Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa
File: 3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa (raw, json)
Hash identifier: SJcEOYbwH97xHT8tjrt8lNCnJIhmudcCXBD7ln8lV7c=
Subject key identifier: B1:B6:29:16:DB:29:A1:7A:31:83:60:CC:A4:7A:3B:07:0E:F9:A7:6A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB65DB848E835C531D1A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.54.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:65:db:84:8e:83:5c:53:1d:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=ad2fe5aa-fdf3-4dc0-8038-5695f6553c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:ef:5e:72:b9:9f:a7:80:20:df:e2:93:f8:
18:40:c0:44:62:e3:39:5d:75:49:8e:d3:56:ab:14:
5b:95:b6:78:6b:d9:33:81:67:ce:a8:45:72:b3:b9:
87:34:cc:20:05:82:72:57:0b:5e:ce:f4:2d:79:90:
f3:05:18:34:58:41:2e:8f:f3:63:55:9c:b0:37:c2:
99:52:e4:fe:53:81:5c:d4:e1:7b:da:5a:46:e4:b4:
41:96:84:cb:d2:da:1c:48:19:15:d0:e3:98:ac:3c:
d2:58:81:ec:43:0a:aa:a4:5d:bb:0c:49:39:36:eb:
a6:fc:b3:f3:91:95:4b:db:ea:3d:13:b3:ce:73:51:
27:d3:56:62:a5:de:14:70:f5:e5:17:18:4a:a5:39:
50:1d:63:5b:69:b2:d7:fd:3e:d4:0c:8b:df:53:a2:
d6:41:0e:9e:b6:bc:5f:6c:ee:f9:63:dc:fa:04:32:
b7:a7:ce:25:23:e4:a4:db:55:48:78:38:61:2f:93:
32:6e:ee:b3:99:1a:71:70:3d:32:5f:5e:52:15:9b:
2e:76:28:37:23:41:57:8b:f4:84:6a:28:e8:02:4f:
95:a2:c2:11:9c:8d:db:1a:bb:3f:65:60:89:5d:89:
ad:e2:f2:8d:76:52:05:ac:66:fd:33:bf:75:9f:84:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:29:16:DB:29:A1:7A:31:83:60:CC:A4:7A:3B:07:0E:F9:A7:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f42c7b1-65b9-3cfa-af8f-67910801f49e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.54.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:91:df:07:dc:7a:5b:38:35:9b:9f:cf:58:cb:a8:a3:4a:70:
28:3f:e3:1f:b0:8b:bc:f5:fb:6a:06:7f:aa:8a:8f:be:b0:d5:
ad:b6:1c:48:73:7b:2c:29:55:80:1e:16:22:91:ba:d4:be:9a:
0c:32:a6:41:75:0c:35:2b:86:02:07:09:f5:7c:a0:36:14:ec:
34:73:53:a7:3b:8a:20:0d:3e:d7:77:01:d9:5f:97:cc:e3:a7:
0e:19:25:fe:ab:7b:a8:c5:36:ed:49:e5:c5:37:ba:dd:8f:c5:
8d:6f:2f:83:f5:c7:7e:09:47:e6:d9:7d:1b:52:d6:ad:f6:e4:
e9:24:82:59:f3:6b:bb:04:20:15:e4:62:bd:b4:9f:d3:4f:25:
cf:36:74:fb:bc:72:2c:cc:be:c2:66:e1:72:51:96:1e:da:95:
30:dc:c5:d4:a0:64:d8:9b:d8:1b:4a:77:06:da:f7:f2:85:c2:
ff:b7:fb:fa:48:44:d4:da:1e:5a:5b:fa:fa:e0:3b:1d:91:51:
e1:50:ad:4b:74:54:08:69:01:20:58:7a:b0:55:f4:18:a3:34:
d4:7e:e2:3c:87:66:6c:55:2d:4c:28:9e:8f:ca:93:a4:8a:fe:
bf:e1:db:d5:90:26:5b:00:da:84:44:27:e0:77:65:d1:16:4b:
a6:2d:b4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:55:55 2025 by rpki-client