Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061/65b53db6-b847-358f-85e2-26034499059e.roa
File: 65b53db6-b847-358f-85e2-26034499059e.roa (raw, json)
Hash identifier: V5Fj77N6OzoY+sq7a+MX6rX23STYvIknAbUW8mCgXzQ=
Subject key identifier: 39:CA:E8:15:71:CF:81:89:04:46:08:0C:18:1C:86:FA:30:88:EF:AC
Certificate issuer: /CN=cbd7336f-b4d2-4b1e-a772-365ecdca8061
Certificate serial: 010D0C9F4328583DA93FEE79B38C041278DA2F40
Authority key identifier: AE:20:32:A8:2B:5D:E3:FD:69:24:76:27:01:48:0F:23:95:D9:4D:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061/65b53db6-b847-358f-85e2-26034499059e.roa
Signing time: Thu 14 Apr 2022 13:47:42 +0000
ROA not before: Thu 14 Apr 2022 13:47:42 +0000
ROA not after: Thu 25 Jul 2024 04:00:00 +0000
asID: 53698
IP address blocks: 23.152.192.0/24 maxlen: 24
23.152.193.0/24 maxlen: 24
23.152.194.0/24 maxlen: 24
23.174.176.0/24 maxlen: 24
64.234.224.0/22 maxlen: 24
172.82.0.0/22 maxlen: 24
2620:134:1000::/44 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a9:3f:ee:79:b3:8c:04:12:78:da:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7336f-b4d2-4b1e-a772-365ecdca8061
Validity
Not Before: Apr 14 13:47:42 2022 GMT
Not After : Jul 25 04:00:00 2024 GMT
Subject: CN=506db802-8bf1-4e51-91eb-59b872aa39af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:14:61:3f:43:82:ef:54:08:09:5d:71:23:
9e:4e:3b:df:fe:87:f1:d5:10:ed:f7:94:22:9d:6e:
03:13:cb:b4:b0:91:5c:bd:8e:81:32:57:4c:b6:6f:
58:30:d9:02:76:94:c4:df:99:60:4f:d3:ef:43:8e:
6d:f8:e7:1c:74:0f:3a:20:40:46:54:d6:90:01:2e:
70:19:ab:1a:08:25:f4:4f:d1:d4:fc:54:5d:18:d1:
04:ce:ed:e8:56:15:10:d9:d0:8c:8e:4f:0f:c1:0a:
1d:bb:a1:69:43:49:ca:f8:0c:74:09:ae:49:16:a5:
72:7c:4f:b6:5d:f6:7d:dc:ba:ed:2d:12:0a:07:f8:
ca:84:70:d7:fd:64:d5:12:a9:3e:68:22:4c:d6:7a:
a6:a4:1a:49:30:04:d5:2f:46:25:a1:15:26:a6:d4:
64:b0:33:01:2b:97:48:e2:7e:a8:54:26:a2:18:96:
5c:20:4a:8c:92:a5:4d:ed:36:ba:e8:65:b2:6c:58:
ff:9d:cf:38:f6:ec:de:3a:71:d3:25:c3:a4:5e:b9:
83:91:93:54:23:6a:ee:01:d9:16:06:3a:b3:77:16:
a0:4a:05:bc:48:10:4c:14:49:e8:92:09:45:07:0d:
9c:0a:9a:2a:41:99:c3:5a:ce:db:0a:27:9d:29:26:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CA:E8:15:71:CF:81:89:04:46:08:0C:18:1C:86:FA:30:88:EF:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061/65b53db6-b847-358f-85e2-26034499059e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061/cbd7336f-b4d2-4b1e-a772-365ecdca8061.crl
X509v3 Authority Key Identifier:
keyid:AE:20:32:A8:2B:5D:E3:FD:69:24:76:27:01:48:0F:23:95:D9:4D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cbd7336f-b4d2-4b1e-a772-365ecdca8061.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.192.0-23.152.194.255
23.174.176.0/24
64.234.224.0/22
172.82.0.0/22
IPv6:
2620:134:1000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:21:34:34:1b:92:32:f7:d8:3b:54:77:ed:54:58:f5:88:e4:
e3:4d:61:85:07:70:2b:60:fe:b3:dc:0b:41:b3:91:19:cb:6f:
03:20:27:90:f7:cc:c6:23:5e:93:ec:45:39:15:34:5c:9e:dc:
06:65:21:88:cb:21:49:76:b9:49:f3:9d:6e:25:61:aa:e7:b7:
7a:c4:c3:71:bf:ca:bd:20:55:cf:e8:c5:4f:49:66:ff:0a:9a:
6a:b5:a7:6b:4a:1b:d8:33:2d:2e:a2:55:b4:cf:28:a5:77:e4:
f6:55:b5:f7:65:dc:08:32:fd:11:97:79:d5:94:53:1b:e4:c8:
9a:98:61:08:41:70:fe:9c:7f:14:04:0a:5e:13:5c:5f:73:d5:
37:b6:d8:e2:99:be:2a:50:6d:48:5d:ac:f3:6b:ca:8d:76:e9:
92:cd:ce:d9:0c:cf:bd:9c:28:ce:15:65:12:3e:8d:05:d0:6c:
a7:a2:33:4a:cf:36:ec:b8:c7:e8:18:0a:7f:91:df:bf:ff:b0:
49:f6:bf:4e:94:34:5e:bd:41:c4:61:15:47:b8:24:5c:ae:ad:
1e:eb:a4:a6:5a:c7:21:0e:74:ef:b3:24:80:99:b4:65:57:0e:
a5:87:4d:6f:b0:0a:27:c2:40:76:09:cd:49:1d:40:3f:54:fd:
39:05:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:47 2023 by rpki-client on console-fra.rpki-client.org