Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8add7df-e575-3505-9009-2ce6def90bd2.roa
File: e8add7df-e575-3505-9009-2ce6def90bd2.roa (raw, json)
Hash identifier: K6UWI9IdOGgM+g7B/1ytnqxemhSq7Ypmr2iRyEfLLKs=
Subject key identifier: 05:9C:37:B4:41:E9:8D:CA:74:6C:0F:C8:F0:BF:56:B7:B1:3D:64:21
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847DC64BB3D14C8251C747E2320
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8add7df-e575-3505-9009-2ce6def90bd2.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 24319
IP address blocks: 23.213.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:bb:3d:14:c8:25:1c:74:7e:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=029eec84-e24a-4fed-bc27-0ec06494f49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:22:63:b9:f3:fc:b6:43:38:b0:a3:bf:c5:
cd:3d:06:f9:c6:40:f3:07:8b:18:a8:19:f6:4b:7b:
10:52:32:98:be:0e:90:5d:4f:99:8d:f7:16:33:91:
0c:bc:66:a2:b3:cb:85:be:43:91:a0:26:80:5a:22:
4d:6f:1d:e5:a1:b0:b8:33:7d:ec:69:0f:49:5a:1e:
41:1e:43:22:d6:47:2a:4a:62:b2:46:78:a9:2b:9c:
92:67:bb:bd:7a:66:ff:56:03:c3:f4:b4:ae:53:56:
49:86:66:5c:90:ef:f9:10:07:55:e7:06:de:fa:0c:
03:2a:5e:29:6b:e5:d7:c9:65:4e:c5:12:27:3f:0e:
e8:65:7e:6a:49:00:e0:85:0c:17:68:b3:62:95:05:
22:3e:72:23:33:d9:23:67:9c:81:4f:0e:71:23:5b:
9d:e5:c4:44:af:c3:db:18:43:8b:4c:d0:d5:91:e4:
fe:8b:3f:44:45:bb:9a:d2:55:5b:b9:50:59:f4:a6:
44:91:0c:9a:ff:2b:f5:8f:7e:86:98:79:c9:da:20:
27:62:f5:cb:79:7e:ad:1f:c9:82:6d:1b:4e:53:19:
99:9e:18:3d:64:08:1a:0f:8e:a6:0f:44:74:17:4f:
91:70:26:a4:c0:23:3c:ea:81:04:80:84:73:2c:04:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9C:37:B4:41:E9:8D:CA:74:6C:0F:C8:F0:BF:56:B7:B1:3D:64:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e8add7df-e575-3505-9009-2ce6def90bd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.162.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a6:4a:53:ec:17:e6:be:3d:34:d0:40:06:e0:ac:36:85:03:
cd:91:e6:d1:31:65:c1:90:68:14:4a:df:c8:fc:14:9b:02:8c:
ec:77:31:bc:a7:8a:fb:e9:68:3a:83:f6:87:1f:17:0a:2e:de:
65:62:e3:fa:da:3e:af:5e:7a:71:e7:c3:0e:ee:72:dc:df:4c:
bc:b1:15:f2:ee:d6:6b:dd:10:c0:ba:00:6b:8f:22:b6:75:e7:
4f:92:78:6a:38:75:63:9c:38:3a:fa:d5:19:99:2d:41:a6:42:
8c:af:a8:f1:59:40:f3:00:8f:af:69:0e:67:c8:d9:d8:2a:f1:
24:28:27:94:22:bc:df:a1:93:d4:64:32:a0:96:fe:4c:ae:ec:
9a:f0:99:b9:5d:0f:2c:74:25:e7:e9:b4:7a:65:a5:60:cb:3b:
fe:49:d2:bd:9f:a6:3f:5f:11:b9:76:9e:05:3d:20:8c:ad:b8:
06:6e:eb:b5:14:76:ee:ec:19:3e:b2:ce:4d:7e:d9:ea:10:45:
81:3d:a9:67:99:47:c6:1f:81:24:38:5c:dc:f6:02:ad:b9:62:
1f:1a:4d:ff:0c:03:c4:aa:1f:05:f4:f3:6d:55:60:81:a9:79:
01:01:4d:f5:49:00:99:b6:6a:92:a8:4e:f8:6a:bc:73:42:21:
47:56:46:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:54:48 2025 by rpki-client