Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23b19ae4-ec0c-357a-a61f-6159f9751300.roa
File: 23b19ae4-ec0c-357a-a61f-6159f9751300.roa (raw, json)
Hash identifier: RAwykFtfXX1YtKSj3O6Qt88GYEjDx4FyM7mbCZYQMjk=
Subject key identifier: 3B:51:63:FD:D8:8E:24:29:A0:33:58:C8:B4:11:46:BA:93:60:70:49
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB94C466CEB9BE9F981D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23b19ae4-ec0c-357a-a61f-6159f9751300.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.211.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:94:c4:66:ce:b9:be:9f:98:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=89b256bc-0a17-44c8-9456-5736a738b30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:15:e5:9b:94:ed:d6:19:2c:10:00:ee:38:da:
1d:9b:17:e1:0f:fc:7e:fe:36:4b:3c:9d:4b:e0:7e:
7f:03:15:b8:09:94:5a:60:da:98:78:34:d2:68:8e:
ee:ea:08:40:e5:b3:ad:01:2f:b9:66:b1:d3:b5:97:
09:87:87:ee:fd:c7:20:66:0b:73:a0:9f:67:51:05:
95:47:99:3a:87:9e:b0:ac:75:66:e7:eb:27:04:65:
45:b9:65:6c:4a:c8:c6:1f:57:9e:47:a0:bf:c1:18:
26:81:04:c7:7b:24:3e:27:d2:8b:79:26:94:a1:79:
33:e4:b6:8c:e9:31:82:b5:50:05:10:56:71:0d:01:
f3:f3:a4:de:88:ad:28:eb:c6:2b:f0:e7:4c:b1:99:
1f:15:a0:e7:ef:05:15:c2:a3:28:5c:69:cd:99:c8:
7b:7a:55:0e:68:4d:56:5d:f1:d5:15:11:b2:dd:f7:
2e:0a:78:3e:96:95:2e:b4:64:8f:f4:6a:7f:cf:6b:
60:03:23:4e:b5:4a:f5:fd:5f:e6:db:06:85:4f:b7:
cf:b9:fd:c9:76:a0:d7:c4:99:fe:2c:bc:4f:d1:f8:
4f:58:74:be:cc:97:0e:57:b0:d5:9a:8f:bd:be:1a:
3f:7c:fb:40:59:d5:c8:f6:9e:94:e0:16:ab:36:58:
52:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:51:63:FD:D8:8E:24:29:A0:33:58:C8:B4:11:46:BA:93:60:70:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23b19ae4-ec0c-357a-a61f-6159f9751300.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:fe:4e:84:19:69:48:ef:75:d7:fb:3f:70:c9:81:91:1f:4b:
ee:27:ca:43:3c:8b:37:c5:9f:cb:e5:f1:a0:15:55:9a:1a:c8:
2e:f8:30:50:88:b6:f8:7c:f9:5e:d1:3d:66:94:09:3a:b2:2d:
52:62:f6:e2:1f:6d:ff:52:67:eb:a9:42:ba:96:7c:92:fd:4e:
b6:6a:bb:34:75:cb:64:ba:cf:48:ad:35:ea:49:5d:63:fd:36:
10:c0:e8:1e:0f:90:17:7e:5e:06:3d:96:a1:6c:6d:c7:11:62:
ab:68:ab:c8:51:79:a4:9e:c0:43:c3:a1:c1:ec:4f:9d:dc:ec:
b9:c2:8c:05:e7:68:a0:12:5d:63:fa:19:91:63:b7:4d:72:9e:
8e:bb:b9:de:5d:cb:79:f2:90:b7:b8:19:51:7c:0e:c7:4d:4e:
77:a8:b5:4b:04:9d:c5:f1:ef:aa:ab:fe:cc:ce:2d:d5:7c:d7:
a8:03:63:d8:b8:97:b8:32:e2:e0:03:4e:42:a9:91:33:78:7c:
76:7d:6b:c2:95:14:7e:7e:8b:30:64:75:32:f2:7c:93:28:de:
ea:70:f9:f6:8b:0e:64:17:11:7c:cc:54:fd:92:55:52:55:d5:
67:9f:ba:e4:35:d7:ee:b0:3d:e2:b5:ce:f9:9d:64:33:99:40:
04:91:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:57 2025 by rpki-client