Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7348eda6-e4cd-3408-b491-79442ffbfa07.roa
File: 7348eda6-e4cd-3408-b491-79442ffbfa07.roa (raw, json)
Hash identifier: uDuNcC5CdndixvnaYidbGgvkMF9ZtWOc1/t3GALkwng=
Subject key identifier: 66:AE:0B:1D:F7:E4:74:A1:46:F0:E7:ED:08:18:57:47:24:6A:A7:83
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485F9B0C46BB30B1163FD59480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7348eda6-e4cd-3408-b491-79442ffbfa07.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.58.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9b:0c:46:bb:30:b1:16:3f:d5:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=2ca1d569-5e85-468c-86c6-e16dd3eae613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:58:d1:10:b2:9d:b6:01:4e:36:bf:13:64:11:
a4:ec:3b:ca:44:50:10:bc:78:b5:0a:f3:43:22:f5:
3d:1b:7d:7a:27:48:7a:85:ec:3b:43:9c:1a:f3:b7:
da:8a:ea:81:7c:95:2f:6e:84:4a:7f:d4:0b:61:55:
fe:b7:3a:da:da:33:7d:16:71:55:b5:59:ef:4b:91:
32:63:52:8e:0b:a6:68:88:cc:98:54:bf:f5:7a:df:
68:b4:ab:e0:42:d4:29:4f:ef:1b:de:70:aa:68:75:
a0:f7:c0:19:2d:6b:84:d8:11:d0:a8:cb:63:27:c9:
b5:6a:31:3e:3e:3f:0d:2c:a2:e3:3e:1e:3e:34:6f:
2d:ed:6b:56:74:bd:8a:b8:52:29:83:40:bd:27:51:
76:bc:2b:e5:3e:b8:dc:6f:55:37:06:3b:9f:1c:d5:
91:86:d2:94:4c:81:10:c4:ea:d1:e7:2d:61:87:67:
a9:76:01:e7:72:dc:72:cd:58:ce:f7:93:bf:1f:7f:
cb:e2:56:9a:98:08:67:55:e8:cf:2b:b9:54:0a:fc:
f7:e6:0d:a5:da:71:33:49:8a:b4:ad:bc:25:b0:cf:
84:5a:50:c0:70:45:bf:81:44:ef:af:4b:38:4c:14:
86:89:2d:ed:d9:44:9a:b5:b0:f0:01:c6:49:3f:3e:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:0B:1D:F7:E4:74:A1:46:F0:E7:ED:08:18:57:47:24:6A:A7:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7348eda6-e4cd-3408-b491-79442ffbfa07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.58.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:a8:ef:6f:00:cb:cd:6c:c3:32:7c:09:54:aa:c7:c1:30:af:
1a:d0:a4:b9:87:41:72:83:8c:b2:ad:60:a7:e5:0a:7e:8a:5c:
2b:58:ec:5d:f1:26:e7:08:06:35:0a:0b:10:18:aa:80:47:17:
f1:9a:ff:f8:a1:b7:7b:79:3d:18:2a:d2:f4:2f:5e:90:83:64:
55:3f:5b:ba:e5:a6:d7:54:e6:ee:4d:1b:1c:59:76:27:3e:6c:
fd:06:61:3e:4d:25:83:30:59:38:ff:23:b4:7f:9d:06:85:9a:
9d:5d:22:42:ce:0b:d9:aa:ee:67:73:10:93:f6:78:4f:97:6b:
d4:6a:7c:2b:32:b5:a4:40:10:d5:ca:28:42:0d:0c:48:37:2f:
64:99:ff:99:77:fc:61:e6:e5:23:7d:83:76:53:ea:a1:10:40:
c8:09:70:4a:e9:cc:1f:5c:bc:b2:65:57:1a:ef:e1:a1:e8:f0:
c5:d1:ac:86:a1:cb:ce:26:27:a1:92:05:05:a5:47:95:e4:a9:
a8:1a:23:02:d6:ac:75:99:27:ec:c3:44:16:e8:57:da:8e:e1:
50:65:2f:e0:7a:ea:2b:5e:d9:6e:8f:bf:6a:d8:f7:e8:a1:19:
ca:42:1d:08:99:51:c5:6c:21:40:3d:4a:75:da:2a:2c:25:be:
e8:75:07:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:41 2025 by rpki-client