Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b543965-9fad-3a4c-8589-b2a0842851d3.roa
File: 5b543965-9fad-3a4c-8589-b2a0842851d3.roa (raw, json)
Hash identifier: 1QmsWrUY8IqKKq+Ldg30rbnWdl0Xa/B3P71uHZa38tM=
Subject key identifier: C2:82:2A:F2:52:66:71:51:D8:6A:F6:A7:0D:00:66:74:24:5A:39:CB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847EA5A067C802C37248662C380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b543965-9fad-3a4c-8589-b2a0842851d3.roa
Signing time: Mon 18 Nov 2024 02:00:27 +0000
ROA not before: Mon 18 Nov 2024 02:00:27 +0000
ROA not after: Sun 16 Feb 2025 02:00:27 +0000
asID: 16625
IP address blocks: 23.218.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ea:5a:06:7c:80:2c:37:24:86:62:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 18 02:00:27 2024 GMT
Not After : Feb 16 02:00:27 2025 GMT
Subject: CN=a1ae385d-4bbd-4b50-882c-325766a2f459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:36:75:6c:ea:4e:b2:9d:c2:04:df:da:45:
a5:ec:c7:2b:f6:f6:51:53:54:36:50:a1:9c:e3:20:
e3:bf:9d:20:09:b8:58:13:e5:eb:30:81:15:84:ad:
d9:3b:9e:9a:05:ba:dc:bd:6c:f7:4f:e2:14:db:f8:
01:57:ec:15:7b:0c:8e:8e:ef:71:d5:d4:54:1c:61:
14:17:b5:0e:da:39:10:1f:38:a6:d9:a3:5e:03:4d:
87:89:32:3c:d2:dd:41:d6:62:2c:ca:e7:95:f3:b1:
0e:12:6c:5c:cf:34:d2:2d:52:8e:93:e7:1f:a0:da:
57:db:54:91:b1:41:b8:84:3f:86:38:48:80:8d:a5:
c0:d7:93:24:2a:af:77:f2:8a:69:36:f2:33:15:21:
e0:73:d0:6b:ff:50:0d:8a:63:6c:a7:41:b5:27:ff:
05:9e:bc:d6:9b:94:04:e1:29:43:9a:87:12:42:2e:
68:55:5c:18:dc:73:a9:12:b3:43:d3:35:40:fa:0c:
fb:2a:a6:81:5b:48:34:25:b9:ec:57:15:61:7b:1b:
a3:00:98:15:f6:b9:6d:ed:7b:f4:9b:b0:6f:69:08:
d9:75:15:40:ca:88:c3:1b:15:3c:aa:aa:cb:97:59:
94:b7:78:91:95:22:9b:51:0f:46:7e:d7:87:2e:d5:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:82:2A:F2:52:66:71:51:D8:6A:F6:A7:0D:00:66:74:24:5A:39:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b543965-9fad-3a4c-8589-b2a0842851d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:16:10:b0:68:d8:56:6f:1f:8e:70:50:9e:71:9a:0f:92:df:
6e:39:32:9d:e5:b5:46:ef:4f:7d:3b:fb:1c:c7:9d:14:79:54:
18:73:6d:07:96:99:61:cd:3b:04:77:4a:30:fa:af:04:e0:89:
63:c1:84:99:96:73:b8:2a:0c:44:f4:60:0c:d8:cd:31:ed:35:
da:d4:35:c7:8b:05:fb:61:99:48:f9:cc:cf:a9:b9:3a:d9:cc:
59:9f:94:8e:d6:72:03:c4:54:80:29:80:43:64:f6:e8:95:41:
b8:0c:18:b9:cb:dd:1a:84:80:e0:12:58:dd:82:66:6c:93:06:
a0:85:d9:36:cd:be:4d:28:37:ee:98:ee:6a:95:83:be:f3:91:
0f:ce:43:b9:0d:ee:88:5c:22:62:49:e3:19:d6:c7:3a:d0:cd:
91:01:37:e6:f2:db:78:49:30:03:8a:ad:6d:9a:69:f4:fc:49:
cf:fe:31:81:76:2e:7a:36:31:9d:eb:da:74:fc:b4:e5:a6:33:
38:99:76:62:02:dc:f7:86:19:4e:50:b6:2d:4d:6a:ee:6c:26:
7d:be:72:34:30:14:a5:4a:16:0b:47:34:02:5f:0f:5d:dd:6d:
63:bd:3f:24:35:03:c8:b9:92:f7:92:f3:1c:f3:bc:e6:27:88:
bb:c0:09:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:49:02 2025 by rpki-client