Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2277a8-acf1-30fd-9e0e-2d7a0559f8aa.roa
File: cf2277a8-acf1-30fd-9e0e-2d7a0559f8aa.roa (raw, json)
Hash identifier: xyvVVDcpAmQbIRtOnRRtMdbyZrZoCQ+GZdSRax39JoU=
Subject key identifier: E7:A9:38:82:13:F8:48:E1:11:A7:91:66:9A:BF:FC:A9:B1:B1:FB:C6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C614443AEEDE84730100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2277a8-acf1-30fd-9e0e-2d7a0559f8aa.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.33.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c6:14:44:3a:ee:de:84:73:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=0b50fb5f-d708-4aa7-a6e8-06ea8144f633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ba:6e:74:83:11:86:35:37:a1:df:f3:ad:92:
61:69:44:23:b6:65:b0:06:41:d4:b8:ae:d5:7a:ac:
da:ff:fe:92:58:bf:20:16:1b:94:fd:cb:a2:2b:fe:
68:de:da:84:71:de:17:51:7f:39:ad:6e:32:e9:05:
8f:b3:e7:98:a6:57:90:dc:ad:00:cb:8e:2c:bc:3c:
67:09:60:3d:84:95:b4:ea:e4:e0:36:62:d5:d5:4b:
23:35:c0:49:60:b9:f0:65:7b:36:c9:25:60:b6:83:
55:13:f7:bf:3f:8a:91:05:79:87:86:86:1c:db:bd:
6d:8b:7a:0a:50:9c:8e:16:3b:1f:51:8e:79:21:2d:
37:17:f6:36:3f:25:4b:a3:6f:ac:47:e6:cd:51:83:
fd:64:9e:6f:cf:a1:3b:a3:06:37:7d:ae:89:07:80:
83:85:5e:be:53:ac:22:2a:5a:35:c5:43:ea:83:f9:
8d:ee:6c:b7:dc:20:2a:98:71:fe:8d:07:36:9b:79:
33:9e:4b:bb:39:6b:92:8e:bb:b0:e9:fa:9b:de:3a:
2e:a2:71:11:02:df:b6:bb:18:5f:a7:bf:64:22:ea:
0c:ff:43:66:c0:31:14:a8:91:78:0f:b0:15:22:4a:
47:3a:9a:d0:a4:e0:27:dd:f3:95:e4:f3:3f:69:f3:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A9:38:82:13:F8:48:E1:11:A7:91:66:9A:BF:FC:A9:B1:B1:FB:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf2277a8-acf1-30fd-9e0e-2d7a0559f8aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:b7:34:b9:74:ca:6d:88:11:69:b4:eb:32:e6:d3:d9:77:3f:
30:b3:ca:25:6b:3b:eb:92:6e:7a:36:b5:cb:67:63:ec:7f:a3:
a7:c8:88:d1:48:98:9b:9b:1c:6e:22:c5:bc:5e:13:ab:57:d6:
99:ca:04:44:7e:10:2e:22:d2:ac:64:49:6f:6b:ad:2e:3a:47:
85:a2:fd:b8:25:d0:d1:f0:db:16:de:b5:45:aa:71:ae:8d:45:
c3:f1:78:27:b3:53:01:b0:1f:58:d0:6c:24:f9:e3:ad:5c:26:
7c:47:ef:99:db:27:74:a3:c8:71:69:2d:bf:a7:2c:a7:66:53:
ca:08:95:ac:47:01:a0:e9:63:35:d9:4c:df:61:1a:b7:a0:88:
18:7f:45:c4:26:2c:fe:f5:b7:cc:18:f6:91:21:29:3a:09:fc:
1d:0d:71:24:e0:ae:90:40:55:3a:6a:2a:b0:7d:2a:00:12:a6:
60:8d:0d:ad:04:20:d9:ec:7a:95:d1:fb:42:41:ee:1b:32:d2:
bb:c1:00:bd:df:18:c8:9c:d0:ec:a5:7a:63:d6:89:86:93:6c:
eb:29:01:d2:26:96:e3:4e:cd:52:c3:fc:0e:d5:1a:c5:38:74:
80:21:93:5b:35:90:18:c4:f6:b2:f9:22:43:39:c8:65:d1:0b:
cf:e5:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:08:02 2025 by rpki-client