Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69b428b1-173d-3bc9-8db4-af3199a7ea8b.roa
File: 69b428b1-173d-3bc9-8db4-af3199a7ea8b.roa (raw, json)
Hash identifier: 8lhtL9G2gukpXeCVCBOq9mNCGmW+FOti3zQyirV/E4A=
Subject key identifier: 46:1E:59:B3:27:35:FD:A1:A8:00:A1:1C:C7:04:68:20:EE:33:1D:46
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BE864328D71F459A24C42480
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69b428b1-173d-3bc9-8db4-af3199a7ea8b.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.217.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:43:28:d7:1f:45:9a:24:c4:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=ac912e68-7e19-466d-bd90-7691a9bf07e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:23:dc:7d:b8:6b:90:d8:c9:a4:bb:0b:3f:
e2:6f:4a:0a:e6:a1:be:f5:ea:17:62:f5:29:7a:69:
f5:26:70:6a:ec:c8:28:8d:ac:f7:19:85:f1:05:34:
c5:45:2e:d9:21:80:6a:3f:ea:26:e8:47:6e:d0:bd:
d4:d8:5b:b4:73:34:d1:36:bf:e8:f2:5e:c5:3e:5a:
aa:7e:a2:96:46:a9:d6:34:51:8d:c7:61:ad:23:17:
c4:87:21:02:8d:af:d0:89:26:80:b8:96:a0:d5:07:
bc:a0:56:99:d0:5d:61:d6:b9:69:46:b5:df:c9:75:
93:3f:d9:9b:b5:75:e2:8c:ed:ad:d3:71:c0:17:ad:
37:0c:80:55:8f:2b:51:15:77:be:93:4c:61:3e:e1:
95:f9:5b:f7:15:f7:74:7b:4c:02:65:1c:3b:23:02:
ff:c6:b7:fc:92:c1:a6:94:89:c0:b3:ea:a0:42:bb:
c3:b1:09:82:90:8e:e4:96:60:3a:13:cc:a1:13:1b:
36:a5:d7:32:a1:90:86:ba:70:50:9d:9e:6b:ae:dd:
62:d5:50:89:77:70:31:3e:b6:89:71:77:69:74:aa:
10:cb:6d:0d:9f:d8:30:d7:27:2d:3f:a5:ba:3a:8b:
8e:dd:5c:95:16:93:9f:48:3e:e3:42:7b:2f:94:4f:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1E:59:B3:27:35:FD:A1:A8:00:A1:1C:C7:04:68:20:EE:33:1D:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69b428b1-173d-3bc9-8db4-af3199a7ea8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:e7:20:96:ba:63:9b:86:d4:7c:bf:5a:7e:f3:7b:a6:87:b8:
48:d3:13:e0:95:bf:f6:4a:b8:07:f0:02:4a:63:6b:de:f6:58:
a6:43:72:7a:d6:12:7c:48:10:c0:7d:dd:1e:99:73:90:10:11:
cf:aa:eb:32:0e:f6:95:27:c0:84:f7:3d:60:68:61:bc:b7:d1:
e0:cf:a2:98:64:43:8d:ac:f2:72:d6:c4:75:92:fc:69:d7:68:
2f:34:17:80:57:fb:7b:42:b9:9f:2e:20:63:54:99:3f:f3:2e:
54:07:e6:98:1d:c2:6e:f9:29:58:10:b3:6e:72:e1:08:ac:ee:
0e:4f:73:9c:07:8b:29:27:27:83:ca:2a:7c:57:b1:af:1d:7f:
f2:65:75:1d:e7:1b:02:11:96:1a:88:f6:45:36:78:6b:62:d6:
14:e4:f3:b3:e6:9f:6d:6c:d2:6b:bc:6c:57:65:9a:15:28:01:
5d:fe:b5:29:74:3e:f2:9a:86:6f:41:34:88:77:22:91:72:c1:
0a:2d:b3:2c:e6:87:d8:65:52:0d:82:65:a6:03:92:aa:b8:3f:
f8:30:cc:6d:89:79:39:7b:ff:d6:25:33:6e:a5:ae:c9:ea:b7:
c4:55:a4:31:82:16:be:5e:30:63:d9:37:c3:d4:fe:1f:ff:06:
93:d3:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:59 2025 by rpki-client