Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8aff9905-6a04-3e5e-9cc8-c09d7945de2b.roa
File: 8aff9905-6a04-3e5e-9cc8-c09d7945de2b.roa (raw, json)
Hash identifier: PqarRqA+jOp0AZ2hrEqxwU/H898E5nzyhBO3ZUmAOXw=
Subject key identifier: 08:23:0A:19:B0:FB:48:FF:17:A4:A4:3E:FD:15:DD:A7:F8:13:10:A6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485F9AEA3EA16C7C0439FFD080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8aff9905-6a04-3e5e-9cc8-c09d7945de2b.roa
Signing time: Mon 30 Dec 2024 02:00:39 +0000
ROA not before: Mon 30 Dec 2024 02:00:39 +0000
ROA not after: Sun 30 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.59.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5f:9a:ea:3e:a1:6c:7c:04:39:ff:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 30 02:00:39 2024 GMT
Not After : Mar 30 01:00:39 2025 GMT
Subject: CN=81aceee1-48d1-48d5-bf6e-0d4ca0b78fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:fb:d9:a8:bd:82:ac:ea:b4:be:42:a3:4f:
b8:e2:ca:c0:30:c3:a1:2e:d9:39:c7:ad:9b:06:30:
be:4e:cf:8f:bd:c9:ed:34:94:c9:da:a7:90:d9:97:
da:08:86:74:f9:08:3a:f0:60:7f:be:c8:0a:00:6e:
e1:68:39:38:f7:56:a5:87:d1:c6:c3:fb:c6:d6:11:
23:9f:26:17:52:d3:e9:27:c5:19:30:d7:c2:1b:5b:
66:18:a7:be:8f:9f:3d:e2:e3:83:ac:ae:9e:0b:98:
01:f2:f2:d6:8a:24:14:bb:42:d2:3b:06:9b:13:3c:
de:09:bc:c1:02:a2:1f:08:46:ba:63:3e:f9:7a:2a:
2a:8b:bb:18:53:3a:e6:59:64:71:e3:38:08:dd:7c:
e5:4d:e3:06:54:fa:5c:72:f0:6a:7b:ac:f1:be:31:
30:3f:e9:87:b0:36:38:d3:c0:f6:96:65:ae:6a:40:
0d:51:eb:ae:11:f5:0f:98:ec:54:8f:c8:06:e9:5f:
ce:c1:72:83:41:75:65:c5:a4:81:ea:3a:b1:d5:ac:
7d:db:70:74:89:73:33:16:8b:92:3d:59:2a:1f:d1:
00:93:6c:4e:4c:3f:48:77:a3:64:84:31:43:17:0b:
b2:eb:6f:6c:8a:74:bd:34:6e:b3:87:e2:b8:72:4f:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:23:0A:19:B0:FB:48:FF:17:A4:A4:3E:FD:15:DD:A7:F8:13:10:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8aff9905-6a04-3e5e-9cc8-c09d7945de2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.59.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:6a:02:55:94:b1:08:19:00:76:d6:78:2c:0b:bd:e9:c8:04:
be:42:36:29:00:cc:f5:97:e5:23:88:91:5b:6f:62:b4:03:52:
10:b2:b5:12:3b:95:79:aa:b8:65:a0:8c:9f:d3:03:7b:53:7b:
c0:5d:47:4c:d1:df:38:d5:7e:5e:e2:14:92:97:98:92:62:98:
0c:f4:55:69:f9:0a:95:c0:1e:ae:29:9d:e8:a1:96:0a:9c:48:
54:be:76:1d:cc:5b:df:b4:67:7a:e3:d7:d7:c9:2d:ad:0b:4a:
30:0b:d1:60:02:77:cb:d9:43:a3:31:ce:33:34:f8:d3:7e:94:
7c:fb:aa:95:82:a6:ab:f1:48:18:23:bf:03:a6:ee:65:ff:99:
89:5d:ba:02:c6:18:34:2d:7b:1b:65:1e:c0:31:ea:13:cb:17:
68:91:72:c7:e7:08:66:00:83:70:01:81:6a:a1:4a:b7:1e:2f:
65:72:05:6c:db:4c:a0:01:f1:df:54:a7:b5:96:d7:c9:7d:fa:
70:bf:5b:a6:b6:89:c0:6d:61:5d:18:ea:7b:52:3f:37:6b:10:
96:2b:f8:13:b0:87:ef:a0:b3:be:76:80:40:06:a3:c6:3d:94:
52:67:5c:73:c1:ff:d0:b5:3c:8d:77:90:9d:ad:42:6f:3b:5c:
fd:09:b4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:45 2025 by rpki-client