Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef9e3e21-915b-37b1-be73-d1a38b1d746d.roa
File: ef9e3e21-915b-37b1-be73-d1a38b1d746d.roa (raw, json)
Hash identifier: FfB1SA6qTr3bhnCGOoQLymR9CCgg1+HcM95DPX8XvcE=
Subject key identifier: A9:BD:4E:EE:28:63:44:39:7C:8A:5C:3C:99:B4:44:EA:33:89:4C:6D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584845159FE2B9B2CAB7BEA9B100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef9e3e21-915b-37b1-be73-d1a38b1d746d.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.7.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:9f:e2:b9:b2:ca:b7:be:a9:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=15ea676e-7c29-4e6d-a902-8d9ade0150f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cc:d9:a7:2a:6c:3e:fd:91:ae:2f:dc:41:b3:
c6:44:c5:f3:20:c8:5e:c3:ce:1e:2a:f2:d7:d4:4c:
e7:a5:3b:96:f5:70:cb:55:c0:b7:da:b5:28:d3:8e:
df:f1:d4:4e:15:09:a6:a7:11:d3:0a:ee:94:bb:d6:
7b:49:dc:30:71:4c:94:d5:08:e8:e7:0e:06:ae:99:
1e:12:97:1d:69:b4:37:b3:93:09:ae:de:9b:69:6e:
ec:e2:8f:be:0b:e8:f9:53:99:1f:21:39:d5:0c:fc:
e7:28:99:b7:1e:b2:ce:62:c5:5a:2b:ef:97:c6:1c:
50:de:24:56:54:cc:16:b3:05:7c:48:ce:af:de:5c:
ba:c0:a1:36:9c:d8:de:05:52:a2:a2:83:a1:e3:06:
d0:2e:6a:58:61:14:72:fc:04:eb:b5:18:37:5b:32:
8d:90:09:f2:5f:92:30:72:26:25:10:5c:95:64:ff:
51:2c:33:fe:16:1a:1d:72:b7:39:b0:16:23:a9:a7:
74:2e:dc:ec:37:e8:eb:7e:9f:c2:42:6a:7b:59:af:
b3:5e:44:24:92:ef:7b:4b:52:83:12:d0:29:e3:2b:
26:72:14:96:f3:b0:c1:49:b3:b9:a7:1a:a2:16:6c:
85:15:a3:7f:ee:05:fb:13:7e:07:63:0a:98:28:a2:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BD:4E:EE:28:63:44:39:7C:8A:5C:3C:99:B4:44:EA:33:89:4C:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef9e3e21-915b-37b1-be73-d1a38b1d746d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.7.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:b4:ea:95:fc:96:56:8c:f6:b1:dd:06:cc:0d:9c:8a:49:cf:
4b:97:2c:48:ec:c8:78:0d:8d:37:e1:25:87:74:59:13:fa:61:
47:b9:23:3a:f8:f1:71:bb:27:8e:9a:1f:d6:bf:b0:c8:85:d4:
de:f9:45:b0:38:4d:d0:e8:7a:fe:30:da:5f:2b:55:b3:59:f7:
9a:32:aa:7c:3a:db:35:06:09:35:88:ea:8b:9d:58:49:b7:dc:
70:d6:3a:22:b5:75:93:b8:08:70:02:0b:d5:9e:70:b9:7a:35:
13:86:98:ad:aa:93:96:33:68:56:63:c8:6a:7f:38:61:72:92:
ea:b4:7b:92:2d:80:f9:41:a7:5e:87:5e:76:81:e2:45:a9:b6:
19:8f:f6:fc:0a:c9:a3:72:04:3b:d1:18:01:16:0b:1f:81:c0:
a9:53:e8:bb:3a:9b:f4:69:51:f2:cd:45:a8:12:b0:2f:ee:f9:
ab:37:de:cf:5a:79:86:43:2b:08:74:97:4f:84:c7:c0:0b:77:
8e:e9:68:0e:39:b2:bd:99:97:59:bb:f9:7b:73:0c:07:70:00:
48:30:ce:ad:df:af:ea:ba:71:a2:04:1e:6b:96:4c:b0:23:a1:
09:9d:1b:2d:69:6e:4e:99:dd:db:7b:d2:7e:56:10:ad:75:3b:
04:5d:30:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:42:58 2025 by rpki-client