Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b70b747b-0b62-3611-8be3-e5cd6b066b9c.roa
File: b70b747b-0b62-3611-8be3-e5cd6b066b9c.roa (raw, json)
Hash identifier: 2e7Adosj4p/XiaE1Fjjdmc8AOvuSNM0+Jw5e3j4CBco=
Subject key identifier: E0:E6:9D:CD:7F:D4:5F:5B:F0:D7:61:35:75:3B:39:F4:FD:58:32:B0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848854B5C46E997397860751B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b70b747b-0b62-3611-8be3-e5cd6b066b9c.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.53.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:5c:46:e9:97:39:78:60:75:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=d8cbc807-e584-41dc-b0a4-ea4ef856738d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:64:7e:09:58:bc:f7:98:27:3b:9d:e6:42:
1f:7d:de:8d:97:99:be:d1:61:fe:ef:ad:ce:a4:cf:
0a:a0:6e:44:10:b7:67:42:65:8f:79:cf:b9:18:79:
51:4d:fe:5f:51:88:08:ed:da:67:2b:54:52:74:6b:
10:d5:c0:c3:72:b1:33:ae:3f:07:f8:04:db:fc:84:
0a:7a:09:16:e0:b0:08:ee:6a:50:44:ea:2e:6c:28:
01:a1:b7:20:6d:14:f3:de:22:d0:71:f8:55:d2:a5:
69:cd:fa:a9:d6:de:9d:f7:b3:0e:a6:70:36:8e:68:
ef:3a:ce:c1:ed:a3:55:3e:e8:fb:ca:4a:32:1f:02:
03:e8:06:f5:9a:7f:27:66:20:bb:44:83:12:a8:2d:
d5:c5:10:f2:2e:92:fc:20:95:c7:82:8a:43:12:0e:
e9:b1:1e:02:57:69:22:f7:59:35:f5:d4:dc:12:18:
21:54:74:ec:53:80:3a:fc:ab:e6:1f:a7:0e:84:0c:
7a:9d:fe:8c:81:c0:31:2b:f8:6c:c2:f5:80:eb:04:
77:35:3e:7a:69:df:fc:9c:7a:69:44:64:04:70:c0:
f4:43:46:0a:b3:cd:d4:23:27:3f:d4:64:74:51:e7:
8b:8e:6d:02:8d:00:8b:6e:a9:2d:84:83:2b:91:91:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:9D:CD:7F:D4:5F:5B:F0:D7:61:35:75:3B:39:F4:FD:58:32:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b70b747b-0b62-3611-8be3-e5cd6b066b9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.53.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:84:3b:02:bd:d8:2e:bf:71:1f:c1:8f:25:ff:0d:5b:67:c1:
00:8f:3f:4b:2f:dc:f2:12:85:39:f4:e8:e3:03:4c:40:fe:3d:
7a:99:2d:d2:36:82:3d:3a:41:e4:5d:6c:53:38:da:b7:f4:e6:
dd:f4:0c:f0:f8:47:28:12:20:e4:10:8f:82:92:9a:70:eb:65:
ea:49:c3:ff:54:6f:0f:4f:21:74:3e:cd:32:98:ef:8e:c6:e4:
9a:57:27:60:1a:fa:fb:ba:83:fb:90:2e:db:f2:e9:61:10:3a:
22:88:0e:63:e3:ce:7c:34:6f:f3:a1:9a:d1:3d:de:1b:39:64:
a3:21:6e:cc:8d:75:20:03:a0:b7:68:60:e6:b7:1d:a5:45:c3:
c5:95:58:6f:4e:70:65:76:d8:be:ce:90:b5:bb:b3:bb:cf:0a:
82:b8:4e:ca:53:0f:92:e2:8c:79:3d:49:8d:dc:93:30:3c:40:
1c:99:cc:13:30:4f:d7:c4:33:8a:25:f2:41:c7:35:14:b7:54:
a5:3e:3e:38:03:2c:f4:cc:10:06:d3:1f:32:82:42:a0:46:f5:
4c:82:e8:13:ef:60:26:2f:3f:38:bc:65:3f:4e:41:68:04:5b:
5f:2b:7c:4e:0b:ad:c2:04:6a:1f:93:ad:dd:d2:90:71:6a:60:
e5:23:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:33 2025 by rpki-client