Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa
File: 4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa (raw, json)
Hash identifier: mWiCJ1mBl3CIedrrRGEFcCY0CsoeLU5BPeD+0VyYtv0=
Subject key identifier: 49:46:62:07:08:DF:35:6B:58:2C:4E:78:72:53:5B:1F:E1:1C:17:84
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848CC7BA39F02E68B08D062F680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.222.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:a3:9f:02:e6:8b:08:d0:62:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=8407de92-973f-4987-afe8-5b31445878bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:58:55:e5:3e:b2:55:61:18:34:a4:7a:e2:
9c:0c:05:6c:19:66:6f:f1:d4:49:f3:43:a8:a1:ac:
34:6e:f7:0a:67:da:dc:8b:82:5e:3a:be:d5:a5:14:
62:f4:20:0b:91:b5:e4:e9:87:d4:43:6b:bf:92:17:
d8:21:f5:e5:35:b7:df:c4:5e:02:a4:dc:40:f6:79:
d9:25:95:fd:b2:bf:af:46:6f:39:47:d0:44:72:ce:
23:c9:2b:9e:80:c4:6f:3c:43:d1:2c:ff:7c:82:5b:
68:fe:dd:65:c9:bd:04:7c:1b:b2:97:25:b7:02:79:
5e:c5:5a:98:1b:4b:c7:58:2b:08:99:b7:bd:d2:85:
7a:61:e8:60:80:ee:98:d4:18:11:8e:dc:33:52:6f:
92:30:6b:9b:85:f0:e3:0f:d3:94:66:18:ea:4c:9d:
d8:15:90:fe:2c:ed:a0:53:17:d9:dc:da:c0:97:b3:
91:4c:1c:65:57:74:f7:68:be:ea:c7:17:76:fb:db:
88:8e:da:e9:94:03:e7:a4:0d:15:49:ab:7e:6f:50:
f9:9d:a3:2a:c0:51:59:76:45:c2:18:df:e6:f6:e0:
3b:81:7b:ad:90:52:fc:07:73:3b:d6:34:81:68:10:
0c:fd:da:f6:65:8b:0f:05:8a:10:61:fe:16:34:9c:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:62:07:08:DF:35:6B:58:2C:4E:78:72:53:5B:1F:E1:1C:17:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4158eb9c-2530-305b-8a4a-fc258ba11d5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.222.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c3:69:6f:9d:fb:cf:28:f4:85:d2:6c:28:16:dd:25:26:de:
30:6d:1b:31:b5:69:b5:76:18:cb:f9:06:02:8e:0c:cd:c5:8c:
00:32:a0:bd:ec:9d:23:6c:6f:b0:b6:ed:3a:a0:8d:45:24:ba:
85:ee:0e:27:b0:e1:b4:16:8a:94:3d:57:10:4b:05:19:8a:1e:
7c:39:1b:ea:9b:d0:cf:12:69:ad:4a:12:a8:9f:ae:4f:be:d8:
23:7f:cd:ef:a1:c1:5f:42:04:36:51:f0:d4:16:95:ec:13:4b:
55:a3:8f:84:62:1c:f1:ed:1f:8f:48:f2:b3:30:b1:5d:d2:c8:
83:d2:5c:ff:eb:57:ab:c3:61:8a:cd:23:f2:29:75:ca:11:8c:
ef:26:18:fc:0a:72:19:d6:c8:cf:fd:e6:68:d4:b1:76:ea:5d:
8d:f2:de:df:01:84:fd:27:7e:dc:b6:2c:cd:d3:22:70:72:70:
0f:86:b7:da:02:94:a0:40:a1:27:a4:b6:bd:59:fb:ab:bd:ba:
1b:94:43:44:93:93:12:7a:77:89:9a:30:30:d5:95:16:ec:2d:
ae:e1:26:ec:8a:c3:9d:0f:59:a9:66:b9:8d:97:92:56:a5:ed:
eb:63:a8:4d:b1:5c:05:78:02:d5:39:5e:5c:85:46:29:c4:8d:
f0:ff:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:36 2025 by rpki-client