Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a772c95d-6970-3714-97dd-9ac3107573d6.roa
File: a772c95d-6970-3714-97dd-9ac3107573d6.roa (raw, json)
Hash identifier: dqfdwwa0e6zYIhPKhdKoMdjeDnzFkj1lP4/D0YFB/Iw=
Subject key identifier: D0:22:C8:A0:75:10:A5:77:FF:4A:82:47:F7:EF:C0:CC:1B:5E:96:77
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB7900DB09E1C1DAC3A6F9
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a772c95d-6970-3714-97dd-9ac3107573d6.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.45.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:79:00:db:09:e1:c1:da:c3:a6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=5c26b4df-8a9c-4c35-bf5f-7afdd4735f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:96:c2:04:27:85:4a:5b:58:30:f4:9e:d3:5a:
77:3d:61:23:70:97:bc:bd:65:39:76:0d:fd:02:50:
fa:6f:2c:32:c1:b4:4f:f7:44:e2:6a:5e:d3:19:c5:
8f:c7:1e:cc:e0:a0:cd:bc:c1:d2:c3:64:fd:1a:44:
da:fd:b2:95:41:dd:6b:ce:0b:2d:1f:ad:0b:f0:29:
23:43:5b:cb:ba:6b:d8:53:d9:5d:06:d3:96:8d:2c:
de:ee:89:a4:07:e8:22:f0:c1:2c:65:9c:f8:60:da:
9f:78:30:9d:b0:4b:d3:9f:40:72:0f:76:15:c7:aa:
fe:67:ca:28:37:6b:13:6c:55:29:c8:73:97:ac:d3:
e3:90:10:3d:5f:de:9a:5d:ff:3e:e5:28:d6:55:93:
64:6c:be:68:c5:cc:19:86:f1:99:97:b0:52:51:f7:
ea:ab:7d:dc:c4:19:29:76:55:41:fa:cc:c1:d2:43:
fa:3e:fd:25:f7:51:18:32:46:55:44:b9:41:de:65:
43:d4:41:25:4d:5f:a8:44:6f:45:f2:4e:37:bc:39:
7e:01:7c:cd:dd:ff:d6:00:b2:3b:bd:e8:a6:47:37:
5d:21:25:5e:4d:c7:de:e0:17:79:a1:83:cf:18:b9:
ec:5a:14:57:4e:ff:82:a9:71:16:04:51:6b:fb:99:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:22:C8:A0:75:10:A5:77:FF:4A:82:47:F7:EF:C0:CC:1B:5E:96:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a772c95d-6970-3714-97dd-9ac3107573d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:f4:cc:31:9b:9e:b1:44:0a:b5:1e:65:2b:a0:c6:e8:b5:92:
b9:06:f7:d4:81:40:1f:68:56:0c:3f:48:c0:5b:c4:36:ec:c2:
92:07:7e:b3:7a:18:e3:ea:f2:8c:de:48:31:3e:10:fc:c7:53:
fc:98:45:ec:06:9f:cf:5a:6b:2e:db:8c:44:ae:57:b0:9c:91:
2a:81:59:db:49:45:a5:89:86:06:6f:95:64:03:2a:15:ba:51:
e7:37:1f:e6:e3:3e:2b:a1:a7:e6:4d:43:f1:92:9a:29:93:29:
97:19:13:a7:fe:37:8c:bf:8a:a6:f0:79:f7:f2:09:80:e4:2b:
68:8d:8a:39:01:14:3b:16:34:43:fb:9e:4a:53:99:71:57:2b:
cc:9e:f1:ac:4c:a8:aa:09:a1:5d:47:2a:2c:db:fc:a9:3e:06:
cb:5c:5d:5c:75:9c:40:37:35:10:39:b2:1b:30:b3:d4:72:10:
5f:fa:0a:58:29:d8:68:68:5c:9e:6e:a4:27:93:92:d9:be:09:
2f:0d:f3:9a:cc:22:b7:f1:52:83:30:48:a4:4d:32:a9:69:f2:
ed:08:34:fa:e5:e2:30:3e:b7:f8:c7:54:71:45:fd:8c:01:2d:
68:fa:81:33:ff:5d:c6:ef:cf:2b:6e:bd:f2:f2:c2:90:8b:a9:
96:6c:33:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:54 2025 by rpki-client