Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ad8ced-c181-3f55-89c3-ebb379de239f.roa
File: d4ad8ced-c181-3f55-89c3-ebb379de239f.roa (raw, json)
Hash identifier: XvU04Q7qKfSOGxw5oEbCzU7hEvyicZfklIMNcKWwK+Y=
Subject key identifier: C2:92:EA:7A:A3:71:3F:66:AE:76:25:80:E3:B6:E8:E1:A5:50:C7:69
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483CB573DA1FFF4CCCDDCC9400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ad8ced-c181-3f55-89c3-ebb379de239f.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.60.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:73:da:1f:ff:4c:cc:dd:cc:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=bfbae9f3-db16-47f7-9d4a-704042eb4641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3b:60:a3:93:c6:3b:ba:6a:ab:4f:76:ee:e4:
6c:ac:80:89:11:3d:8f:b7:e4:7d:94:29:59:45:8b:
a1:c0:dc:53:70:3d:5b:fa:ed:9c:ac:38:af:bc:a4:
58:76:e8:1d:45:6d:ae:fb:fa:37:be:0d:a0:89:91:
e1:81:29:9d:f2:60:e5:d9:c1:56:c8:ac:86:77:8a:
af:d7:c7:53:66:5e:33:95:3a:7e:23:53:4a:a9:6e:
0a:0c:66:0a:c1:11:30:6a:7f:4c:66:11:12:04:09:
7a:55:e3:25:62:3b:3d:34:2b:3e:46:54:76:7c:a4:
c1:dd:ba:3f:3e:23:db:49:d4:ee:76:b4:6a:e2:30:
b7:91:77:de:0c:71:85:e4:55:7c:1b:d8:69:0b:28:
23:42:71:0b:98:90:31:35:23:38:18:28:71:ae:08:
81:da:71:10:c2:6e:43:02:9b:63:21:74:04:d4:bb:
0b:9c:c4:2c:6c:ed:fc:93:70:38:ea:6a:58:a0:06:
c7:f2:2e:7f:e6:f2:ca:e2:b4:0c:22:a8:36:a1:87:
d6:b9:32:86:26:2d:3d:3a:69:9a:f8:c4:d0:b3:63:
bf:e2:18:6e:b9:21:06:3c:1a:55:5c:4c:46:1e:10:
f1:21:19:df:33:b9:8e:22:52:84:3d:39:82:68:71:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:92:EA:7A:A3:71:3F:66:AE:76:25:80:E3:B6:E8:E1:A5:50:C7:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4ad8ced-c181-3f55-89c3-ebb379de239f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.60.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:2f:89:53:55:2d:d4:b1:80:3e:30:55:31:25:73:98:e6:66:
0c:b5:61:89:ea:a2:a9:af:0f:0d:a4:d4:b6:5a:a0:2f:98:45:
4a:73:ef:50:8f:42:b5:63:e6:74:c3:0d:40:e6:49:4c:4a:89:
5c:c6:49:88:bd:60:1e:f4:af:f0:c4:1f:0a:72:a0:69:1d:65:
d8:a9:51:ca:5c:b1:ce:c0:46:91:23:00:be:c0:b3:28:54:70:
5c:d9:17:51:b4:0f:98:a6:33:4a:84:6f:7f:13:8c:ed:1a:68:
c8:9f:c4:c2:db:3f:d7:72:8d:50:40:1f:1b:89:d5:ac:88:eb:
68:de:f5:9f:2a:5c:f1:80:98:15:01:a0:b1:48:76:8a:c3:70:
06:2f:e9:b6:c5:b7:dd:5b:03:a7:54:96:00:ec:62:fc:c5:63:
87:09:e6:42:2f:c2:12:fe:53:4b:a6:bc:2a:f8:75:7d:09:0a:
aa:9f:7c:14:00:db:89:27:40:c8:23:19:b5:28:16:47:c5:a9:
40:6a:da:72:20:c7:48:3c:d1:28:f1:af:3d:6f:63:54:97:1b:
53:fe:98:a6:90:2c:c6:b5:0f:1c:14:d3:ae:46:e3:f2:7b:07:
64:24:3a:9d:e4:a4:fe:77:62:dd:b8:56:75:a1:2e:1b:3c:f0:
f8:bb:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:23:12 2025 by rpki-client