Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6805a241-8581-33bc-8654-fbcf8c9b56e5.roa
File: 6805a241-8581-33bc-8654-fbcf8c9b56e5.roa (raw, json)
Hash identifier: 7E4a9R1530ty92r4dMLhV/ivCh4ZKiQU3qMTu6J8qqU=
Subject key identifier: 20:C5:B9:D7:52:E5:56:6E:FE:C8:00:0C:40:35:24:A6:A9:87:3F:09
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BEAB6B0D28B16BCCC680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6805a241-8581-33bc-8654-fbcf8c9b56e5.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 7713
IP address blocks: 23.216.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:be:ab:6b:0d:28:b1:6b:cc:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=f0f3df32-6416-4cbd-bfdc-408f0400d4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:6c:f3:aa:d4:d3:89:9e:b8:3c:80:98:88:
13:e6:7c:b2:0f:02:8f:7e:b6:da:d4:52:63:ab:04:
e0:ba:0b:56:a1:c3:b5:eb:70:59:8d:9f:30:4c:18:
b0:6f:05:94:e8:07:f0:d7:c1:3d:43:6c:9f:b0:6a:
eb:47:1f:e6:e6:17:92:8b:e6:3f:03:46:c3:66:bb:
81:6a:69:16:71:72:75:09:62:02:d7:3a:d0:d0:cc:
08:d2:e8:0f:6a:ca:f6:41:30:e9:4d:0d:08:b3:69:
01:af:11:08:bb:50:55:62:7e:f9:57:76:03:79:4c:
22:82:f9:de:7d:08:d7:cd:19:d9:87:8b:4c:d2:e2:
eb:49:1d:82:48:0e:ec:4c:60:0a:7a:c1:80:52:0b:
27:42:be:f4:4e:c7:d9:6d:e5:34:5c:50:fe:19:0a:
81:e6:f3:72:63:a8:32:22:00:81:15:51:28:c1:4c:
03:ae:be:af:72:ae:59:e7:0a:d5:da:94:61:0a:a3:
37:03:ec:d2:01:42:7f:9f:b9:0d:c3:12:d1:2e:82:
2f:29:f1:93:1c:07:fb:6d:d2:43:bb:ab:33:b6:7b:
d9:b0:75:81:4b:22:55:f9:e5:48:68:e9:b3:e9:57:
79:60:91:d1:43:e5:3f:98:fb:ba:db:0c:71:0d:c9:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C5:B9:D7:52:E5:56:6E:FE:C8:00:0C:40:35:24:A6:A9:87:3F:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6805a241-8581-33bc-8654-fbcf8c9b56e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.216.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:cb:ac:0b:44:fe:a4:cc:75:f3:49:2a:a7:f2:92:c6:75:77:
c8:83:2b:d6:a1:b4:55:80:37:d2:82:5c:a6:8d:30:0f:23:1a:
52:83:b8:7f:03:54:e4:1c:99:dc:2a:5d:02:50:f5:4a:41:af:
a5:7b:c1:dd:3d:8f:db:4d:05:04:dc:24:7d:27:0b:a2:30:60:
3c:86:7e:75:15:67:4c:68:fc:5c:85:96:5a:65:39:b6:fd:a0:
9b:12:93:ba:30:30:a5:64:41:35:37:d1:9d:27:ee:e9:e0:98:
80:3d:a0:5a:c5:8c:51:c8:4e:ff:f6:a4:fa:51:b3:53:9f:c3:
be:de:1e:45:07:a9:ae:06:b1:44:97:3d:02:42:b9:17:43:80:
8a:f9:1e:04:80:af:db:2d:28:8c:a6:c3:ce:cc:88:78:ee:1b:
62:7e:d0:27:b4:e2:95:78:2c:76:04:ab:2c:54:8a:bf:b2:c8:
14:eb:03:e8:7a:52:65:04:c7:c6:8e:8b:83:42:a2:71:32:bf:
62:0c:2f:ec:f6:99:32:75:f3:47:03:7f:05:c4:b1:bb:a0:cf:
54:a9:b3:05:a6:fd:89:47:b1:df:c5:3e:9d:5f:09:aa:74:94:
ab:53:2d:cd:03:34:7e:4a:b0:7c:62:36:e0:20:8d:79:36:89:
2d:cc:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:30 2025 by rpki-client