Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa
File: 6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa (raw, json)
Hash identifier: yxrHczudOWklstQiYKBMhjwCaijPPfjYtsAtwx4aYZg=
Subject key identifier: 1D:28:1F:41:BD:7D:B6:9A:19:D0:72:57:B3:2F:21:4B:D8:CD:06:FF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584834555D1066FC415FF9F10E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.204.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:5d:10:66:fc:41:5f:f9:f1:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=c7be1171-225e-4fbb-94a7-7c881d93f6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:cc:7b:9e:19:e3:44:c5:f3:c6:30:ae:01:
c1:4c:d2:bb:6d:44:c8:9c:d9:c5:42:4b:81:72:1c:
20:98:5d:ab:8f:cb:c9:ec:ad:40:5c:fa:bc:3e:4e:
4d:d8:8e:c0:a0:18:78:b3:79:4f:9c:7b:45:59:cf:
b1:49:1c:66:4d:82:3d:f9:28:30:5c:85:3a:0a:14:
97:49:81:fb:a1:96:c8:2c:69:fa:31:38:b1:7e:7f:
68:e6:e1:32:ad:4d:e6:6b:e0:55:68:f8:68:c3:64:
9e:02:f1:c6:72:ff:3a:51:1d:e6:e8:91:b2:26:af:
da:42:1e:bf:9d:a6:fb:43:83:6c:23:a6:e9:d2:8f:
0c:72:aa:17:8b:04:39:c5:70:f7:7c:12:70:eb:a0:
9c:f2:c5:3b:3b:2c:97:22:9c:09:41:d5:ea:1e:73:
10:05:13:bc:cd:cd:a2:b5:65:23:0d:0d:e5:7b:51:
24:e8:6a:d3:d2:94:6d:1a:27:41:a4:91:e1:ff:04:
d8:89:5d:f4:5d:b0:95:15:02:20:73:97:0a:9d:7a:
0a:4b:0c:45:c1:4f:29:44:1c:8f:ac:fc:25:45:93:
90:2b:fc:f9:af:71:31:9a:87:4b:69:77:03:f8:88:
b0:bd:0d:80:1d:91:a8:59:59:b1:00:5b:77:c6:89:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:28:1F:41:BD:7D:B6:9A:19:D0:72:57:B3:2F:21:4B:D8:CD:06:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb3cb02-3bb0-322a-bda4-41fa77c4545e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.204.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:d4:75:ab:23:3b:70:39:e2:08:b2:4e:46:85:3b:42:8f:dc:
ec:8e:91:17:d1:49:89:c5:0a:e1:75:df:1d:df:72:73:58:08:
00:f2:48:22:bf:bc:41:4f:39:f2:28:b3:f2:7d:11:02:d1:6c:
ac:58:0d:ef:7a:c6:b5:8d:f0:0c:b7:d4:e2:d3:21:b2:93:d2:
29:f6:f2:ef:8a:70:7c:03:d0:f4:52:db:5f:10:a0:14:ba:cf:
63:b3:d1:1e:82:97:b5:b1:42:ed:9c:aa:19:0b:72:04:7a:45:
ce:70:8c:27:9e:89:f6:de:cb:79:f9:58:a1:b6:35:b0:97:32:
31:43:ac:b3:25:f2:e0:c9:d0:79:b1:43:f8:57:4a:01:8b:7c:
4e:c1:60:b0:23:09:c6:be:dd:a9:f7:84:fd:11:af:14:1a:23:
59:d2:bd:d3:6b:be:d8:6b:27:54:68:2c:9f:fd:a0:0e:e2:89:
50:55:12:c9:d7:75:5f:eb:c1:9b:5c:e4:2a:84:40:cc:65:84:
14:3f:8e:5d:b5:3a:a7:87:f2:a3:1a:78:ba:b5:60:ed:44:5e:
cd:f6:bc:88:d1:e4:0d:c7:5b:b1:c6:b3:29:89:a8:1a:92:ba:
e5:a5:9a:d7:5f:7f:79:65:21:bf:5f:18:5f:4d:1d:d7:1b:ce:
b1:dc:1e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:22 2025 by rpki-client