Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc77452a-c140-3d3a-bb46-4fd886be6260.roa
File: bc77452a-c140-3d3a-bb46-4fd886be6260.roa (raw, json)
Hash identifier: rAum7sLxUwsdHRAkLwOv6f58cZbB6kp+Lv6DwsJNmB0=
Subject key identifier: 2A:DC:0D:87:D0:EB:16:CE:BB:57:B0:11:AB:43:8C:03:04:8A:D2:E8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A996628C0A3B7CA9BD067500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc77452a-c140-3d3a-bb46-4fd886be6260.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.203.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:62:8c:0a:3b:7c:a9:bd:06:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=1a70795c-ae61-4ecb-b67e-92d0868e52c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:53:48:37:79:8e:e1:56:1d:9a:c7:59:55:4f:
f7:36:16:6f:80:e8:fe:76:5b:a2:f1:f2:f2:78:6e:
27:ed:64:ab:cf:eb:03:53:ec:a7:3c:21:b1:ea:79:
a8:fe:ee:a5:2f:22:92:fc:1a:6d:c9:b4:35:b2:75:
84:0a:86:dc:56:0c:71:40:28:94:f9:b0:a6:ec:11:
5f:f0:39:89:9f:8a:59:f6:2b:7b:3e:3c:5e:4e:66:
30:c4:93:ae:e9:cb:dc:bc:b9:15:6b:04:f0:e3:74:
80:ab:14:5f:03:17:04:12:4c:bf:17:47:ef:18:c7:
68:79:6c:80:8a:3f:31:21:a6:b9:ea:3d:cc:f8:69:
d8:5c:f1:23:56:8a:81:1c:ce:14:78:b5:a1:18:eb:
98:21:7f:ab:8a:4a:1d:29:46:36:e3:7f:96:b1:ce:
bd:53:31:30:66:96:04:ed:08:87:91:cb:d6:cc:51:
d6:df:89:df:62:87:42:94:e1:1f:22:e8:0b:66:c9:
fe:36:82:c9:2b:53:02:59:31:fb:b5:d6:07:8e:c0:
b2:23:e2:51:93:82:27:7d:a5:78:1a:49:9c:9c:38:
e0:1c:50:c7:43:54:9a:36:50:ee:fe:d4:7c:72:c5:
11:7d:23:14:ad:70:ad:f4:27:91:1a:10:81:9d:13:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DC:0D:87:D0:EB:16:CE:BB:57:B0:11:AB:43:8C:03:04:8A:D2:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc77452a-c140-3d3a-bb46-4fd886be6260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:eb:42:c8:be:81:2b:08:4b:e8:1b:01:d3:a1:d4:83:c0:12:
8d:24:68:1f:61:ce:4d:cb:0d:78:22:ea:8d:4e:b1:1c:81:e5:
15:96:9b:b3:41:c8:b8:f4:4e:ac:a5:23:4d:7c:34:c4:76:22:
91:a9:7f:80:c5:8d:63:71:a4:0a:2b:2b:49:33:8f:c2:b2:59:
b2:df:99:ff:47:96:99:3a:b0:9f:f8:26:d4:1b:38:67:04:41:
f1:81:c8:d5:85:d9:d3:84:b3:12:46:6c:99:ea:81:f2:af:42:
2a:db:14:31:8c:35:8e:81:a3:03:13:00:38:0b:80:25:58:23:
fa:a5:e2:e3:2a:6c:b5:5a:68:ff:86:c0:24:9b:e9:13:8d:7c:
9b:58:7e:35:df:19:10:49:c6:50:35:7b:03:e5:bd:2c:49:e1:
8b:64:29:91:c8:b5:d2:9c:11:03:4d:14:6c:16:2b:19:5e:ca:
0f:21:ce:fe:5b:53:13:4d:f4:8b:77:53:13:3e:85:a8:d6:00:
2d:6e:65:41:82:98:90:22:ab:5a:fe:e3:d5:f7:2f:d2:80:da:
e3:ca:ec:bd:a2:0b:c4:38:3f:c0:20:1e:ae:ef:cb:25:50:4c:
b2:52:26:d2:a5:e0:4f:ea:53:da:f1:6b:54:18:b4:4f:f9:9a:
58:68:ee:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:11:10 2025 by rpki-client