Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55b752ec-f9b7-3078-8e4f-74d5c77e4392.roa
File: 55b752ec-f9b7-3078-8e4f-74d5c77e4392.roa (raw, json)
Hash identifier: 9+iTpNhPyRzv42A3CiJJmjfGuxEb0UdGgD6ZpQxIqIk=
Subject key identifier: C4:17:FB:0E:AA:3A:5C:2F:A8:B8:77:FF:EC:2C:FC:D4:17:C2:DE:C3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340B57A26A5B234AD133D60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55b752ec-f9b7-3078-8e4f-74d5c77e4392.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.203.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b5:7a:26:a5:b2:34:ad:13:3d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=a7ef607a-cfc3-46a7-a0c4-8526eba68b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:73:da:f4:e5:4a:98:0d:7d:08:70:a3:78:
d8:6e:b8:95:05:20:72:23:cd:5a:0f:ba:04:f5:8f:
b7:0e:00:2e:fb:25:66:07:3b:0f:6d:34:09:21:62:
83:fa:2c:da:9a:85:7c:a0:b4:3f:fc:7c:bb:28:4a:
6a:30:6e:09:07:50:b3:f7:9b:86:bf:98:20:f1:b5:
98:6a:34:cd:27:ad:f6:bb:8e:96:28:94:38:2b:81:
e2:4d:38:35:53:95:3c:25:68:a3:43:3c:fa:77:7e:
ed:5d:6d:ca:2c:77:e8:fd:e7:73:6e:92:e0:52:ff:
ea:81:6c:8c:4a:d3:fb:98:d4:a3:93:03:c8:92:1f:
44:f8:03:c5:16:58:b4:0f:f1:c2:e7:86:d3:0e:e3:
ab:4d:2b:cd:c9:67:2f:f1:4f:cc:9b:d3:2d:82:ca:
d4:49:88:a0:22:9a:57:d9:06:e0:81:93:5d:3b:df:
e5:71:bf:9c:c9:ea:fc:ae:18:6e:1d:92:0a:08:f6:
fc:79:5f:14:77:99:c3:60:7a:95:b4:89:30:82:66:
f3:5c:62:8a:32:9f:21:2f:c6:61:f5:ae:b1:77:64:
e3:63:f1:de:a3:0c:e1:1b:59:f4:64:47:dd:2c:dc:
94:45:af:48:6b:9b:de:d4:d2:64:3d:75:42:32:13:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:17:FB:0E:AA:3A:5C:2F:A8:B8:77:FF:EC:2C:FC:D4:17:C2:DE:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/55b752ec-f9b7-3078-8e4f-74d5c77e4392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:29:5a:23:e1:92:15:0a:6c:bc:74:72:ee:df:c2:19:52:73:
a8:e2:4e:3e:b0:87:31:51:4a:2f:0b:b6:a0:31:8c:d0:96:20:
41:b1:15:f4:71:2b:cf:59:be:77:0f:43:83:45:f2:91:ba:72:
9d:cb:98:08:6b:75:82:4d:86:b6:34:50:fe:ed:da:d1:1e:4d:
cc:ac:eb:3b:2d:4a:49:89:46:a9:5a:11:e7:e0:3c:77:2c:ff:
4e:b2:ef:ad:a6:d1:ea:7e:41:60:f1:2b:2f:61:de:c3:9c:d1:
48:8c:f2:d7:07:88:dd:7a:29:b2:9f:a2:b2:47:39:e1:2b:2a:
04:55:da:f0:bf:a5:2b:b1:32:88:93:b8:da:f9:4d:11:18:a2:
d4:e8:54:a6:3a:96:6e:92:36:9a:49:81:d9:bc:61:40:c7:98:
82:e1:52:0e:f4:32:24:d3:cb:05:62:7b:76:d7:a8:1b:20:a9:
5d:c1:58:51:bf:86:4b:e0:cd:23:9c:43:b7:6c:68:21:47:5b:
2a:4a:8e:da:96:f8:1b:a1:d5:5e:ae:f1:31:c6:3e:28:7e:70:
8c:fe:36:03:46:87:5a:4e:f8:dc:d9:ad:87:f9:a5:33:e0:c9:
18:bb:fa:e4:68:64:63:e8:e1:c9:70:8c:42:d9:49:45:e5:8c:
9e:f2:7b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:41 2025 by rpki-client