Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a2f859c-fc0d-3623-a288-5bb83a498665.roa
File: 8a2f859c-fc0d-3623-a288-5bb83a498665.roa (raw, json)
Hash identifier: QrTishWZUONLUUt+Ujhbn3//uiS7EfV1rDgxb2eOTlE=
Subject key identifier: 88:BB:E6:DD:58:14:B2:70:AF:D1:08:EF:80:E8:4B:AA:4B:D6:3B:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483025448F25C700ACB4886C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a2f859c-fc0d-3623-a288-5bb83a498665.roa
Signing time: Fri 13 Dec 2024 02:00:39 +0000
ROA not before: Fri 13 Dec 2024 02:00:39 +0000
ROA not after: Thu 13 Mar 2025 01:00:39 +0000
asID: 16625
IP address blocks: 173.223.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:25:44:8f:25:c7:00:ac:b4:88:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 13 02:00:39 2024 GMT
Not After : Mar 13 01:00:39 2025 GMT
Subject: CN=045796bc-bf87-41c7-bf5f-37341d32a98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:44:73:44:5a:85:78:bd:a8:14:60:52:ba:1d:
ae:3e:31:ab:67:7c:e0:2f:54:bd:e6:8f:1b:5d:ca:
7c:54:94:49:e2:96:8e:65:ab:2d:86:00:01:53:c7:
67:b9:eb:0b:2c:54:b2:7a:bb:f0:af:41:d5:13:72:
3f:c1:2c:cd:35:c3:68:6e:ca:db:3a:98:02:7f:7b:
f4:b5:2f:fa:52:fe:2c:1a:74:1d:32:df:eb:ce:65:
43:20:26:0b:20:4f:63:bd:ff:c9:ea:0b:de:5b:9a:
89:b6:8e:32:16:02:d5:97:43:13:21:05:fb:fd:cc:
a9:54:fb:79:a5:71:a9:96:45:27:74:08:ae:44:5f:
66:7f:48:6b:39:60:46:6f:09:8d:a7:04:4b:2e:45:
b0:56:1e:d1:3e:f5:9c:9a:e9:37:1b:13:09:3f:36:
3b:11:24:84:57:60:be:4a:d3:ab:a5:02:96:0d:60:
ab:b0:e6:b4:93:c1:b7:43:44:39:ef:d2:2e:dc:91:
48:f6:79:22:11:92:e6:14:bf:f5:58:59:3e:5d:40:
5a:bd:27:b4:e7:ab:c8:48:c9:08:81:4b:a9:9b:79:
94:ff:bd:ac:5f:c2:31:39:5d:c1:b9:be:15:48:a8:
dc:a6:29:39:6d:0e:75:ec:b6:02:e2:cc:56:d3:a3:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:E6:DD:58:14:B2:70:AF:D1:08:EF:80:E8:4B:AA:4B:D6:3B:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a2f859c-fc0d-3623-a288-5bb83a498665.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.223.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:2a:17:fa:ce:2e:b2:55:65:11:3e:b0:42:d3:0f:c6:72:6f:
4d:f5:57:2b:0c:d4:c6:71:41:c7:86:41:54:ee:cc:f0:0c:6c:
94:31:ac:36:7d:37:d9:19:2b:8f:b8:83:5d:c6:c2:c8:ac:cc:
bd:dd:18:51:7d:79:78:04:9a:74:34:c2:8c:20:4e:9e:71:84:
4a:13:3f:3a:07:84:49:67:4f:45:17:1c:d2:6f:c5:55:bc:52:
ca:c3:3d:8b:43:cf:9d:b5:74:ae:17:66:6e:77:36:b0:e5:a6:
c8:8c:3b:44:5d:f2:1b:0f:f9:69:54:88:3c:f2:8c:7e:59:a9:
93:5e:b5:be:78:a6:01:dd:48:cd:f3:76:14:cc:a9:f3:ce:6e:
19:6f:68:d7:f3:de:38:ec:4a:13:7c:c4:8d:23:03:5b:84:01:
ce:8e:e5:72:07:9c:8e:ce:d7:ad:e9:50:37:50:76:5b:11:66:
45:65:ae:75:02:8b:c6:8e:f2:af:bb:22:d0:5f:ac:26:ca:a8:
7f:f0:2f:33:ac:2b:fd:2b:6d:64:53:81:38:52:60:91:b1:ce:
ad:05:83:72:f3:fc:fa:bf:0e:36:cb:7b:8e:b9:c1:f7:af:cb:
af:73:ef:60:88:f9:5b:54:eb:1a:41:42:cd:fa:27:9f:4b:46:
41:97:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:49:51 2025 by rpki-client