Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c34e6e1-e474-3b8c-b7b9-cf047e6d8dc8.roa
File: 7c34e6e1-e474-3b8c-b7b9-cf047e6d8dc8.roa (raw, json)
Hash identifier: WrCksNUZc+crinGAEbri59CZvf41+U2ZCOt0w5nS6ow=
Subject key identifier: 88:D6:7A:B1:DA:B0:6E:B6:B5:39:AB:32:B3:D3:65:85:57:06:79:67
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848B8F0D89E6F37A724E2F015E8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c34e6e1-e474-3b8c-b7b9-cf047e6d8dc8.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.207.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:d8:9e:6f:37:a7:24:e2:f0:15:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=0667aae3-e019-411d-8b52-3e1eea8aef08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:5b:62:aa:19:68:6f:d6:c7:f1:b5:0e:43:
2f:63:c2:79:3a:d9:3f:e9:dd:a3:fc:69:3e:67:28:
42:64:0f:f5:6a:3e:1b:38:31:ec:36:05:a0:6b:86:
28:2e:5e:5b:ff:10:ae:09:f4:a4:77:43:54:80:c7:
bb:38:3b:cd:0b:9a:02:ef:e1:44:1d:da:54:bb:95:
10:6b:b8:c7:f1:84:c1:dd:6d:ca:6c:e0:de:42:74:
89:68:6e:51:0f:5a:4e:b7:56:f0:60:e5:de:22:c0:
1b:72:81:80:9b:8b:17:e9:59:f6:1d:55:aa:a8:b9:
d1:63:71:9b:ea:6d:f9:1a:a1:ce:ea:24:96:bc:99:
7e:61:02:43:67:b2:f5:23:6b:51:72:eb:72:06:d0:
30:1e:91:29:9d:2c:1b:2a:61:dd:67:6d:cb:11:31:
49:fa:6e:37:7f:e7:93:a3:c4:89:09:8c:04:f5:fe:
6c:8f:16:fa:6f:7e:ee:ec:1e:10:63:39:01:62:07:
66:54:d9:85:e1:d6:62:76:2a:4c:99:4d:7e:ea:99:
59:c4:c2:6f:7b:cc:2b:81:e7:22:0b:5d:42:26:f1:
2a:9d:d9:00:df:b7:b0:4f:d3:95:00:de:b8:40:87:
40:66:f0:42:fa:0d:86:04:70:61:1f:f7:a3:5b:d4:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D6:7A:B1:DA:B0:6E:B6:B5:39:AB:32:B3:D3:65:85:57:06:79:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c34e6e1-e474-3b8c-b7b9-cf047e6d8dc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.207.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:21:3d:a6:e7:ce:5f:1e:42:79:80:fb:a4:60:f3:86:e8:a5:
ba:bb:c9:ab:e4:28:2c:fd:a9:05:34:a4:f5:44:39:c0:e0:d0:
13:fa:ae:b2:ed:57:6c:87:12:e5:74:65:88:73:b5:11:d7:f7:
e4:cb:2b:96:45:01:f6:9e:82:fd:61:b4:ac:8f:75:0c:1d:38:
82:f0:ca:15:be:89:fa:d1:ac:32:52:55:42:47:02:19:59:d8:
4a:21:16:e3:23:dd:86:c1:32:8c:5b:26:2b:42:e1:b1:5b:73:
0d:f4:3b:47:dd:1b:5b:57:75:1a:d2:55:6c:60:1c:8b:3e:f2:
5e:70:fe:c4:f3:68:dc:b6:ee:71:79:52:fd:03:e1:5e:ca:0b:
0a:a3:b9:4b:af:d8:e4:72:77:0f:f4:78:66:f5:38:03:c8:26:
32:8f:d2:ae:82:ab:6d:f6:57:c5:7e:94:63:49:77:09:d5:96:
b1:34:80:bb:a9:c8:8a:2a:6d:48:a6:9e:37:77:62:ec:bf:2d:
71:62:ba:bb:a6:c8:36:d7:08:2a:46:b0:8f:f9:34:87:dd:33:
86:e1:4e:41:bb:40:11:cc:59:14:38:2c:3f:01:81:aa:a3:70:
54:05:8a:f4:8f:0d:1c:7a:3c:d8:5f:e2:38:b4:3a:a1:6a:bc:
34:c5:1a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:28 2025 by rpki-client