Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba44a588-b907-3aad-b2e5-1cde02465b50.roa
File: ba44a588-b907-3aad-b2e5-1cde02465b50.roa (raw, json)
Hash identifier: 4Rj8uSxSoNdFSv9DonEYrqZuLSGj9PMfvmmjFXFYm6Y=
Subject key identifier: A6:34:4E:88:FA:A5:7F:42:D6:38:09:B0:A4:28:8E:09:5F:1E:D7:D8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209A7B097ACBEF8BDA4800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba44a588-b907-3aad-b2e5-1cde02465b50.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.38.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9a:7b:09:7a:cb:ef:8b:da:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=51bddebd-b369-4282-baef-a47f59e52c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:a7:ed:8b:2d:64:73:7a:ff:4d:bd:4f:3e:
93:09:83:23:44:49:ad:95:f7:c7:f6:58:bd:d8:46:
59:4c:d4:47:79:63:5f:78:3b:b2:f1:60:2c:2f:f0:
d8:33:a4:6b:de:01:81:c0:b3:f8:d7:43:0c:87:d8:
5d:57:05:73:cc:3a:7e:92:ea:26:ff:47:5f:ae:38:
33:de:e9:34:f4:c9:60:58:17:5e:b6:1e:69:23:87:
6c:51:df:53:c6:2c:d3:98:c0:26:e2:9c:f8:fc:8d:
b9:e7:47:f6:d7:5f:21:78:17:3b:b7:58:19:c9:5b:
a1:e9:07:c6:0d:e1:d5:f3:7f:5c:23:4b:44:ae:e9:
d7:42:62:15:3f:16:9b:60:8a:b8:aa:f2:9b:64:24:
e2:a5:23:92:87:89:72:47:b4:66:a4:26:68:89:45:
9c:87:f7:d1:5c:a7:b0:6d:94:ff:2f:10:01:60:ab:
b2:22:54:b9:e2:6b:9a:6c:8e:58:87:a3:23:9e:d8:
77:68:04:03:3c:46:28:31:2b:c7:df:fe:0a:77:f4:
7c:19:bf:39:8c:94:31:1b:bc:8d:cd:ce:a4:b6:59:
50:30:17:61:70:0a:9a:24:40:8c:0b:11:ed:56:27:
4d:69:ca:98:97:c5:d4:00:c3:3d:46:2b:09:0c:54:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:34:4E:88:FA:A5:7F:42:D6:38:09:B0:A4:28:8E:09:5F:1E:D7:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba44a588-b907-3aad-b2e5-1cde02465b50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:8a:de:28:4b:1b:41:35:a1:6e:f0:3a:b4:f2:1d:42:d4:b0:
6d:5f:98:f7:77:96:88:b1:ca:a0:42:07:e9:5c:ea:76:8a:e8:
6a:8b:2b:06:f4:f2:49:c1:92:7d:c8:cf:b6:56:87:56:dc:7f:
7b:e4:8b:2c:e2:04:df:02:86:b2:a2:6e:e8:3c:0f:7b:02:9a:
14:2e:bd:99:bd:f9:04:f7:29:f0:e3:d5:52:2f:ab:56:4d:44:
3d:f0:58:84:29:e9:25:6e:b4:5e:a7:f7:89:b8:24:75:6c:aa:
7d:62:50:57:60:d5:84:9b:4f:86:6e:cc:a5:90:ae:c2:91:cd:
46:89:5a:df:66:e6:a3:86:69:c2:38:8e:4f:94:4f:ac:75:42:
66:37:e5:8a:37:91:4d:38:d4:96:d3:12:49:a1:f8:9f:b5:c8:
49:38:fa:f7:62:7b:03:25:7b:41:94:ee:ef:b3:ba:67:30:da:
bc:43:6f:ed:d7:a5:67:b0:ab:d6:12:d4:7d:f7:67:f8:94:09:
e4:53:26:fd:64:0f:5d:82:82:60:87:58:5a:92:93:e3:93:46:
85:71:10:98:9a:46:ff:72:59:d4:58:9b:0a:4c:ea:b2:56:62:
1e:93:f0:14:ad:cf:22:af:2a:7a:db:0c:86:81:4c:2a:82:12:
5a:44:fb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:08:25 2025 by rpki-client