Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898dd1dc-c6f2-3dd9-b9a2-4fd6e4794702.roa
File: 898dd1dc-c6f2-3dd9-b9a2-4fd6e4794702.roa (raw, json)
Hash identifier: BMCgwSStLwmlllQSPS+odejJtvn4RhmL7y8WX80jI0U=
Subject key identifier: AD:11:7E:56:7B:33:18:EB:86:CB:F5:C1:C2:B2:71:1E:97:B5:88:91
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847EA5A0CC0055F079A56306D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898dd1dc-c6f2-3dd9-b9a2-4fd6e4794702.roa
Signing time: Mon 18 Nov 2024 02:00:27 +0000
ROA not before: Mon 18 Nov 2024 02:00:27 +0000
ROA not after: Sun 16 Feb 2025 02:00:27 +0000
asID: 20940
IP address blocks: 23.218.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ea:5a:0c:c0:05:5f:07:9a:56:30:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 18 02:00:27 2024 GMT
Not After : Feb 16 02:00:27 2025 GMT
Subject: CN=cf0af7e8-232f-4c1b-b156-f34335f26323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c5:7d:d4:b3:0d:78:59:aa:79:d8:f7:7b:d1:
33:5c:9a:68:cf:2d:34:88:a8:6e:18:ea:4d:e3:77:
38:77:80:d1:c8:66:a2:15:55:6d:80:77:dd:0b:d2:
88:00:4e:84:58:51:bf:4e:c0:8e:45:f3:09:42:da:
d7:4f:19:24:77:09:98:c5:92:0d:09:ac:37:ea:db:
11:1e:e7:77:c7:e5:fd:43:1c:74:df:d1:96:76:cc:
da:fd:89:4c:87:20:f8:64:be:da:13:a0:7d:7a:7b:
5a:b7:46:2c:ae:0f:b3:e4:48:5a:45:b8:ac:34:6b:
97:ac:ce:41:b3:b0:50:e1:6b:80:30:51:d7:89:80:
76:70:b6:55:5b:78:86:5a:9f:ea:fa:f0:a5:6f:02:
b6:a0:97:0f:4d:91:82:ee:dc:13:54:49:86:29:50:
0b:dd:08:e0:0c:de:17:6f:b4:7a:f1:fd:a3:d5:12:
e9:b2:62:e4:58:ac:75:d6:f5:08:d8:fe:4a:73:90:
70:13:7e:24:0e:94:02:5a:8d:49:43:bb:e4:02:86:
4c:25:f9:f4:0f:03:74:b6:36:58:79:20:22:19:24:
93:97:7b:a9:24:37:77:76:c6:74:35:5c:9a:ce:1b:
9a:32:13:e8:05:91:64:b4:1e:20:da:0f:8f:b7:41:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:7E:56:7B:33:18:EB:86:CB:F5:C1:C2:B2:71:1E:97:B5:88:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898dd1dc-c6f2-3dd9-b9a2-4fd6e4794702.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:00:5b:9e:15:ed:59:be:99:e9:3d:27:59:8a:17:25:d3:da:
c3:f2:ce:88:39:3f:99:79:fc:5d:44:2f:9c:ab:cf:64:2f:a3:
31:08:5d:6b:88:be:30:a3:f4:4f:c3:dd:25:13:34:32:cc:4f:
d8:55:1e:25:c9:30:64:3a:be:45:e7:b7:fb:cc:39:0d:7c:56:
53:6f:71:60:bb:2f:2f:15:a2:97:39:93:fe:e1:14:dc:85:3a:
51:df:77:77:5e:3a:4a:6d:d9:67:b1:3f:32:21:6c:b4:72:ea:
07:17:53:00:a9:09:85:cb:d8:37:69:96:4b:7c:dc:37:93:ac:
3a:cb:af:89:9e:4f:14:04:09:c9:4c:26:45:9a:8e:c9:12:80:
75:81:ee:8d:87:f1:78:b8:65:72:a9:98:0c:ec:9d:56:11:5c:
41:8c:a7:d5:2d:36:37:cf:3d:00:48:d2:9d:35:50:99:d3:71:
b3:54:e7:87:e6:2b:f7:2f:73:6f:e9:8d:36:69:0c:f4:bb:99:
26:ca:cd:ba:05:63:8e:96:00:5f:42:e7:ea:27:dc:aa:eb:fe:
7d:b1:6d:e3:ee:0f:79:b9:39:5e:e9:08:d5:71:6d:d8:5b:99:
49:42:b4:66:1f:1e:39:db:5e:67:b9:4b:86:5a:d9:90:0b:0d:
3f:3d:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:15 2025 by rpki-client