Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddf0e59-a135-3357-a56f-a4743e840554.roa
File: fddf0e59-a135-3357-a56f-a4743e840554.roa (raw, json)
Hash identifier: X1bJO1wMuz0pGfLRdkwqLC7gYTNEpcdHifFTPcVfn2w=
Subject key identifier: 02:6C:42:B2:93:67:EB:25:D8:39:31:D8:AB:29:7A:69:84:7D:E7:C3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858484515A0E3194E93CCA93A99E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddf0e59-a135-3357-a56f-a4743e840554.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.13.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:a0:e3:19:4e:93:cc:a9:3a:99:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=3641e49f-65d3-4a3d-89fd-beb8b90b7184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:29:cd:ad:27:51:3b:8c:78:29:e3:5c:a7:
09:fe:a0:ac:dd:c5:b5:15:c8:4a:e7:19:c7:95:d8:
3b:fd:20:0a:b7:eb:9a:c5:00:68:e8:3c:61:9b:d1:
61:26:7f:a0:e3:22:34:ab:9c:54:9f:1c:c7:35:c5:
04:58:e2:e5:94:2c:0e:d6:26:c2:8c:71:88:e7:d9:
f4:cf:f0:9c:ca:18:2e:9a:54:99:0b:2d:a7:21:7a:
8e:a1:d2:a4:e5:2c:89:ba:7e:69:71:b8:a4:93:59:
4d:cc:01:c9:08:6f:3d:54:23:ee:39:69:60:8c:0c:
bc:34:e3:32:12:93:bb:16:17:83:d3:85:b8:7f:d7:
c4:25:27:09:df:70:80:03:7c:b4:7b:da:3d:7d:ae:
00:25:f6:8c:b1:c5:10:c8:69:dc:a3:fb:7b:14:10:
4e:fe:56:a0:de:9b:ef:f8:28:0b:3f:1a:df:76:2c:
8d:91:12:60:56:af:10:2f:cf:75:44:d1:be:4f:17:
91:9f:03:1e:db:0f:94:3d:bb:ea:b7:1c:fe:29:09:
1e:1f:8e:d9:8a:14:17:4c:05:74:8e:22:dc:20:ce:
5e:a8:9f:8e:9c:d0:5f:4b:84:da:14:25:72:22:68:
d6:dd:6a:3a:6b:b7:1d:4a:27:19:d5:5a:9d:db:da:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6C:42:B2:93:67:EB:25:D8:39:31:D8:AB:29:7A:69:84:7D:E7:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fddf0e59-a135-3357-a56f-a4743e840554.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.13.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:a0:fc:f7:24:ce:a2:af:f6:56:83:22:1e:77:f1:c7:35:f4:
22:c0:d8:72:8d:b5:b1:a2:1f:94:e4:a4:a1:a0:b1:96:98:22:
d7:75:a7:36:1a:ca:91:d7:ff:ee:89:2b:fb:7e:1b:46:70:85:
29:a3:6d:2f:0b:a9:fc:73:21:59:81:fa:f6:fb:f8:eb:de:5f:
7c:0e:c5:76:42:1e:df:46:70:28:87:ac:97:78:43:91:f0:1d:
d1:a9:da:2a:82:95:28:b7:de:65:84:d1:ac:52:61:65:5d:d6:
a1:99:17:ac:99:dd:51:f9:98:d2:7f:e7:6b:8e:b7:03:3c:0d:
32:f4:bb:73:cf:b1:59:20:0e:f9:9c:5b:70:a8:51:21:c3:38:
f4:f8:24:5e:41:2c:93:1d:78:7e:71:5f:25:cc:a7:3b:2a:0a:
d4:99:81:63:73:00:97:60:6d:2a:33:1d:8c:40:9f:32:7d:74:
33:f1:51:aa:3f:47:96:f4:6f:7b:93:7a:b6:7d:b2:27:dd:77:
0e:11:33:8f:e6:d5:47:01:fc:eb:a2:ec:72:f8:23:23:be:3c:
70:7e:88:0c:1b:b3:f6:7d:6b:1a:db:01:89:7b:c6:7c:f5:ca:
14:74:f8:e1:8b:1c:08:47:15:7e:fa:1a:be:63:6a:93:3c:59:
8d:75:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:38:13 2025 by rpki-client