Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa
File: 541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa (raw, json)
Hash identifier: SjzuwzOO8IY4rBwVNBwlWuJ38QtN9XE42tGRV2wzDb8=
Subject key identifier: 81:1D:22:23:74:43:A8:06:51:0D:7D:F0:BA:E9:B1:BD:65:68:09:42
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848427AA0A1A1C6E792FF1F9100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa
Signing time: Thu 19 Dec 2024 15:37:19 +0000
ROA not before: Thu 19 Dec 2024 15:37:19 +0000
ROA not after: Wed 19 Mar 2025 14:37:19 +0000
asID: 20940
IP address blocks: 23.52.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:7a:a0:a1:a1:c6:e7:92:ff:1f:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 19 15:37:19 2024 GMT
Not After : Mar 19 14:37:19 2025 GMT
Subject: CN=ec6bf47c-52fe-4862-80ce-1a0302f110e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:94:d4:e0:c3:42:0d:89:79:d8:65:ee:95:
b3:05:cb:51:32:4c:df:d2:e7:26:07:bc:66:1f:51:
17:f0:4c:a7:49:74:5a:f3:ce:b6:a8:85:2c:e8:02:
b6:64:aa:8b:e4:47:3e:b4:3e:fa:ec:1a:9c:4a:5d:
70:58:be:10:03:4f:f5:9d:25:96:f8:8c:46:8f:51:
0f:f1:8d:9d:16:e8:1d:7d:ba:ca:bf:ac:56:f2:98:
fc:80:ec:79:d7:e9:4e:3a:af:79:74:4d:ae:0d:bd:
8a:84:88:dc:38:67:e5:c7:ad:94:e5:f3:d7:45:54:
2c:e2:c9:a4:85:b7:f9:54:a6:90:48:5c:b8:70:28:
f4:5b:23:46:fc:bb:25:f0:2b:59:e0:c5:b9:c1:3e:
13:42:87:b8:ab:a2:4e:98:79:de:04:d1:bc:de:27:
c6:85:86:b9:57:15:2a:5e:41:bd:7f:72:55:b2:1e:
72:83:c5:b3:b1:7d:21:23:77:77:0d:a9:63:b0:6d:
8d:b9:d8:53:9d:f5:57:08:44:da:c2:36:dd:a9:ad:
ee:75:f7:3d:91:33:67:d2:63:5c:ff:8f:07:fc:85:
75:ec:84:5a:2c:08:d8:08:5d:21:43:f5:82:c9:9a:
b3:b7:df:aa:15:23:8e:97:f5:a8:cc:5b:17:11:f1:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1D:22:23:74:43:A8:06:51:0D:7D:F0:BA:E9:B1:BD:65:68:09:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/541a8911-7060-39d6-a2d9-3a18ba1fbccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.52.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:9f:1c:b5:78:55:11:fa:9c:c2:9d:e8:f8:bf:a0:21:f6:d7:
90:8a:3e:8b:02:7d:aa:14:03:b0:9b:a2:d2:cb:90:e5:3f:c5:
58:39:75:82:6e:fb:4d:80:ba:9e:ac:6c:ac:f4:7d:e0:4e:96:
93:e3:11:da:70:a9:f8:0a:01:5e:ba:d0:5d:21:ee:8e:1a:2f:
a2:7a:c7:9f:f9:f6:84:ce:ff:5d:fc:30:92:50:91:c8:9d:4e:
42:de:7c:27:5a:7d:31:0d:cd:fd:0a:77:22:d1:04:0f:1f:f5:
7e:29:9f:89:8c:2a:6b:71:35:67:43:50:bd:90:be:26:dd:6b:
92:eb:bd:c2:ce:30:2c:06:a8:27:b6:86:4e:3c:a9:1b:10:87:
f4:5b:fc:95:20:f8:af:a1:c5:a9:3c:a4:3b:7a:09:d7:42:a4:
a2:55:f2:e7:e8:c7:a9:f7:a7:e1:53:0e:0f:7a:e7:c4:75:fa:
0f:21:8a:e4:f1:44:91:47:1b:75:3d:ce:d5:d9:4e:ce:96:98:
b0:e5:c9:a9:c0:f5:77:f9:06:22:8b:ed:c4:f7:53:2f:e3:86:
ce:c8:ba:5f:ed:bd:34:2f:af:d6:37:b5:07:01:b9:9f:6b:69:
8f:8e:0f:f2:16:98:41:54:f5:f2:02:bf:0a:7a:71:4e:ea:88:
ee:5f:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:31:57 2025 by rpki-client