Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a35aeda-34df-3b1f-b23b-f7e6922902e4.roa
File: 4a35aeda-34df-3b1f-b23b-f7e6922902e4.roa (raw, json)
Hash identifier: Hrj4mOBBre7kWFcqWn36NvceHj2dlmAfB6bO2c3Ws+0=
Subject key identifier: 22:B8:74:91:20:C0:F0:84:9F:CC:D3:E3:A8:E5:8E:D5:2F:57:14:16
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848C9B0DF8F380FD4C3CF217C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a35aeda-34df-3b1f-b23b-f7e6922902e4.roa
Signing time: Thu 06 Feb 2025 02:00:39 +0000
ROA not before: Thu 06 Feb 2025 02:00:39 +0000
ROA not after: Wed 07 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.218.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c9:b0:df:8f:38:0f:d4:c3:cf:21:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 6 02:00:39 2025 GMT
Not After : May 7 01:00:39 2025 GMT
Subject: CN=87697412-d4ac-439d-b6fb-8e97545f89f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:b7:27:30:bb:68:07:84:eb:33:24:53:89:
ae:14:f0:c9:76:70:2e:80:44:e4:73:2d:90:d5:61:
85:b8:ce:eb:d4:a2:7d:99:9e:43:fa:ca:1c:a1:62:
a3:fc:ba:13:61:66:60:db:ca:d4:07:c6:49:f8:8b:
e2:dc:f4:40:25:6f:79:9c:f6:7d:5b:47:02:16:2b:
04:9f:97:c6:d2:57:5f:08:27:b0:86:93:af:a8:02:
13:fd:d6:75:84:d1:33:83:9f:6b:d4:7d:2f:55:36:
12:4f:ae:07:1a:19:4e:18:d0:74:41:a9:f6:b9:c8:
8e:bc:c1:5c:34:06:60:61:3a:cb:44:f1:39:76:ab:
7b:10:0a:f5:df:f9:b7:2a:78:70:f2:ca:ef:9b:1b:
55:70:5c:18:26:44:29:a2:26:8b:7d:d2:b2:fe:fe:
80:8a:26:cd:68:1a:cc:f8:a0:49:60:aa:ae:c5:e6:
da:a2:b6:e1:8b:95:f1:77:a5:c1:a0:cd:bc:01:f5:
e8:07:17:75:b8:07:12:e4:0a:47:51:61:db:0f:46:
9a:95:63:f9:69:92:ea:c5:68:12:c6:6c:51:9d:5b:
dc:e1:ec:77:77:93:71:c1:a0:eb:7f:f9:01:2d:94:
e3:41:47:c3:33:6d:15:2d:df:5f:41:77:95:23:32:
74:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B8:74:91:20:C0:F0:84:9F:CC:D3:E3:A8:E5:8E:D5:2F:57:14:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a35aeda-34df-3b1f-b23b-f7e6922902e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.218.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:ba:8e:41:81:27:ab:1e:64:08:f7:55:45:fd:a6:ee:cd:7c:
f1:07:55:25:f1:1e:0d:b7:17:7f:bd:34:36:ee:36:16:2f:16:
b0:68:ad:32:0a:48:68:79:ab:cf:a9:18:8c:3f:c5:88:fd:0e:
06:23:f8:4a:f6:85:20:d4:bb:22:a4:a3:29:c1:11:f1:4b:45:
68:7b:57:5c:d4:ef:34:5a:76:b8:8b:09:0d:f6:cd:bd:94:80:
85:d6:0a:9e:af:e4:de:f0:ee:11:2f:4f:a6:da:f0:be:c0:b4:
28:49:85:00:72:13:64:4e:39:46:3e:4a:0b:b7:42:48:63:0e:
02:51:0e:36:a1:ae:fd:d6:02:e8:58:60:43:08:e0:6a:e4:7c:
cf:6e:0d:47:56:90:57:90:ce:ed:03:93:d7:f4:0d:da:fa:75:
75:21:9b:1c:b2:24:b1:d8:14:f5:af:47:b3:55:6d:19:06:77:
a2:11:0a:e8:d8:85:80:e5:f7:03:3b:a5:54:21:ef:6c:f7:3d:
ab:46:0a:0a:17:34:8c:36:b8:94:70:61:28:47:3d:09:f7:92:
b6:88:42:ed:d4:13:56:a4:24:6c:3b:b8:66:ee:f5:59:00:56:
15:f6:84:d5:fd:db:7a:77:10:c1:00:26:ca:89:6e:2c:da:91:
c9:f3:50:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:26 2025 by rpki-client