Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9f8b62e-82f8-3233-a426-49d82df0f41f.roa
File: c9f8b62e-82f8-3233-a426-49d82df0f41f.roa (raw, json)
Hash identifier: NGrIHumdecLu/8te5YBqz+BIjOn2/UZ7sCNXjgeP97E=
Subject key identifier: 86:00:77:84:08:88:EC:F5:E5:F9:4F:1E:EB:90:CA:7E:0C:BD:BA:73
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E8F7FCD1790FEC78C5550
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9f8b62e-82f8-3233-a426-49d82df0f41f.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.12.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:8f:7f:cd:17:90:fe:c7:8c:55:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=aa929903-6bb2-452c-9a65-0cbf46b85101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:ca:c9:4e:5e:88:51:ec:44:51:e0:be:43:
3b:02:d8:33:7e:b1:cf:ca:ef:4c:85:69:66:d4:b0:
39:c6:c8:ab:27:7c:cc:9d:96:18:6d:59:70:35:78:
b1:a1:7f:a2:8c:1c:bf:52:41:68:d4:ef:f6:aa:83:
24:eb:df:6e:69:f1:2d:05:05:1d:e2:bb:a6:f4:fb:
79:97:39:ac:40:4d:c6:bd:ba:90:73:f4:b0:e1:d9:
e6:93:7f:13:bc:e4:a0:3d:d4:c6:40:d5:13:d7:67:
97:a7:fa:30:77:6c:62:78:69:28:3b:b8:12:48:34:
8f:a9:51:be:e5:a8:e5:01:3a:42:d1:2a:6d:ff:fa:
8d:f1:fc:94:71:03:26:52:9e:b3:f7:68:d0:39:4e:
d0:c4:db:f4:15:43:20:45:b9:44:c3:e4:79:ae:11:
02:05:97:8e:9c:78:6f:92:83:33:2d:23:88:e0:c0:
04:09:05:aa:de:14:bd:8b:3e:f8:34:93:b9:fa:64:
78:c0:1a:67:1c:db:bd:6f:a9:7f:76:af:a9:39:dd:
f9:7e:5b:e2:10:f4:94:0e:dc:78:a7:16:25:6b:1f:
36:3e:9c:7a:f5:08:aa:c6:84:f3:30:65:f1:57:92:
85:57:c3:ca:a6:93:ae:6b:bd:89:bc:74:1b:40:ec:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:77:84:08:88:EC:F5:E5:F9:4F:1E:EB:90:CA:7E:0C:BD:BA:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9f8b62e-82f8-3233-a426-49d82df0f41f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.12.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:93:7a:76:e0:91:73:47:9a:1b:bd:f8:4b:5e:1d:ff:50:b5:
eb:f8:a8:bd:f0:e0:08:50:bb:8a:bc:aa:58:12:c0:80:62:3b:
a2:66:8f:c8:08:f4:cd:be:09:f9:72:88:54:01:b2:82:81:45:
65:00:33:c5:cb:c6:36:b7:4b:d3:55:82:49:9a:87:b3:f0:44:
52:41:7f:34:67:5a:e3:8d:86:40:6b:83:9e:cc:b9:b2:44:52:
7b:be:db:5c:bc:49:5e:35:ed:c1:21:d6:19:9e:ef:72:89:7d:
d4:1c:a5:94:98:fa:5a:60:a7:3c:5a:09:e7:64:df:16:e2:91:
58:33:b6:31:ce:d9:4d:c8:68:26:c2:b1:83:03:02:3a:61:cb:
fc:eb:e4:1f:45:54:54:b4:93:e1:06:c1:c0:41:4e:73:b1:ba:
5f:ed:d8:bd:96:f4:37:c8:82:68:50:eb:1e:3e:a8:d3:da:73:
d9:25:4a:a7:bf:2a:17:17:06:33:ef:ff:a3:90:19:c1:e2:11:
ed:ae:65:18:37:d9:d1:38:47:75:a0:21:2e:01:0b:04:50:9a:
58:f2:cf:8e:cf:90:c9:21:31:0a:97:51:7f:10:7c:46:e3:da:
8a:7f:c2:e1:73:86:8e:76:4c:45:d5:c5:3c:b1:86:2d:d0:87:
dc:4b:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:29 2025 by rpki-client