Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16b82c51-ae46-3a6d-ba56-4e143b7bec2f.roa
File: 16b82c51-ae46-3a6d-ba56-4e143b7bec2f.roa (raw, json)
Hash identifier: T7sbEto34BD89vPDzESE2+YzirffM5o4k6u4pkgisEs=
Subject key identifier: B4:4A:4B:46:3D:80:99:1B:0D:F6:20:BC:CA:B2:A3:AD:45:5F:BC:9B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584929E3DDA986F78FE8A9A5C080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16b82c51-ae46-3a6d-ba56-4e143b7bec2f.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.221.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:dd:a9:86:f7:8f:e8:a9:a5:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=eb9049bf-8a60-4dbd-ba28-ed3d4a316da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:f4:fb:4d:28:dc:27:29:48:44:79:25:50:
f9:a0:48:78:90:de:f2:1b:1a:a4:e7:f0:a6:24:68:
4d:41:6a:c4:28:d8:14:52:6e:6a:12:cf:5c:35:b1:
58:08:c3:c3:4a:d6:b8:10:aa:77:60:29:1b:fc:3b:
aa:df:ba:a6:91:1c:b1:9b:15:4a:2a:4b:85:c7:ca:
d6:d1:2f:0b:fc:fa:cc:21:85:5e:77:3e:41:9f:91:
9d:19:c9:95:0f:e8:13:c7:ab:77:84:fe:84:95:ba:
94:8c:51:02:76:41:8d:9a:c0:f1:03:60:53:92:5f:
95:c8:83:e6:21:fc:f8:a3:cd:61:36:fe:a1:d6:5c:
6b:70:65:c5:da:4d:00:b7:2a:32:0f:90:f2:28:20:
1b:f5:c3:07:9a:e7:28:10:66:93:3a:48:2e:1f:98:
9f:75:0b:be:7d:71:0d:7f:44:47:7a:13:ee:26:ca:
d1:d5:61:26:17:fd:18:b0:dd:ff:e9:8b:4b:63:ee:
e2:7d:20:c9:5e:37:20:fb:2f:3b:6d:a3:5f:dc:57:
b6:4a:43:a7:86:7e:d3:cb:f7:b0:2a:26:35:4d:7c:
5c:72:f5:ec:f9:73:6e:17:a9:49:d6:46:95:c2:a1:
4c:e7:59:ac:39:06:45:17:fd:e7:f6:4e:89:d5:76:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4A:4B:46:3D:80:99:1B:0D:F6:20:BC:CA:B2:A3:AD:45:5F:BC:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16b82c51-ae46-3a6d-ba56-4e143b7bec2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:40:09:01:94:7a:2f:19:11:99:37:63:75:4d:df:48:dc:26:
0a:45:7c:fd:87:d0:0f:ff:47:a8:2c:7a:01:fc:00:64:99:4f:
21:6d:72:e6:c9:04:b0:8e:a3:a7:fb:70:57:d8:a3:8d:a5:36:
32:0c:e2:44:a6:55:14:aa:8f:52:ed:29:f4:3c:6e:81:65:b0:
24:48:82:bd:e9:e7:4d:1f:69:f7:b4:4a:4e:4f:8c:fd:bb:99:
5d:84:1a:73:b7:de:2c:f3:42:e7:c2:30:13:c4:ae:f4:7b:4c:
ea:41:42:91:a3:d6:6f:9a:e7:d7:d7:c4:fb:60:70:1f:25:81:
c5:8b:e3:37:28:fc:66:dd:d9:d4:34:af:e8:3b:2b:6d:4d:5d:
5d:e3:d0:b9:10:a6:e0:9c:f6:4e:9a:c4:ee:1b:ff:46:26:62:
fd:1d:7f:e1:35:ab:2b:bd:0a:6d:76:05:96:25:73:c9:4e:b5:
08:1e:34:71:5f:d4:a6:17:18:b8:7a:2b:37:19:63:20:d7:4c:
c3:17:96:7b:ec:fd:06:fb:a9:78:5c:35:f2:7b:c3:b3:ed:43:
fe:b9:bd:ae:c2:43:d0:b7:a9:1d:0f:85:cd:a8:8a:58:38:72:
a8:d8:e2:10:ae:a2:f9:6b:06:90:67:a2:84:4d:7f:9c:c2:f7:
f3:66:22:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:40 2025 by rpki-client