Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aff076a5-b97a-3ef9-967c-e1e5804c6d47.roa
File: aff076a5-b97a-3ef9-967c-e1e5804c6d47.roa (raw, json)
Hash identifier: +bxAFfMFmswi1W7X8QanX+uRTSk6ueXaIKmVDLBou8M=
Subject key identifier: B0:06:20:30:F7:C1:87:F6:6E:78:6D:3C:15:D7:46:53:AC:8C:F6:7C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848345586EDBF8F1D7439C4DE80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aff076a5-b97a-3ef9-967c-e1e5804c6d47.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.66.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:86:ed:bf:8f:1d:74:39:c4:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=d966b637-130c-4f42-a157-bb63afa39e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:ee:31:8e:86:66:2e:f7:d0:8a:b6:6a:33:
a5:22:df:69:d6:64:82:e7:79:b4:bc:21:48:8d:06:
c1:b4:30:a7:0f:cc:0f:16:b9:5f:5f:99:e5:ee:73:
b6:e3:ff:00:71:bf:94:01:6f:96:17:46:b6:57:d1:
45:e8:6d:1e:6a:73:4f:9c:f1:06:4e:87:ad:8f:07:
5e:7a:57:e8:4b:4a:68:9b:73:12:e5:c2:5e:27:b2:
14:39:ea:2b:72:c4:83:f5:d6:a5:24:2c:32:1f:1d:
ac:c9:42:4e:1b:1a:c0:79:33:e6:8e:22:a0:0a:7b:
22:8f:8d:80:34:45:5c:7e:1b:3b:0c:64:68:8c:07:
c6:df:71:d1:c4:77:7b:10:99:cb:73:ba:cf:df:65:
e1:a9:41:dc:95:c0:3f:69:68:8c:66:a0:e0:77:63:
64:05:82:71:8f:73:84:0c:bc:ee:41:8e:b8:0b:9a:
48:50:3f:57:c2:e3:8f:da:3a:e8:f4:d0:7f:1e:ca:
a4:4a:fe:92:64:85:04:22:93:fb:37:ba:68:c6:d5:
a6:b5:6e:67:d4:e5:a3:c6:a6:f3:3e:21:0a:a8:f1:
4d:46:31:61:9e:8a:39:95:cb:c1:d6:63:1b:20:91:
86:c3:9c:76:39:ed:da:e0:cb:b0:a2:55:57:fd:51:
33:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:20:30:F7:C1:87:F6:6E:78:6D:3C:15:D7:46:53:AC:8C:F6:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aff076a5-b97a-3ef9-967c-e1e5804c6d47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.66.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:82:27:a6:8b:70:24:3d:a0:6c:e4:02:b9:1c:c8:f4:15:73:
88:7a:c6:e4:04:7a:e1:8c:e3:b6:04:21:32:65:6c:8e:69:ea:
43:10:51:21:6b:b8:e2:ed:f5:e8:ab:a8:ff:db:f1:ea:43:22:
cd:80:65:62:0c:8f:00:e1:dd:07:c5:fd:32:e7:f2:82:82:96:
3f:12:e4:2b:2b:9e:8d:48:e2:e1:f9:48:63:b0:4a:df:3e:73:
0b:04:3d:54:a1:85:99:30:07:2b:59:91:9c:07:af:8e:88:d5:
5e:ff:f0:41:f7:58:a2:55:8f:bd:cf:33:48:a6:b1:eb:bb:a4:
ba:ac:fe:11:41:fe:f3:a9:9b:76:ba:ab:3f:37:de:30:43:7f:
e3:2d:27:5b:f0:ec:19:d6:cf:2c:31:5b:21:2a:63:ff:37:30:
bd:05:12:da:0e:cb:b2:62:7b:14:20:20:5b:f1:d2:31:13:78:
fb:93:53:86:27:03:8e:4d:8a:0a:64:3a:3a:74:e1:bd:bc:a8:
45:2f:f0:e9:4a:b9:b9:f3:f3:cc:c8:74:99:f9:40:4c:16:f3:
67:a3:ef:e2:77:57:4c:9b:1d:46:e6:c1:50:92:b3:a1:e9:ac:
5e:c7:92:0d:e6:63:28:90:77:7a:5e:da:e6:d0:17:66:08:7f:
f4:a6:fa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:39 2025 by rpki-client