Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/553145d9-a510-3cae-a527-4a68ba430a78.roa
File: 553145d9-a510-3cae-a527-4a68ba430a78.roa (raw, json)
Hash identifier: fkWU9mZbzN2BHEAU1WtN3nM/A5lCYUNwNQc3ybDzufs=
Subject key identifier: AA:1A:7D:95:F5:98:88:52:90:7C:79:68:B1:B5:A7:22:40:CD:40:CB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848318AB170FF6E24E40FBAFAE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/553145d9-a510-3cae-a527-4a68ba430a78.roa
Signing time: Fri 13 Dec 2024 14:00:50 +0000
ROA not before: Fri 13 Dec 2024 14:00:50 +0000
ROA not after: Thu 13 Mar 2025 13:00:50 +0000
asID: 35994
IP address blocks: 23.66.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:8a:b1:70:ff:6e:24:e4:0f:ba:fa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 13 14:00:50 2024 GMT
Not After : Mar 13 13:00:50 2025 GMT
Subject: CN=ee0ee251-962a-41e3-a89e-0ee8fa63eb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:8f:29:a4:dc:46:0d:b8:ce:e0:54:6f:ba:
25:16:28:c4:e5:c4:2d:f8:d2:89:8a:4e:2b:8c:a2:
a7:f2:27:3f:03:24:20:87:65:89:00:18:f6:cb:7b:
1f:72:f6:18:70:02:5b:5a:ec:e7:a2:71:a8:d4:cc:
0d:30:a1:e8:c0:38:dd:8e:3f:c4:2f:4a:80:5e:6f:
ef:4c:bb:ba:7a:35:40:2b:da:97:7b:c3:6f:c6:b4:
c3:23:88:95:ce:ae:57:d0:ce:5f:3a:bb:df:da:09:
ec:23:54:0b:80:eb:07:f8:31:0a:8d:6a:61:7a:8e:
a3:cb:63:ae:9b:82:61:20:4b:8b:4d:ca:a2:67:8a:
3d:83:91:40:96:ca:25:a5:1e:31:15:2d:be:5a:05:
14:da:ff:dd:93:4f:0a:f9:06:fe:d1:87:35:bf:dd:
58:e7:62:a1:bd:56:91:67:1b:29:71:1d:b6:c9:c7:
f9:98:34:1b:1f:40:4e:a6:94:84:3f:bb:ba:05:c1:
24:c4:a8:ec:b9:97:57:68:1b:30:7d:83:8b:c9:75:
4a:01:ad:d6:df:f6:24:b9:f1:0e:22:e7:e0:af:21:
e4:55:02:3a:df:da:1b:b7:33:ed:ba:1d:75:fc:e5:
4a:b6:cf:70:dd:57:8a:1a:ad:4c:25:d8:27:fc:40:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:7D:95:F5:98:88:52:90:7C:79:68:B1:B5:A7:22:40:CD:40:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/553145d9-a510-3cae-a527-4a68ba430a78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.66.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:b2:25:e9:f9:db:54:53:0b:12:1b:cf:7e:c9:36:9f:07:29:
3d:2b:22:ae:0b:68:0d:6d:da:5c:13:75:27:27:f9:b9:e8:2c:
a2:ac:43:9f:22:6d:3a:e3:08:2e:c3:3c:57:54:d3:6f:83:25:
f4:ba:d0:bd:f1:1a:e6:92:ac:e7:13:33:1d:5d:af:bd:16:8a:
4e:16:60:33:0a:b1:6e:32:05:d3:fa:a0:34:2f:43:4f:b0:49:
09:03:68:e5:aa:7c:38:3c:9a:5b:ba:0e:1b:64:d5:0d:3e:b3:
46:f4:7e:c6:a9:68:92:6c:fc:ac:57:a4:42:5a:28:9e:42:68:
6d:c5:0d:84:58:e4:68:7e:c1:6b:28:3a:84:45:31:d2:5e:09:
46:11:d9:a7:78:bc:1e:4e:d5:30:16:2b:07:da:23:e2:b3:2d:
33:71:f9:14:5e:fc:39:a9:2c:b9:05:f1:94:18:e4:03:a8:c7:
1c:e3:c2:14:e0:4d:78:f6:d2:be:46:3e:77:f6:77:79:4d:f2:
40:05:d0:01:60:1b:3f:c3:25:4e:fb:55:9b:13:a1:55:7b:86:
ea:94:fe:a4:36:2e:80:11:19:91:29:cc:fd:c5:f5:81:0e:51:
bc:f9:fd:4c:6f:c1:82:87:1b:4f:bf:53:8d:5a:21:5b:c0:ae:
16:d0:ac:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:33 2025 by rpki-client