Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1d4a648-5ae7-33d6-8d46-6d44f3204a72.roa
File: b1d4a648-5ae7-33d6-8d46-6d44f3204a72.roa (raw, json)
Hash identifier: wYsGHTrH2Iv6ceLDQOW9xSHxGzWYyHFLnN97BFEam2o=
Subject key identifier: 0E:B3:2F:6F:8C:71:FC:BD:EE:70:FF:AC:69:14:E5:1A:41:60:34:97
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BAEE9B82243FEBB6A940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1d4a648-5ae7-33d6-8d46-6d44f3204a72.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 16625
IP address blocks: 23.205.42.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ba:ee:9b:82:24:3f:eb:b6:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=eeb50cc5-b43d-44c8-80d7-e7a85a06aac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:30:ef:f4:fd:e8:af:f3:50:a3:0e:ed:19:
a5:fd:c1:f3:74:01:2b:20:fd:81:94:be:7e:42:ea:
57:e0:38:a2:d2:29:7e:fb:ab:af:c3:60:c4:cb:c4:
95:d4:ef:d6:af:18:74:6c:dd:f5:ba:9a:2b:8a:59:
7d:20:2f:9c:f7:ba:3e:84:68:fa:46:81:d3:d1:93:
c3:56:67:35:21:9e:da:f8:a0:36:bd:af:49:56:af:
b1:8d:42:ea:11:0b:45:0f:9e:b6:18:02:5d:bd:f3:
e3:ea:db:95:ed:60:e7:52:c5:53:7d:47:05:65:c2:
c2:56:a0:31:ed:ec:42:9d:54:10:ee:83:51:5c:c5:
dd:ed:9e:51:c0:f8:c8:0e:24:30:f5:f9:62:20:ce:
41:5a:5d:7d:ec:d9:a9:02:95:c3:33:43:48:3c:e2:
ef:17:1f:43:cb:a9:0b:2b:ec:f1:88:91:53:8a:67:
3a:9c:39:5c:7e:f2:14:d5:18:70:32:cf:6c:f2:86:
7c:0f:ac:16:6b:2b:66:75:09:fe:73:69:9e:52:2b:
3b:ac:8f:43:89:d1:4a:a4:c7:be:63:f9:cc:01:10:
0e:52:ba:5c:7e:b1:bd:69:8a:6c:6a:e7:27:63:fd:
a8:95:c8:1f:d4:8e:01:c7:28:7b:ee:13:b7:f8:4f:
15:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B3:2F:6F:8C:71:FC:BD:EE:70:FF:AC:69:14:E5:1A:41:60:34:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1d4a648-5ae7-33d6-8d46-6d44f3204a72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.205.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:71:c7:cb:0b:71:0e:98:0f:b4:48:68:bb:dc:b5:65:f1:4d:
d9:4b:73:e2:89:d0:27:fa:c9:93:ae:79:ec:a5:7f:e1:ac:61:
ce:9f:b7:31:3e:61:d3:5b:f5:06:2a:87:14:5b:7e:07:3f:db:
34:2a:0c:0b:18:98:34:c7:9e:be:9f:d2:c5:49:6d:7c:a5:7f:
d6:82:87:90:cc:5e:6c:ea:ee:5b:32:d7:2d:37:78:f0:21:99:
2e:18:ea:32:fc:df:91:41:95:2c:71:eb:50:65:59:41:12:a1:
11:ed:14:5b:0e:c7:21:99:99:ea:3c:a8:1e:da:20:7a:ce:8c:
b2:a2:6c:ce:32:27:76:ba:db:8a:67:eb:17:5c:a8:c8:16:c8:
c7:12:4d:3b:d1:6d:3e:09:06:93:7e:27:b4:e0:2e:2b:80:7e:
ce:48:03:94:c3:20:22:27:32:35:b8:27:d4:31:53:9d:de:87:
cb:75:5d:5e:9b:57:f8:c5:a5:40:02:c4:a0:ff:f2:0d:3d:20:
23:00:b3:66:f2:5a:aa:5f:1f:19:c6:e9:e3:bf:27:f7:ca:01:
76:ef:dc:eb:c9:36:4b:39:66:2d:e2:9e:d2:b7:24:f8:c6:09:
1e:fe:68:04:6b:c4:79:5e:ea:61:28:cc:f4:d9:a3:9b:e1:6a:
60:53:73:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:44:21 2025 by rpki-client