Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d2df8a3-7d32-30f4-a38b-62b931298ee9.roa
File: 2d2df8a3-7d32-30f4-a38b-62b931298ee9.roa (raw, json)
Hash identifier: onhtg3IVruMQAiqc9oeHoji7iO7ESQ/Xce5E4hu+1Nk=
Subject key identifier: C3:3B:23:B7:49:07:E1:88:85:64:F7:73:6D:2C:99:8E:EE:FB:FF:7B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB6813A4F37C0122425000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d2df8a3-7d32-30f4-a38b-62b931298ee9.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 9121
IP address blocks: 23.55.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:68:13:a4:f3:7c:01:22:42:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=1c0ea003-9ee5-443d-91b0-6fbbe3c290e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:d2:3b:32:9b:bb:aa:5f:72:f7:a1:f9:3e:
a8:8a:dc:90:c5:21:bd:10:29:4f:8a:e6:c0:75:ed:
aa:03:1a:5b:e1:eb:d7:ff:6d:0f:1d:98:79:02:4e:
eb:b7:bb:0c:e0:7e:59:04:43:cd:b2:4e:09:9b:62:
30:2c:e4:2e:f6:8c:5f:56:6d:f4:6e:39:eb:ab:1d:
c7:82:2d:fc:00:dd:4f:ff:3e:e0:99:39:f3:bd:10:
13:df:f4:f4:81:5e:7c:30:03:b9:34:bd:9a:8d:9e:
f8:3b:1d:6b:db:d0:28:49:20:9e:ee:b2:95:d7:49:
24:6d:87:b9:39:ca:d7:55:fd:90:6e:42:5a:9d:43:
ac:d0:95:62:e4:7e:b3:b3:15:76:0f:cd:6c:ae:f9:
43:0f:41:c9:4e:dd:d6:ce:95:c5:13:c5:86:30:2e:
5c:46:bf:ef:a2:f4:de:07:f5:1b:f4:06:ba:eb:a5:
83:a5:3d:1c:ca:13:b4:d5:91:da:ac:ab:eb:00:9b:
66:ac:72:ca:b4:5f:a6:bf:01:41:3f:9c:4a:3c:82:
67:23:ba:3f:68:bb:be:0a:f2:c8:9b:14:cc:c6:fb:
81:68:d3:f0:56:69:13:c6:46:3f:ef:3b:49:50:28:
c9:b2:30:a2:14:32:97:09:4e:bf:55:28:54:14:bf:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:23:B7:49:07:E1:88:85:64:F7:73:6D:2C:99:8E:EE:FB:FF:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2d2df8a3-7d32-30f4-a38b-62b931298ee9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.55.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:cc:61:cc:37:c4:f1:28:70:89:ad:bb:4c:7e:a9:8d:c4:26:
9b:c7:c9:9d:06:6f:0a:fd:0c:6e:c0:9e:b0:f0:e5:97:1f:26:
0d:03:f8:39:a0:1e:62:3a:5d:02:12:4c:71:9e:ea:d8:92:09:
aa:df:8e:48:55:3c:6e:aa:d1:8c:16:ea:48:bb:75:82:62:e4:
ce:b6:80:0c:8a:dc:41:31:43:3d:2a:3b:85:c8:f9:13:b7:2e:
8c:d1:b2:d7:c6:03:29:c8:f7:ab:c2:7b:3b:41:37:11:c7:1b:
41:a2:36:d6:73:64:37:c6:83:27:b4:0c:9d:d5:fa:19:0b:5d:
84:67:7a:2a:d5:d5:87:49:18:25:fe:93:d7:ff:18:25:f2:8a:
a4:a8:14:d7:3b:57:08:7d:19:54:6b:e1:37:db:a7:fd:bb:4a:
86:95:63:7c:a7:f3:53:4d:c7:87:53:f3:9f:ca:c9:86:5a:a6:
25:e5:88:b4:bf:17:83:78:71:5d:f2:79:13:fd:2b:93:12:37:
21:1d:6c:95:26:1c:48:b5:b1:a6:00:d5:c4:cd:11:c5:4d:35:
f6:3a:d0:b8:3c:93:32:3d:63:37:90:7e:ec:01:8e:1b:8a:85:
b5:9c:d7:a8:0a:e9:8e:07:2f:98:c0:3f:c4:00:4b:ca:79:32:
83:45:67:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:39 2025 by rpki-client