Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d19ed8de-ea07-3c82-aef5-fba300c78b08.roa
File: d19ed8de-ea07-3c82-aef5-fba300c78b08.roa (raw, json)
Hash identifier: kFwEUGIDv7Z3HhecpM8ypUDPKc+QyqMn/H12XzAG0xk=
Subject key identifier: ED:D9:47:32:E3:4A:96:3B:52:A9:0B:D3:2B:01:21:A2:2D:42:54:8A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209D7E691EAE8033DA69A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d19ed8de-ea07-3c82-aef5-fba300c78b08.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.40.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9d:7e:69:1e:ae:80:33:da:69:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=7ed5caa7-505a-4ae0-ba8a-6619d1e58385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:6c:2a:e1:64:20:3b:db:6d:a5:92:6f:7d:
db:60:7b:24:cc:19:91:14:a1:a4:43:71:7f:72:3d:
cf:76:63:91:31:c5:6e:03:60:ad:96:2a:2a:1a:ad:
09:45:31:16:13:3c:b0:db:60:be:7f:99:9d:94:b1:
31:ff:46:79:ad:9e:98:15:dc:03:82:a3:5e:78:e7:
4d:37:94:ed:4e:a5:a8:30:02:5f:c7:37:50:c3:a5:
c8:98:ec:b3:56:08:2c:37:f6:9e:ff:81:d8:4d:46:
4d:f6:91:a9:ff:d2:66:16:bb:b2:2e:fa:44:27:57:
f7:b1:df:bf:80:27:78:52:a0:3a:0f:62:85:4a:4c:
26:11:d3:f6:db:2f:8a:46:25:bd:f4:1b:79:29:6b:
4f:05:ad:18:c9:8c:08:b8:1d:b2:c1:6e:34:ce:39:
a9:57:78:fa:81:2b:71:1c:32:7f:8c:7e:d6:a1:73:
80:1e:41:34:c8:a0:5c:19:1c:a7:61:d7:36:25:ec:
70:96:2a:4f:df:03:ef:b7:07:b9:81:d1:96:41:11:
a5:ff:6f:e0:c3:c2:be:c0:6f:b1:ca:ef:ce:61:a0:
bd:62:35:41:b4:d8:0f:45:9b:22:c9:c7:12:d6:2c:
71:34:22:38:2c:ab:27:03:06:3e:b3:57:fd:07:25:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:47:32:E3:4A:96:3B:52:A9:0B:D3:2B:01:21:A2:2D:42:54:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d19ed8de-ea07-3c82-aef5-fba300c78b08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:df:c3:b3:15:53:fe:fe:b6:d1:b9:22:92:98:5c:02:87:92:
c9:fb:9d:ce:95:f3:45:7c:f6:64:dd:4a:2c:dc:1f:50:ba:12:
89:66:fa:17:d0:85:fa:41:33:a6:27:e7:0d:5b:cf:4f:94:81:
16:59:c5:2b:a7:c0:61:af:52:c8:d8:b7:fc:bc:92:af:9a:3b:
90:d1:ee:df:32:92:89:02:8a:f8:77:65:be:e5:36:03:e1:f8:
7a:68:bb:03:4f:ef:b3:ec:7b:b0:14:d7:da:4d:a7:8b:3a:64:
f5:d7:cb:63:b1:e8:f1:ac:65:f9:b9:9a:9f:85:9d:17:95:4d:
4e:9b:e8:ee:fc:24:f5:28:4a:39:69:4b:95:cf:db:ca:1c:82:
34:7a:e4:3f:02:47:23:a7:13:30:1c:bb:27:3b:45:3d:30:86:
da:2f:ce:72:8d:8c:d7:4b:06:38:75:d7:5a:db:7a:3a:2d:e4:
33:74:58:6c:6f:04:58:a7:1e:e9:53:51:90:8b:87:74:13:2c:
8f:57:65:dd:4e:00:55:7f:9b:57:78:20:37:42:48:59:24:5b:
0c:8f:51:e0:d4:28:94:46:8c:10:5d:3a:63:04:2e:84:af:a4:
b8:e2:2a:18:8f:25:08:94:49:bf:8f:dc:74:32:43:21:63:81:
18:42:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:28:47 2025 by rpki-client