Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa
File: 0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa (raw, json)
Hash identifier: O74Qv1WhaA/o0zqgxT8LMsT40R8F2H5MXs0GcSJ1jXA=
Subject key identifier: A9:5F:A4:7D:B3:2C:B7:63:15:7C:4A:70:01:2A:48:70:11:8C:55:2E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB8C105FF4DDD01CDE1480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.211.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:8c:10:5f:f4:dd:d0:1c:de:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=5eee6a0d-251d-4a0a-9896-9f9506a349c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:10:54:84:52:37:aa:17:60:0d:e1:27:d5:
1a:00:27:a7:ee:2b:4d:43:10:1b:20:4b:96:ff:f3:
b3:9d:e4:e3:86:b0:d1:34:5a:ff:18:f4:5e:6a:ff:
32:a7:3d:fe:fe:a4:e7:1e:71:77:8a:91:ed:2e:78:
46:07:99:8a:b2:9d:7a:f9:9a:ce:5b:88:ad:ad:60:
a5:bf:5e:b7:c0:1a:c7:76:36:26:73:2b:16:8f:04:
73:8f:a9:67:64:41:19:64:8a:b8:d5:e1:7d:eb:0b:
d4:59:59:2a:36:08:6b:21:ac:65:32:e8:8a:10:d8:
bf:6d:11:51:96:9d:e3:88:02:24:fc:84:f3:95:39:
c6:1a:10:14:35:9c:9a:33:e7:0e:36:69:c2:41:50:
aa:82:30:b0:1f:19:21:36:4c:16:20:78:d0:6b:6e:
77:b5:c8:69:ee:a8:2d:4b:b4:25:e8:e2:00:6a:eb:
85:f6:79:13:15:d9:c5:ff:70:34:72:8d:90:12:76:
bd:45:f6:7a:41:09:c8:4b:bd:7f:22:3a:e0:c5:d5:
20:3b:ef:de:f6:ed:8e:f3:7b:06:2f:74:67:a8:0a:
de:5a:08:a6:d5:85:9b:05:e2:a7:88:90:b7:6b:f5:
89:5a:9d:20:87:09:43:4b:52:49:14:34:4b:dd:50:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5F:A4:7D:B3:2C:B7:63:15:7C:4A:70:01:2A:48:70:11:8C:55:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0af47bae-92a6-3c83-9e6a-5c2daec7d3f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:7f:35:22:92:c0:94:22:92:ab:de:75:6a:72:e9:eb:25:e2:
4a:46:f9:0f:77:d9:08:62:de:8a:a7:97:0a:88:d3:be:e0:0b:
ae:ce:ec:c9:ac:41:90:53:7b:a0:d6:2a:f1:0f:db:c2:d5:59:
31:7f:18:8a:36:eb:01:64:53:aa:9a:a8:0e:72:0c:f1:aa:9a:
c7:6f:2f:bd:b6:2a:5c:26:6c:d3:e2:c6:97:bc:ef:e7:e0:4a:
60:f3:c0:99:1b:2d:8a:80:51:57:58:d5:4c:a3:31:92:5d:a5:
20:dc:79:f7:93:33:44:8f:ae:ce:ed:06:10:7d:d3:e2:e1:bd:
c3:f0:50:5a:f5:31:f9:b6:50:3a:8b:8a:7b:21:37:20:51:d9:
15:72:49:fd:00:b9:9e:57:ae:0d:3b:f4:b0:04:87:91:77:c7:
c4:ec:ac:d8:be:38:0c:f6:3d:f6:7f:24:7d:a9:1e:0a:6c:7d:
eb:30:22:30:57:b9:97:e2:33:e6:23:a4:d7:6c:3b:6d:b7:15:
f8:77:3d:67:7b:ed:91:64:d6:b1:d1:12:99:1e:2c:0f:ef:b8:
97:7f:0e:3d:0d:57:d5:c9:cc:16:f2:f7:db:4d:04:0d:30:cc:
2d:94:50:eb:1b:7b:5d:c8:90:32:4c:19:df:2c:b6:4a:49:f5:
1d:5e:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:51 2025 by rpki-client