Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d89750-73ed-3220-b125-c6787a7e3508.roa
File: 21d89750-73ed-3220-b125-c6787a7e3508.roa (raw, json)
Hash identifier: B80Pk56hzKhjHdxxWsUXEab59kDWb1iDzr8BrhTU9DE=
Subject key identifier: 88:38:E9:A7:F6:F5:DC:E4:CC:F4:FC:DB:01:7C:43:48:14:C3:99:A1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584890760E39B24C53E7BCC5E400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d89750-73ed-3220-b125-c6787a7e3508.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 16625
IP address blocks: 23.198.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:76:0e:39:b2:4c:53:e7:bc:c5:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=513410a7-d620-4b03-9575-fbf20bb43e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:25:19:59:cf:b6:04:d9:84:c6:f4:5b:a1:
e5:68:16:41:f6:d0:6e:84:71:08:9b:3b:72:c0:b4:
d4:24:57:43:09:a6:98:77:d1:8e:4a:c1:cf:9a:e4:
d1:6e:39:f2:7e:23:92:31:59:5d:d0:65:5f:15:c7:
06:a0:a3:a6:66:d1:43:36:ec:0c:aa:ba:4d:ef:88:
44:fe:13:25:53:fa:d8:75:ba:ef:2b:bd:b4:c2:fa:
f7:bc:60:0e:09:3a:0f:6d:36:b2:d4:45:4a:18:f4:
91:ac:55:c6:49:67:e2:21:84:52:5d:4d:db:d8:00:
13:55:ba:a2:28:33:6e:33:07:20:94:73:5d:30:f4:
15:aa:2c:ff:41:c1:3d:77:73:6c:1b:8e:3b:51:7e:
f3:40:08:da:30:ff:4c:98:5c:09:0f:4f:b9:f3:71:
78:64:fa:69:04:60:85:fd:7d:57:9d:04:ed:ed:aa:
78:57:db:ff:4d:4a:74:7a:1e:1c:14:d5:ce:b2:f7:
9d:07:f6:fa:e5:a7:23:14:b5:d8:46:f0:4f:0d:91:
ed:dc:66:aa:05:d6:58:5d:b7:ec:8b:b2:77:76:d9:
53:d0:83:40:a0:75:ef:62:a7:f4:55:f4:26:0f:42:
27:6b:c6:1e:48:a6:b2:aa:47:b7:37:e8:1f:18:df:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:38:E9:A7:F6:F5:DC:E4:CC:F4:FC:DB:01:7C:43:48:14:C3:99:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d89750-73ed-3220-b125-c6787a7e3508.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.198.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:8d:b8:b3:62:13:b8:56:83:26:8f:5c:92:97:58:81:c5:09:
a1:7b:d5:cf:5d:42:9f:73:0c:12:ec:e4:bd:b4:78:8f:00:b5:
89:c6:16:c2:ae:46:2c:32:ee:7c:e6:2e:bf:76:70:28:1e:f3:
76:fe:02:f9:42:28:a7:b0:8e:20:0f:c9:9c:28:54:b6:eb:9a:
07:13:ce:14:ed:20:0b:f7:6e:df:25:98:e1:1d:f5:fa:35:75:
fe:03:42:b0:13:13:6e:f2:42:a1:9a:5a:5d:a4:9b:42:eb:10:
68:e1:1b:61:9c:d8:ff:ec:77:19:9b:93:64:d7:85:11:8d:df:
e4:49:e0:45:64:9c:a3:23:28:99:53:ea:24:e8:82:3d:de:a5:
f4:85:a1:8b:97:5f:74:62:8a:31:e1:5f:6e:f7:b4:3b:90:f3:
c2:6d:99:72:64:ec:70:36:3a:7b:88:22:80:ea:06:57:6d:ab:
40:20:0f:ee:60:3b:6b:1f:1b:fc:d0:3c:5e:8a:42:41:c5:7b:
4d:69:84:5e:9f:17:c5:d8:80:05:48:11:8e:37:c9:1f:6c:b4:
b7:39:31:ef:07:64:7d:07:b4:5e:7d:f8:db:de:ac:c9:dc:82:
d6:aa:30:f9:4b:9f:28:d6:4d:9d:4f:5a:9f:02:92:09:d2:59:
90:3d:7d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:52 2025 by rpki-client