Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa
File: b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa (raw, json)
Hash identifier: ArvupWrPn+21zEIZiXuj/yYEtVNJS75Ftf2csxII6VE=
Subject key identifier: 12:4A:F3:B5:B0:AF:E3:E3:5B:0C:00:9F:58:20:D5:79:70:71:F0:4E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848D641174EC680C48E604E21D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.222.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:17:4e:c6:80:c4:8e:60:4e:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=3f771497-e6ec-41eb-8521-6d87fdb979b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:05:82:9b:4b:4b:60:91:b8:89:fb:4c:fe:
93:95:1b:aa:44:39:0d:61:d6:68:a0:0d:ae:63:3a:
89:a2:63:cc:5c:5b:63:a5:57:c2:da:85:df:a0:e8:
d5:bc:6f:ec:65:3c:39:4e:c9:46:80:7d:e3:a6:d4:
cc:0f:75:bb:23:44:65:83:a7:66:30:ec:32:e5:56:
69:e1:0e:fb:84:dc:28:e5:2c:73:15:5b:8f:5c:9a:
de:41:7f:b2:2a:3d:dc:1d:71:6a:96:6a:46:1d:a7:
80:30:76:40:f7:a7:37:d9:92:da:f6:50:1b:03:61:
f8:53:42:a7:6f:9d:63:5a:41:be:f0:0f:e2:c1:fd:
52:63:04:e1:d1:e6:d6:bc:e4:7e:7a:fc:b1:a6:01:
5b:57:28:b1:77:89:80:d5:3d:c5:c5:11:41:4a:9b:
2e:9b:c6:0c:b2:b3:a6:43:41:dd:35:8d:ac:b1:bd:
52:6c:ef:b8:38:e4:b4:e9:a7:b2:cd:31:02:3d:82:
45:ce:08:77:08:9a:c2:27:51:c4:ef:e5:1e:34:40:
6b:3d:46:51:1d:77:01:fb:6f:35:3c:bc:b9:f3:4a:
b4:06:e3:f3:af:ff:59:f1:e8:3d:90:f3:b4:bb:33:
76:10:b7:38:2f:b2:b0:76:70:d7:f3:c3:6a:e2:88:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4A:F3:B5:B0:AF:E3:E3:5B:0C:00:9F:58:20:D5:79:70:71:F0:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0c66cba-a1fa-3feb-9bae-1c6a0d737b2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.222.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:91:78:18:2a:42:94:23:f4:32:f8:f8:a9:cc:04:56:b8:78:
0d:98:11:90:29:c6:f3:b7:f6:c4:d1:ff:dc:66:26:fe:97:e2:
a3:40:33:10:ce:01:f9:fe:41:16:39:ef:02:19:ca:5c:4d:c8:
4b:8d:40:f4:91:9f:86:71:6d:6a:6f:11:71:c1:21:26:95:59:
88:fa:08:d5:96:96:a9:6a:e2:24:d5:ad:ae:4e:fd:1a:89:03:
d9:c3:c1:ba:25:20:15:12:c3:7e:df:9c:0b:20:61:d6:ba:0c:
3d:65:78:4b:a0:59:2c:09:d5:2d:fc:0a:d6:d7:a3:a6:64:41:
e6:23:92:f8:d9:e0:b1:22:82:6a:82:13:07:ba:62:55:97:78:
65:40:c2:9b:8b:a1:e2:d4:ec:1c:62:6e:90:dd:ff:b6:11:ae:
f0:48:0a:1e:e7:29:79:33:8d:ee:fd:05:a5:0f:53:51:b8:b6:
8b:69:99:13:69:c0:f5:00:e9:bc:27:f2:b4:20:32:73:40:b5:
ca:b4:9f:30:4d:b8:92:37:dd:f4:7f:3f:d3:45:59:e3:f7:ad:
2b:0b:82:28:ce:37:44:1d:f2:18:51:c4:7f:62:61:23:01:20:
3c:e3:87:a7:bb:b4:e9:2b:7b:d4:df:05:5f:a9:11:94:3d:0e:
6a:5f:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:29 2025 by rpki-client