Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa
File: d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa (raw, json)
Hash identifier: OPgWN4lFlA+eXJSagPBwiJXNXdJVPZvy4QgngAfvBsw=
Subject key identifier: 89:61:D9:C5:B4:59:19:5A:5E:56:DB:88:B2:96:33:1F:80:BF:55:03
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CB1EF990AD8716858FC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.33.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:cb:1e:f9:90:ad:87:16:85:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=42e2722a-5b6e-4d88-aecf-80ce7b1523ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:e3:af:ea:ba:6c:00:06:c1:5a:b9:45:87:
9e:1b:44:94:37:03:ab:d6:28:e9:8b:40:0f:c5:3a:
c9:8d:1b:e6:8d:ec:46:0b:62:b0:e0:61:00:e1:34:
07:d2:e1:44:ed:fc:5e:3e:63:12:65:6c:0d:8d:1a:
7b:3a:28:23:28:e6:f4:1a:03:a6:5c:ad:61:ed:45:
18:ab:96:d2:37:c1:06:3f:96:f0:ac:3d:d7:0b:eb:
9c:c8:9d:d0:25:76:3a:85:13:3b:b5:6c:7e:17:6c:
99:25:b8:0a:d3:2b:e0:6b:72:60:af:fa:54:ce:67:
db:ae:80:52:bc:2a:c7:c6:e6:59:61:ff:a4:19:79:
91:c7:c3:45:23:7e:ee:ea:c8:cc:8a:e7:df:ac:d0:
d3:36:d7:cb:25:cc:75:e8:05:94:07:4a:4a:63:df:
c0:34:ac:43:47:b2:80:81:e2:23:1e:9a:28:40:72:
45:5f:a1:5b:fe:55:9f:43:c4:7f:1c:12:3a:e9:64:
1d:cf:fc:87:10:39:f8:c7:c7:ca:ff:71:22:2c:a3:
e6:1c:20:eb:c4:07:60:d2:0e:1d:36:31:2b:5c:63:
d9:37:8c:4b:38:27:6b:99:17:f4:a2:ad:b2:00:34:
fe:75:61:41:24:38:80:c8:b6:bf:a1:b2:27:f1:71:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:D9:C5:B4:59:19:5A:5E:56:DB:88:B2:96:33:1F:80:BF:55:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d5a8528e-3838-3b6a-8c91-cb48849a1fbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:4f:b1:29:54:02:1c:fe:cf:44:c2:a1:2f:a4:65:fc:c9:61:
15:88:3e:cb:e9:4c:8d:7a:3e:23:fa:b6:cb:fc:d4:26:18:7f:
0c:5a:b6:a1:42:d4:7a:a5:e4:70:bc:93:d4:dc:61:d4:d6:8e:
27:3f:52:72:29:1f:f1:1d:fe:08:02:8e:ed:2b:d3:42:2d:85:
25:05:d4:cc:55:8e:27:98:59:b4:bc:60:05:91:41:47:0c:de:
bb:89:9b:88:87:88:a7:34:9e:2c:fb:10:58:b6:16:00:1a:91:
65:24:6f:f7:14:b2:62:8e:01:5e:de:e7:c4:19:00:5c:cd:91:
23:0c:27:52:38:8e:18:a0:53:56:45:c5:95:2a:4f:9c:22:99:
8b:ca:a2:39:cd:13:9a:3d:04:d7:f8:21:21:a3:46:3f:f0:c0:
ea:78:86:c0:66:f1:5d:e2:16:9b:1d:bc:f2:0d:a5:6a:50:22:
31:8d:56:90:07:8d:0b:96:87:45:0e:92:3c:79:76:7f:3a:9b:
7e:c2:20:eb:aa:3d:62:dc:54:c6:d5:b6:c4:b9:48:61:cb:bc:
6d:6a:a7:04:b3:00:3d:0e:f4:05:a4:25:2d:65:88:ad:a6:2c:
9c:3c:ba:f6:78:02:83:8f:8d:db:c5:a2:d1:39:c3:a6:9a:53:
fd:bd:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:31 2025 by rpki-client