Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05000924-9abc-3e20-b8e7-1ce10a53906f.roa
File: 05000924-9abc-3e20-b8e7-1ce10a53906f.roa (raw, json)
Hash identifier: mMACY2vg3x4/dsbWKnm+gPVpXFGPVW4IGfl8L5xxbFo=
Subject key identifier: 5B:08:C9:3D:27:98:56:C0:E8:50:C4:29:C8:4E:23:32:DB:9A:63:E2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584913AC3D4E2B87110D22EECF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05000924-9abc-3e20-b8e7-1ce10a53906f.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 34164
IP address blocks: 23.66.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:3d:4e:2b:87:11:0d:22:ee:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=67f833e9-7960-4752-9137-bc81385c7a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:46:be:99:1e:45:87:a7:17:79:51:49:24:
b6:fd:54:7a:a8:42:9b:02:ac:a2:15:c8:20:af:51:
57:e7:dc:be:dd:12:f4:8c:78:c3:35:ef:3a:ef:53:
ed:77:22:69:93:53:5b:7c:77:ff:b5:2d:5b:43:d9:
f4:bb:53:77:8c:60:3a:8b:1d:8a:58:0d:7d:38:9d:
b7:34:dd:51:b3:c9:66:90:cb:60:ed:0d:a7:b3:ae:
2c:64:3e:64:d0:2c:50:61:f8:63:8a:da:f0:1d:a9:
95:69:30:fb:6d:07:bc:34:76:80:7a:66:2b:62:78:
15:f7:a5:27:ff:e5:91:61:83:5d:e9:1e:32:7a:a4:
9e:66:50:ca:81:c9:60:8c:cd:04:ab:87:05:b7:35:
de:78:a3:1b:a5:40:ee:72:be:6a:2c:5a:74:3a:d1:
f6:c6:2a:3f:0c:cc:89:76:b1:d7:d4:50:eb:b5:22:
11:36:88:ff:a1:57:ce:76:02:3e:08:d0:34:8a:92:
ba:43:44:86:6a:38:77:05:6b:8f:e1:2d:1e:36:e3:
c0:47:0f:31:5d:ba:55:1d:5e:cf:77:1e:e7:80:37:
31:7a:26:ac:3e:8e:d4:c7:d3:0b:e3:05:f1:1f:44:
68:03:ee:43:e4:85:a9:81:a9:6e:47:61:8f:fb:83:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:C9:3D:27:98:56:C0:E8:50:C4:29:C8:4E:23:32:DB:9A:63:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/05000924-9abc-3e20-b8e7-1ce10a53906f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.66.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:57:54:27:96:1d:a9:ed:5a:01:c3:da:f1:45:23:42:c1:ac:
69:b4:e4:7f:a9:22:ca:49:20:6a:fe:74:ca:bc:5e:0e:19:bb:
3f:58:1b:95:a0:8f:cc:53:fa:a9:96:13:48:7d:9d:b9:80:2c:
47:82:9c:57:57:26:77:bf:c9:bf:da:50:1f:4a:b0:22:d3:b4:
17:fc:ee:66:cf:40:e9:b8:c5:cf:00:38:bd:e3:f8:c4:f8:bd:
0f:e1:c8:e9:76:bb:3f:7a:79:41:c8:ce:57:b5:f1:14:f3:c2:
f3:f1:4c:0a:ce:f3:60:27:94:33:1e:bf:5b:e1:2b:d8:0b:6b:
f9:60:1a:3a:73:ed:e8:50:d1:91:b8:c8:df:0c:68:40:62:78:
41:7a:19:6a:92:4d:42:18:58:45:6f:84:bf:fe:a3:8e:de:e2:
69:92:fe:c3:74:85:25:f3:ea:3f:3a:f0:25:43:a0:32:dd:f3:
e2:43:15:45:20:47:bd:9a:e8:31:20:b4:8e:61:8f:ac:88:a3:
2f:45:9f:c1:ce:e8:85:e4:7a:15:38:fb:38:0a:b0:0f:63:3b:
e2:aa:12:90:0b:7b:a5:eb:78:46:00:52:68:cc:8d:2d:fa:8b:
ab:d1:70:05:7c:f4:8a:60:f9:cf:b3:7a:bb:af:75:3f:ef:08:
19:e9:94:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:54 2025 by rpki-client