Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e21984-c91b-3d06-b19a-200a388067cd.roa
File: 93e21984-c91b-3d06-b19a-200a388067cd.roa (raw, json)
Hash identifier: FKuwtaT72iL7PZ/VqsN4tKyq/X66iO8VCWQ+meZAT3E=
Subject key identifier: 2B:A2:CD:D9:05:F9:CC:29:2C:03:3B:33:78:C4:92:4A:6D:7E:F5:9D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB48A9CB219E359F722640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e21984-c91b-3d06-b19a-200a388067cd.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.43.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:48:a9:cb:21:9e:35:9f:72:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=5aa06f87-31de-4383-a8c0-bd457fd4ca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:7b:a4:da:e4:a7:6e:a7:78:d3:6a:2f:27:
62:04:a1:ec:00:b9:2c:2b:90:bc:0d:f9:e8:da:dd:
04:f6:e5:bc:71:61:67:a6:6c:04:be:c3:96:30:b8:
b2:03:59:09:32:38:ab:c6:87:b2:7e:a0:f8:13:5a:
bc:4a:c1:3e:0b:4e:15:0e:0b:4a:3a:25:82:7d:38:
a8:8d:29:a9:22:86:bc:ed:8c:47:ee:04:35:e7:ba:
d0:6c:8c:56:c2:f7:ab:16:63:95:94:76:e3:43:8b:
6d:9f:83:bd:1e:28:fe:5e:09:3b:88:f3:38:e2:24:
11:04:8f:82:1f:0b:3a:09:b2:52:10:c2:89:e4:d1:
f9:1a:15:7f:2b:e4:75:27:e8:ae:7f:86:c5:de:8e:
5f:b2:25:b4:61:d8:5d:a7:11:0d:14:c6:57:95:33:
a1:e0:e3:12:92:58:31:28:dd:7a:3e:32:e1:b9:08:
37:a9:bd:38:55:86:16:77:b0:d7:3f:6e:cb:58:0e:
01:d3:2c:29:e8:47:c0:ae:70:b3:3d:0a:1c:f0:7e:
2e:d6:24:c5:ee:55:8c:69:d4:71:29:25:40:34:a4:
b9:11:66:3e:a9:7b:a3:97:2e:99:da:6e:ed:fa:69:
af:bb:d2:1b:ea:e1:46:93:23:c0:80:b4:c3:5b:f3:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A2:CD:D9:05:F9:CC:29:2C:03:3B:33:78:C4:92:4A:6D:7E:F5:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93e21984-c91b-3d06-b19a-200a388067cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:99:c9:00:0e:d3:f9:1e:ce:43:bc:c5:80:b1:64:02:0d:c9:
bb:e5:66:54:24:c7:b0:d9:47:8e:24:91:a9:dc:b5:8e:9c:2b:
d8:77:ac:c4:b2:92:a5:47:93:b1:e1:6a:27:ad:14:8d:21:87:
85:0a:50:8a:72:8d:c2:07:d2:de:41:fd:3c:83:ca:d8:02:06:
84:0e:75:3f:82:61:cc:45:2d:c5:72:4a:5f:1b:74:03:9c:9c:
dc:00:f9:bd:c5:ba:bc:15:44:83:93:04:99:34:10:12:47:8d:
15:87:71:49:0f:6c:bd:41:40:fe:1a:fe:08:4c:d4:8e:aa:6a:
ec:ed:16:d0:48:57:0b:40:9a:9b:63:d6:22:14:18:46:f1:e8:
d4:4b:aa:b6:f0:d0:79:f6:13:c4:da:ff:33:20:ae:d6:9b:cf:
ea:21:b4:6e:e6:10:5b:6d:e3:c3:0c:56:20:ca:c4:08:34:ce:
69:a1:9c:5f:db:7d:43:d1:06:26:e9:47:f9:63:10:40:08:1e:
42:d0:9c:77:97:e1:20:17:74:3a:61:4b:36:94:8b:24:62:a5:
8b:6d:58:d3:81:26:8c:dc:2c:b8:36:be:d5:4e:97:f2:c1:d3:
0a:3d:a7:bb:f4:8d:36:66:83:af:74:d0:cf:37:89:c2:e3:7c:
dd:d4:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:19 2025 by rpki-client