Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9eab948-9210-3cc6-9b92-c00c1fde42a7.roa
File: e9eab948-9210-3cc6-9b92-c00c1fde42a7.roa (raw, json)
Hash identifier: xga5kLVdgZPtOn/EQHk9EQpRJ3/seVS9MGFCg156AQ8=
Subject key identifier: AF:9E:D6:D3:7F:CC:BE:91:C7:A7:50:0B:AE:1C:7C:65:A8:66:01:AD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858484515969A24356713D4FF3E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9eab948-9210-3cc6-9b92-c00c1fde42a7.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.1.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:96:9a:24:35:67:13:d4:ff:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=c6cf1c49-b920-44e4-9620-f7006a98a83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:fa:a6:fc:f8:9c:65:98:a3:4c:de:09:7a:
a6:ca:aa:1c:f7:95:16:4a:e7:59:56:f1:61:99:61:
a1:7c:bb:45:00:33:bf:bb:fc:44:0c:0a:39:8f:68:
d9:2a:76:96:8b:7a:3c:96:9e:3e:1a:26:e1:98:80:
67:d3:e8:d3:13:0d:1a:fc:91:fc:10:f7:1c:da:d5:
ae:74:19:94:66:e8:56:ea:d6:00:5a:7c:88:10:6f:
48:94:21:dc:89:79:8a:4d:29:18:1c:e1:34:bf:d1:
9d:cf:6a:23:06:84:a9:23:14:ec:86:a8:17:72:92:
58:a8:9f:de:bd:37:1a:97:18:83:37:bc:2a:1f:ce:
42:e7:42:e7:61:d7:26:c2:4d:3c:66:6e:48:35:54:
04:6c:23:22:40:ed:e6:00:90:d7:1c:ef:aa:f2:9b:
61:4d:06:3f:41:17:44:57:da:b1:b9:03:10:8f:72:
ca:f6:d3:70:42:e1:50:1e:de:05:c1:dd:ff:34:91:
d4:9f:b7:6f:23:1f:d6:f1:f2:ec:b3:d7:0c:47:14:
e7:a2:19:3f:9b:22:12:b3:d3:1f:63:54:1c:6c:41:
7b:d5:ef:3a:a2:d6:a0:2a:de:7a:38:33:50:33:ed:
eb:41:38:23:f5:e9:3f:fd:c9:cc:9c:90:98:73:c1:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9E:D6:D3:7F:CC:BE:91:C7:A7:50:0B:AE:1C:7C:65:A8:66:01:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e9eab948-9210-3cc6-9b92-c00c1fde42a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.1.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:d0:41:a9:f6:b8:69:0b:91:58:fd:ee:ff:23:19:6d:9e:83:
93:bc:53:32:62:13:78:73:98:f6:c3:33:96:04:ec:db:0b:f9:
9d:4b:7a:b4:72:67:d0:fd:6d:ae:0a:4d:6d:07:d6:24:d0:65:
7f:ce:22:16:d3:d5:74:be:0a:91:7f:76:58:68:c8:7e:60:de:
97:34:f4:e5:b1:ef:3b:8a:bf:ec:c0:11:3b:9d:d7:82:66:29:
fe:6f:f9:aa:22:7c:11:f0:3a:d9:95:78:96:13:e6:af:3f:77:
58:4e:8c:0d:e0:15:ca:e6:7e:5c:00:71:16:f6:50:d0:da:3c:
59:0a:fb:04:31:0b:05:52:94:13:61:f9:2f:cc:e6:9b:2d:c3:
14:39:37:01:97:c6:73:24:e2:76:69:99:ca:0b:62:f7:f3:62:
56:e2:5b:bf:c6:50:d0:71:ee:cb:94:38:f9:1c:df:66:09:17:
e4:75:ef:e0:d8:df:d6:4c:f5:2a:65:a1:3e:06:09:2d:e1:9d:
da:49:52:e5:24:6e:60:b1:e2:60:fd:f0:5a:e6:cf:3b:21:f1:
5a:8c:b5:4f:94:5b:27:54:86:e7:1e:b1:19:91:db:01:90:d4:
2b:c7:66:65:32:12:88:af:87:75:b6:c3:3b:14:24:c6:e3:20:
0c:55:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:02:29 2025 by rpki-client