Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bee35-e8bd-318d-a4aa-dc2342819da6.roa
File: 653bee35-e8bd-318d-a4aa-dc2342819da6.roa (raw, json)
Hash identifier: Q+49gYW3E0bjCmUck12ooTFOE6Kkagu4zyVh9uSNEfM=
Subject key identifier: B2:FF:DD:E1:18:49:46:61:B5:B8:33:D8:10:CB:11:D0:9B:8C:84:01
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491D716DA12E04AE570DD42340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bee35-e8bd-318d-a4aa-dc2342819da6.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.211.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:6d:a1:2e:04:ae:57:0d:d4:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=2454b5df-5234-4534-9d22-d65a6436cbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:41:15:5a:e7:21:ff:35:f6:2d:89:00:1e:
bf:97:3c:83:10:fc:9d:37:1c:45:bb:22:51:f2:8b:
38:a2:22:a0:30:97:eb:d7:0b:c2:f8:67:5d:38:1c:
10:53:31:55:3e:69:14:7d:66:78:4c:27:9b:ab:47:
88:d5:e4:70:85:45:db:70:6e:5a:d5:52:35:e5:b0:
bf:37:d8:c2:2b:60:bd:6b:77:cf:f1:55:d3:cf:46:
07:43:9b:33:da:61:08:ed:f2:cd:16:ce:2f:2e:d6:
50:f7:1c:d0:a4:bd:e9:57:73:2c:db:bb:0e:a9:fa:
6c:f3:70:6e:2a:d5:3d:d9:20:65:a0:eb:5b:16:eb:
ba:4e:e1:a7:06:3e:5d:26:fe:36:9f:42:3d:35:b6:
18:48:94:41:d9:9f:84:d6:7d:06:39:88:71:77:b3:
d7:9b:1e:c6:64:0c:81:83:0b:7f:9e:9c:ab:d4:15:
ac:36:3d:e5:31:0d:db:2b:60:79:5f:76:67:03:11:
88:99:5e:e5:ff:35:c8:fa:1d:cc:ec:41:96:d5:2f:
21:a0:1e:62:e7:5b:4e:d3:c8:cf:af:7b:d3:b3:b5:
28:8d:e7:9e:4e:ab:9c:a1:9a:f7:c0:2e:ff:42:3d:
c1:54:8b:9d:0a:b4:b8:0f:ec:71:b8:28:a2:86:8f:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FF:DD:E1:18:49:46:61:B5:B8:33:D8:10:CB:11:D0:9B:8C:84:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/653bee35-e8bd-318d-a4aa-dc2342819da6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.211.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:1d:c1:cf:12:cf:31:b9:92:5a:72:8d:dc:19:65:38:9d:87:
18:0f:37:9a:67:b0:d7:47:2a:a1:87:ad:87:9b:51:a5:f7:69:
08:38:87:69:5a:da:3d:b2:83:9c:47:89:5c:f4:16:65:f2:06:
7a:d8:bd:cc:64:aa:19:b8:4a:a8:b9:b2:34:ac:bd:af:f1:8e:
0c:2b:a6:18:1c:a6:aa:c8:b1:80:c6:5b:0b:09:d7:e5:28:43:
5f:12:28:e6:b0:bc:2f:7b:a0:ca:2d:5a:62:41:d0:67:0e:ff:
f8:1a:a3:ff:79:11:94:f2:e2:8c:81:f2:5c:b7:d4:aa:5a:2e:
71:75:54:98:bd:86:33:6f:77:23:14:06:a3:1b:f8:43:92:2e:
ed:fc:9a:b3:ec:10:04:40:27:9b:62:95:80:72:fd:03:ee:78:
d5:f7:6a:a2:0a:96:33:97:ab:c5:15:f7:13:2b:9d:d7:aa:69:
68:9f:00:12:24:fb:29:12:f5:39:a7:16:c9:8b:e5:cc:5c:54:
27:3f:a0:d7:90:09:1e:f7:31:6f:42:ca:e3:bb:21:d5:f5:e5:
44:38:79:43:06:ff:e3:1e:db:b1:f5:30:b2:9b:86:a0:71:f6:
1f:88:32:84:10:57:c6:99:1a:eb:7e:e6:83:5c:b6:96:ec:f8:
ce:1d:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:28 2025 by rpki-client