:
e8:d4:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:37:45 2025 by rpki-client