Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dfef849-a3fe-3119-8d7d-c2f6a4d1923b.roa
File: 3dfef849-a3fe-3119-8d7d-c2f6a4d1923b.roa (raw, json)
Hash identifier: RaZxUPgigtEbAwb6IGr5qxbTdHEg5g5o/JWkWJqcLNo=
Subject key identifier: B4:44:4A:4F:DE:14:CC:D9:C2:AB:98:27:46:B4:58:85:5D:A0:FE:B4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BDA02F50DAE24A110300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dfef849-a3fe-3119-8d7d-c2f6a4d1923b.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.212.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:bd:a0:2f:50:da:e2:4a:11:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=46ab650c-27f2-47b2-aad5-1dde8e2d4b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bb:f8:e9:bf:e5:e3:4f:13:b6:d6:80:71:f1:
45:b8:f7:3f:79:bc:dd:0b:76:30:a4:e6:14:76:c9:
f4:a3:9f:9a:e9:f1:d6:5f:2c:82:50:df:50:da:c3:
ba:69:b5:35:c2:de:53:f0:c1:8f:dd:c5:8d:da:e4:
fb:54:62:2c:dd:b3:c0:8f:13:2a:89:ae:68:4f:a6:
64:d3:d8:56:29:f7:33:9c:d3:67:42:0a:79:8b:e2:
c2:88:96:6a:10:e5:1e:0b:69:3e:18:8d:eb:03:cc:
11:7e:5b:d8:0e:3a:30:3e:46:2e:7d:9e:ff:ad:9a:
40:c7:fd:8d:77:26:83:62:10:28:aa:cf:9e:95:3b:
91:d3:6c:9e:8e:26:6f:e3:2d:3a:79:d4:0a:8f:a5:
95:bb:76:f0:66:a0:8a:59:67:4e:2c:94:75:c9:a8:
c8:88:ea:99:ff:ce:31:43:ad:73:d7:a4:a9:f3:9c:
b8:5d:1e:34:60:88:49:5a:05:8a:36:e2:2e:49:8f:
bc:6f:6f:3b:20:c7:87:02:90:2b:db:7c:34:27:66:
8f:ee:ac:52:91:25:35:ce:26:3b:8c:37:c6:50:1f:
3e:14:d5:fe:21:03:0f:25:81:8d:cf:17:a5:63:33:
f8:d3:4f:48:56:af:1d:51:c5:31:05:e6:3c:91:31:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:44:4A:4F:DE:14:CC:D9:C2:AB:98:27:46:B4:58:85:5D:A0:FE:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3dfef849-a3fe-3119-8d7d-c2f6a4d1923b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.212.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:db:c3:9b:4c:8e:ac:3c:dd:6b:84:a2:d1:24:78:08:a9:fe:
d7:79:43:57:df:8b:06:c1:91:45:37:a0:ba:c7:64:31:73:82:
73:8f:17:cd:99:ec:ff:4c:f2:ec:3b:f0:93:4c:05:db:0c:dc:
a3:84:13:b6:13:7c:fe:7f:cc:a9:49:95:51:08:61:21:2a:bd:
34:f6:de:57:64:ab:59:5a:f9:f2:f3:f9:8e:7c:af:84:0a:a5:
ba:3c:3d:81:43:30:8f:9a:f8:ce:59:01:a9:5d:f9:aa:45:b0:
4d:df:a1:34:10:b4:22:98:3e:9d:4c:8f:3a:5a:bb:ea:61:a0:
f1:ec:ae:97:f4:d0:df:e0:07:fc:64:33:6e:e1:b1:1c:c6:25:
aa:c4:63:a8:6a:32:e3:65:40:f2:33:3d:99:e3:ab:aa:35:7a:
ca:c7:44:65:0d:f9:b8:8b:72:3f:0a:e6:aa:46:8f:cd:70:be:
2c:af:ae:9c:b7:d5:51:d0:7f:8d:95:9d:fb:f9:da:d5:64:63:
1e:33:28:30:d8:89:52:63:fe:71:f3:cf:a2:9a:9f:00:fb:3d:
fc:5b:a4:91:cf:60:57:40:01:73:14:5d:d0:84:38:8a:e8:89:
2e:d9:02:4d:39:4f:a3:0f:57:ba:8c:a4:f2:de:c1:0d:26:c0:
47:60:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:07:04 2025 by rpki-client