Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fcca7dc-b8aa-3c55-aa29-5e1708d1a19e.roa
File: 2fcca7dc-b8aa-3c55-aa29-5e1708d1a19e.roa (raw, json)
Hash identifier: YJ3wwzN8Lqbs1sKAbjwZdNQ+GpD954nOE94fYQmzsSw=
Subject key identifier: 61:9C:58:0E:68:0B:80:F0:AC:AF:51:AD:5B:6A:76:83:34:E4:F3:F5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB49F0B418354E59826D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fcca7dc-b8aa-3c55-aa29-5e1708d1a19e.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.44.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:49:f0:b4:18:35:4e:59:82:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=9d55d948-6d0a-43f2-a94f-8f047cfc5502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:f0:68:5f:dd:2e:d3:66:b8:1d:91:8e:36:
a8:80:99:81:5e:ac:1f:d9:68:03:93:6c:af:94:a9:
7d:07:82:a4:2f:c1:e6:38:98:bc:a9:c3:3c:e3:17:
7d:44:36:7e:a4:cf:7c:6e:0b:4a:30:3f:66:14:af:
4b:9b:81:5a:bd:bd:39:f3:c2:cd:54:a9:32:5b:2a:
1f:3e:ed:e0:76:31:7c:97:34:bb:4a:15:05:a6:0f:
c3:05:8a:29:1a:c4:9b:d6:33:8b:08:16:6d:84:80:
79:bf:ff:e9:63:57:e7:d5:8f:61:93:ed:64:fa:df:
7d:a3:b6:44:b4:f6:a6:3c:da:3f:8e:56:11:21:a5:
3e:f9:49:44:f0:51:a8:09:d9:0c:79:3c:d7:b7:35:
2b:11:ae:b9:92:bf:6c:e9:9e:1a:7d:cb:3f:0e:e2:
ab:a5:61:d2:62:ca:75:c3:bd:29:96:d8:2b:8f:22:
82:6e:96:dd:a9:0a:a8:70:68:e8:66:2e:c0:15:23:
f7:dc:98:ef:14:29:8d:18:80:da:77:36:3f:5e:a7:
ba:95:83:fa:f8:d8:36:de:8f:cd:7a:c4:5d:64:53:
a0:29:70:eb:85:40:20:0c:0d:24:fd:77:bc:91:d0:
f3:31:c4:41:dd:07:d4:76:10:7c:84:59:ca:8c:70:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:58:0E:68:0B:80:F0:AC:AF:51:AD:5B:6A:76:83:34:E4:F3:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2fcca7dc-b8aa-3c55-aa29-5e1708d1a19e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:ad:f3:ba:12:3b:3f:fc:3c:bf:6c:a7:67:41:04:29:7b:90:
36:81:88:47:5a:5d:eb:cd:72:c9:5b:d0:6d:32:93:c8:6e:ef:
9d:bb:2a:9d:3d:f6:9a:79:62:c1:d9:e9:82:84:00:bf:27:d2:
cd:b9:0b:0e:7e:8e:8c:95:66:85:5d:3e:5d:cc:23:12:2a:66:
5e:ac:48:dd:25:58:57:68:35:1d:ab:24:48:43:47:5c:89:6a:
0b:b2:10:f9:42:da:55:4e:af:01:cf:28:f3:2b:71:bd:44:59:
ad:5a:bb:2f:29:3d:0a:71:00:24:8e:bc:5b:47:24:01:de:5b:
38:c3:a1:b2:f1:79:2b:18:48:16:22:85:38:bf:42:b0:23:a5:
82:9f:f1:f7:09:9c:bb:d3:db:fe:e2:32:e8:d9:0d:78:72:e5:
6c:e1:e9:0d:6c:98:10:9c:e1:3f:70:13:59:97:fd:dd:13:21:
07:a2:74:82:21:26:5c:f8:68:35:56:7a:d1:80:17:3d:fc:9b:
f8:7e:cc:18:b3:f7:87:6a:16:44:03:9d:34:36:67:f4:1a:d1:
4b:6d:db:2f:63:67:b7:3a:ee:61:ac:6e:30:c8:57:4e:43:9c:
22:c6:d6:30:76:70:ef:84:1f:87:8f:79:ca:d8:c3:a6:61:ab:
ce:6f:4a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:51:06 2025 by rpki-client