Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ef1d36-b41f-30b3-8cfd-1ba9a46587b9.roa
File: d6ef1d36-b41f-30b3-8cfd-1ba9a46587b9.roa (raw, json)
Hash identifier: 4cqg5ckr5KAmYXbQgQhw3cVp6BgUhGhAqCn2ypnjkKs=
Subject key identifier: 8A:9F:D8:50:96:80:F6:AE:DD:17:64:20:1B:5E:A5:60:F9:B1:F1:E6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848854B5976FD8459D0CF1A0800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ef1d36-b41f-30b3-8cfd-1ba9a46587b9.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.52.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:59:76:fd:84:59:d0:cf:1a:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=015f435a-3255-4fd3-bdbf-145fc26ffb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:3b:92:07:17:07:6b:ad:20:36:e2:f3:e8:
cd:02:82:4e:78:25:5b:cd:bf:02:5e:2c:63:d9:0c:
f3:15:03:ec:83:91:0b:9d:f3:a9:8a:78:9e:eb:e2:
ea:33:b4:e3:5f:1f:c8:8b:dc:5d:3a:5b:d1:d4:bb:
80:a3:5c:3d:29:c2:b1:56:4d:75:14:86:ee:cb:53:
32:ae:b3:9c:21:1e:ca:de:be:c7:63:b1:ca:05:0d:
44:f5:10:68:c6:e9:98:ef:40:d8:a7:5a:26:d6:d8:
2b:56:63:22:3e:11:fb:58:da:3c:dd:b1:43:6b:cd:
b6:f1:a1:bc:e6:48:2b:b6:f8:02:30:47:52:c5:9b:
0a:a2:fd:c6:c7:0c:9d:e6:ff:1d:e5:44:e4:29:63:
f2:ff:ec:d9:3e:e5:de:0d:f6:d3:69:11:b6:65:3a:
d5:0e:bd:ab:f4:84:a8:63:59:34:2e:97:45:50:9f:
2e:0c:b5:27:ec:0a:f8:26:10:76:70:57:98:2a:ee:
33:1b:1c:d8:ed:67:0e:19:5b:52:2c:17:5d:6e:2e:
45:00:58:a4:77:6f:2b:00:bb:fa:78:33:7d:9a:be:
7a:89:7f:eb:e9:60:e5:f6:1a:a2:1d:01:ee:71:f9:
ac:a7:c2:e0:81:59:04:2e:e5:f1:2b:c6:89:06:91:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:D8:50:96:80:F6:AE:DD:17:64:20:1B:5E:A5:60:F9:B1:F1:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d6ef1d36-b41f-30b3-8cfd-1ba9a46587b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.52.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:62:13:08:5a:21:7a:d2:a0:14:e4:ba:b5:26:9e:16:ad:8c:
f7:77:19:78:3c:df:58:b1:2f:8b:d9:02:57:9a:38:df:88:83:
84:06:da:a7:8e:b7:41:e2:e6:94:af:90:5d:76:61:11:5f:a2:
66:94:54:0e:fa:e9:b3:5e:7f:70:2b:1f:0f:de:a2:b6:2a:04:
a9:4e:cf:11:74:bd:42:af:1e:fe:e9:3e:d1:37:2a:bb:f2:8e:
a4:47:1c:51:dd:66:5e:65:a4:cd:c9:75:36:8b:6e:99:29:aa:
c4:9f:02:75:06:1e:d2:e7:2e:6f:c7:bc:3b:de:34:0a:fb:b0:
c7:3e:90:85:31:53:a1:02:43:1b:a4:c4:f5:91:a7:41:af:ee:
75:f6:24:fa:d0:f1:1b:f7:ac:d4:36:52:44:2a:95:45:6c:75:
dd:1c:29:ea:15:34:36:ac:76:8a:cb:67:35:22:a8:94:d4:4b:
9d:dc:ff:92:ba:88:4d:69:05:9f:8d:ba:d3:15:10:d4:47:db:
97:51:7c:fa:12:4b:23:88:d7:bc:44:cf:7c:20:e8:5b:26:06:
c5:27:89:06:fd:6b:4a:1a:59:ab:54:5b:14:58:51:82:cf:30:
a8:11:68:3f:2e:81:95:d6:a2:8e:a7:86:a1:e7:d6:08:4e:df:
5e:1e:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:33 2025 by rpki-client