Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0b7e886-ca3c-3177-a552-8a4e53c1034c.roa
File: b0b7e886-ca3c-3177-a552-8a4e53c1034c.roa (raw, json)
Hash identifier: dWYaC7VTu7wWApn0ynDaOhEEIGSttQaS0ewOYB2n2rA=
Subject key identifier: 4B:E9:62:6C:C6:DA:81:9E:C6:42:C2:B9:64:A3:15:80:90:90:BF:30
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848854B6CE88B5D45B6B0F16A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0b7e886-ca3c-3177-a552-8a4e53c1034c.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 16625
IP address blocks: 23.52.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:6c:e8:8b:5d:45:b6:b0:f1:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=528e4894-269e-4fc3-8657-53da373180d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:f0:14:59:02:34:c5:3d:84:ca:d7:16:10:
9e:0f:71:ff:12:78:56:82:42:3c:eb:01:1b:b5:79:
83:02:17:b3:67:61:f5:72:a0:de:84:d1:98:1c:1a:
1c:66:44:00:a4:3f:5b:55:0d:ad:07:3f:c6:af:33:
d3:c8:53:80:61:cf:6e:3d:8f:4f:d9:0f:8e:73:c5:
a2:38:a7:db:c5:61:f3:6e:52:ae:ce:f8:35:e9:3f:
e9:fa:6f:8a:73:8a:e4:6d:1a:fc:77:95:fe:1b:eb:
c2:6b:ad:01:fb:8c:41:07:65:c7:e1:ab:a0:de:0d:
98:40:47:ae:35:bf:45:57:46:c8:cd:5f:cb:f5:88:
52:b8:f3:87:1a:79:ee:a3:d8:dd:96:b9:36:4f:24:
42:1d:f3:e8:c0:72:87:76:04:1f:6a:31:b0:15:7f:
41:7b:c1:bb:78:51:df:10:ab:c0:9e:81:09:33:86:
68:08:2b:14:28:ca:1c:88:ed:bf:20:99:5f:56:0f:
b0:a1:45:7c:53:e8:32:81:1a:f6:33:38:67:b9:4b:
68:dc:aa:2a:00:57:b7:8f:8c:a5:f1:72:6f:5d:07:
f4:75:ce:8e:df:26:d2:af:16:45:93:24:40:c1:39:
0a:47:e9:1f:31:3b:56:cd:2e:35:7f:12:44:bd:6f:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E9:62:6C:C6:DA:81:9E:C6:42:C2:B9:64:A3:15:80:90:90:BF:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0b7e886-ca3c-3177-a552-8a4e53c1034c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.52.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:c6:7c:a9:ee:a1:be:fe:0f:35:00:79:89:91:69:58:58:99:
2e:08:ef:2a:02:6c:c6:e7:b3:7c:6b:96:39:ef:23:61:a9:15:
96:a0:bc:31:a4:cf:23:0b:e0:44:e9:fd:ed:1d:b3:f3:72:df:
08:1a:bb:5a:08:69:ed:dc:4a:f6:e5:fc:9f:59:cc:77:30:61:
ed:8a:19:68:48:7e:bb:9d:af:76:d5:66:fb:a1:61:cc:d8:48:
3c:00:4b:4c:1d:e6:71:dc:9c:f1:3a:68:d6:8c:5a:dc:b3:b6:
40:23:c8:a3:77:9b:ec:95:c3:fb:28:b7:04:83:b3:e7:50:11:
97:01:4f:29:e3:a1:58:8c:9a:1e:bd:ca:1c:b7:f0:55:07:ee:
7d:92:68:c6:95:09:63:ac:25:c9:df:9a:d4:a5:25:a6:d9:c2:
d3:2d:2f:02:e1:24:97:ee:c7:b9:59:32:4f:cb:3e:e8:1c:56:
32:a9:f8:f2:c8:2a:b6:28:71:c6:22:88:48:04:16:14:86:1a:
c1:f4:c2:32:07:c7:29:27:10:8d:81:56:83:03:e4:93:93:b0:
b2:03:89:7c:73:76:7c:8a:d8:d3:04:78:83:0f:fd:17:58:fb:
0a:91:3f:b8:77:9d:98:38:ca:b3:68:08:c5:d1:9c:01:d8:64:
ee:7c:11:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:28 2025 by rpki-client