Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30cffa2-743d-3789-b438-bd066e10994d.roa
File: f30cffa2-743d-3789-b438-bd066e10994d.roa (raw, json)
Hash identifier: fCnOjY4oYQVhGpUwaaYhuZ6+9oU0i2gQQ+RvkhqqWZY=
Subject key identifier: 20:F2:DE:00:BB:9D:ED:21:B6:3E:2C:C0:EA:B4:37:90:53:5C:66:BE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847DC64C453CEE6BB1617328080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30cffa2-743d-3789-b438-bd066e10994d.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 16625
IP address blocks: 23.213.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:c4:53:ce:e6:bb:16:17:32:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=6b9c7a92-f130-4ba7-83b5-522c6116e81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a4:d6:65:d1:42:07:e1:9e:b8:77:9b:e7:0f:
73:e4:48:ef:06:81:84:ee:8b:c3:23:e0:b5:29:21:
15:66:53:f2:3a:5c:a3:02:3a:66:cd:93:52:a6:6d:
fe:c8:0b:68:55:8b:eb:86:ad:0a:73:e7:3d:91:56:
1f:7a:8b:1f:15:ea:b6:86:eb:07:44:39:5d:a4:2e:
d7:8a:1b:85:54:15:c0:6a:97:c7:34:cb:75:a8:13:
d1:09:bd:01:44:41:35:bc:79:4f:52:7a:54:31:da:
af:7e:b5:05:9b:af:49:28:fa:2f:00:6d:11:61:73:
97:a0:f9:0e:84:f2:5f:e7:72:6c:8a:3d:09:5c:ce:
14:9b:ae:b8:f2:76:7c:6c:df:74:6c:f8:f8:dc:96:
53:06:3c:fb:81:57:b3:6d:f6:a8:4c:84:f6:63:15:
54:c1:14:2a:0a:68:85:f5:bf:5b:ae:af:5a:0a:9f:
ce:4c:70:cd:9c:21:d5:4a:ce:13:9a:41:b3:05:d4:
54:36:47:0f:14:77:91:1d:84:f9:41:59:e7:43:ca:
84:ab:ba:bf:c1:f5:0f:4d:0d:8b:61:12:3d:76:81:
d6:20:09:da:ac:2a:6f:4b:82:86:ae:23:24:67:63:
05:40:73:d6:1e:55:4a:e0:b3:ae:01:5d:4b:43:65:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:DE:00:BB:9D:ED:21:B6:3E:2C:C0:EA:B4:37:90:53:5C:66:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f30cffa2-743d-3789-b438-bd066e10994d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:75:0d:5e:0c:c9:6b:9b:3c:35:cc:e6:31:c2:3c:1e:23:34:
87:d6:3a:f4:3e:52:70:41:89:ec:0a:e6:af:ae:a9:74:4c:a6:
9c:50:f0:ba:2e:a5:37:9c:4c:2f:af:92:48:ac:29:fc:68:f8:
a1:af:81:cc:b5:51:9f:23:08:0f:b6:f9:31:9b:4f:e0:c7:85:
0f:c4:3c:bf:96:2f:df:3e:1b:98:c8:44:3e:ed:02:a3:e3:88:
ff:da:61:b2:5b:0f:03:17:16:5c:c4:39:28:21:35:0b:82:7e:
8d:08:98:c7:b3:2f:4f:36:e8:0e:e6:2c:b2:0f:1d:a9:de:27:
ac:24:a8:bc:14:ba:3f:dc:f6:74:80:20:51:9d:05:15:c5:aa:
87:a8:c6:f6:ba:3f:e3:4e:74:92:bb:73:42:45:2d:30:69:8e:
4f:cb:b1:4c:bc:21:53:fa:7c:51:84:fd:8a:06:ba:97:5d:d0:
ab:e1:8d:53:52:fb:88:9f:b0:29:b5:aa:32:0d:a3:bc:63:24:
ae:ce:b0:d1:5c:af:76:a5:5b:fa:f7:18:91:da:32:2e:07:ba:
21:76:2b:8f:f8:69:e2:6a:71:08:6d:7e:49:f4:97:55:5e:4d:
cf:83:2b:37:5a:0b:0c:06:85:46:23:ba:aa:7a:02:c5:8b:db:
59:68:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:12 2025 by rpki-client