Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/79ab58a9-f8ee-3f48-be41-ed1f70d103d4.roa
File: 79ab58a9-f8ee-3f48-be41-ed1f70d103d4.roa (raw, json)
Hash identifier: ctb01Lb5U31t97cUC2WX7afQyp2XrEKm3z/5/6Vs8mE=
Subject key identifier: 53:97:D9:12:9D:C4:91:33:11:E3:AC:A3:D1:8A:44:E8:AD:0D:E0:0E
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E00688BC302EF49AC976D680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/79ab58a9-f8ee-3f48-be41-ed1f70d103d4.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 19157
IP address blocks: 23.86.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:88:bc:30:2e:f4:9a:c9:76:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=769160c0-5157-4b61-8a48-a8fa4024562b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:4d:73:f3:17:50:bb:23:b9:28:3b:85:a3:d5:
cc:b0:85:32:79:99:60:6d:20:57:cf:11:5e:fc:ea:
0d:a1:3e:f7:da:38:7a:d0:b6:1c:f4:d6:ea:a0:1e:
29:12:de:b3:c1:2f:a2:2a:79:5d:5d:e0:9a:de:d7:
5a:84:15:7a:d2:6b:0b:64:8c:1e:2a:4a:3f:ab:0a:
0a:fd:a8:25:9c:67:97:e6:b2:12:e5:6c:c0:1c:32:
dc:7d:a2:a6:f5:a7:fd:20:94:f2:cc:28:89:e3:a8:
82:12:4e:c4:4e:3b:7b:d3:c6:f3:7d:7e:69:38:70:
53:63:67:4d:47:d9:7e:c3:08:e0:19:3f:2d:76:8d:
7c:4d:a3:f0:6b:d0:2e:78:33:33:81:bc:f5:e5:57:
7a:87:e5:02:74:3b:95:41:d8:c9:53:46:5b:51:ce:
da:0b:d4:a5:55:27:98:84:68:10:92:ae:76:aa:37:
1a:9c:3c:4d:ac:00:c8:de:95:94:43:95:51:73:75:
d8:ee:f0:53:4d:06:5d:12:c0:30:51:fc:87:37:3e:
5d:1d:aa:dd:0d:5e:50:5d:e8:04:eb:cd:af:f2:be:
31:bf:01:ff:ce:c3:bf:1b:81:22:39:c7:d0:2b:da:
93:e9:18:cc:a6:3a:d4:8d:4f:7b:8a:aa:79:e9:5a:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:97:D9:12:9D:C4:91:33:11:E3:AC:A3:D1:8A:44:E8:AD:0D:E0:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/79ab58a9-f8ee-3f48-be41-ed1f70d103d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
23.86.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:13:2b:a5:c3:23:f5:33:16:1f:a7:30:85:d6:74:b7:f1:72:
af:e5:a3:d5:8b:5c:be:80:e3:32:73:e2:7b:15:58:5d:1e:b8:
63:4f:2e:00:c5:0a:eb:0e:6e:ea:d7:e2:f9:11:be:98:87:cc:
53:d5:bb:66:1e:06:4b:f0:6f:09:5a:58:57:17:87:14:22:3d:
9e:ea:60:3d:79:ae:41:1d:b5:73:1c:dc:c0:13:79:fc:57:e8:
00:e8:5c:eb:88:ca:4b:3f:cb:52:a1:44:2e:f8:29:c8:49:73:
39:82:23:6b:54:8d:ab:91:3c:47:e1:66:7e:20:ad:61:93:a8:
a5:40:a9:72:ca:c6:cd:2f:e6:b6:6e:b7:6f:93:7d:24:31:de:
6a:ad:7b:2b:a9:d0:ad:98:d0:d9:98:94:8f:d4:35:cc:4b:73:
7e:e3:ed:20:dc:fc:38:6c:49:2d:eb:82:c6:78:db:26:fe:8b:
08:7d:71:f6:6b:b9:2d:b7:f3:8b:8c:84:84:2e:f9:c3:1e:a9:
98:29:ba:50:f9:d6:3e:ea:02:1c:2d:ee:54:f1:df:cc:a2:e4:
5d:6f:4a:ba:b0:57:45:99:99:35:7b:32:5b:37:07:b6:56:bd:
4e:53:57:70:20:a0:22:3a:d9:bb:4e:01:9f:e5:5c:5c:cc:da:
6a:65:6a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:21 2025 by rpki-client