Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7410f7-f8d4-3987-8185-0c7bb437dc98.roa
File: cb7410f7-f8d4-3987-8185-0c7bb437dc98.roa (raw, json)
Hash identifier: BVf3zOrsth01TfADGyFoq53VQsBewHrAzVNfn/KKoeA=
Subject key identifier: 75:07:1F:CE:68:09:25:96:AE:60:25:0B:5A:8F:E2:0A:B8:7C:F5:9F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848D0ABBA4CF525BE5D79083D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7410f7-f8d4-3987-8185-0c7bb437dc98.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.201.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:ba:4c:f5:25:be:5d:79:08:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=ceaa87be-4d0f-484f-a9d4-066521f5e904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:56:a2:3b:88:ef:18:24:ea:22:88:3e:d9:8d:
e8:11:21:05:a2:64:24:e1:ee:0d:6c:87:11:28:72:
79:78:b2:0a:9d:7f:c3:d6:92:d1:b2:f3:85:06:10:
93:c7:f5:35:d4:6e:91:81:e2:d7:2b:48:98:45:4e:
3b:4e:b7:be:49:1c:8d:27:9d:b2:81:71:2a:be:2e:
8b:2e:4c:75:39:c8:47:bf:f6:e2:b8:df:fb:25:ad:
1a:49:a7:c7:97:75:c2:df:cc:31:77:54:69:92:eb:
98:2c:74:d5:54:35:64:9d:be:7e:c1:6c:03:54:51:
01:e2:8f:2e:43:4d:0e:45:d7:f3:d8:96:b5:07:6c:
f7:4b:0a:ae:86:1a:8d:d3:18:3c:57:53:d3:13:87:
b4:8c:07:fa:4e:c1:3e:d1:f4:7e:ff:f1:82:89:8a:
f5:24:c7:3d:dc:99:8c:b7:17:fb:58:e4:58:ac:4a:
fd:5e:a1:25:28:02:c5:6d:de:e6:e4:b8:9d:29:d8:
55:77:83:9b:03:fa:79:9e:9d:0d:9c:55:6f:14:22:
75:fa:d4:d7:76:20:15:65:96:43:b9:1e:d1:ca:ff:
8e:3a:b6:43:58:cc:6a:f1:42:52:a5:12:96:fe:cb:
2f:aa:73:da:c7:d7:02:a5:c3:1f:43:e3:01:a9:2c:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:1F:CE:68:09:25:96:AE:60:25:0B:5A:8F:E2:0A:B8:7C:F5:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cb7410f7-f8d4-3987-8185-0c7bb437dc98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.201.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:54:fd:c7:e0:4b:5b:99:a8:80:4e:d0:e1:3c:dc:7a:4f:f8:
3e:08:02:34:c2:a3:84:09:96:75:01:20:d9:7b:b9:f4:c4:06:
d8:a2:28:f7:d5:37:26:02:6b:47:24:cb:81:e3:3a:e8:ff:ca:
e3:a9:61:a3:bd:61:49:1a:ef:4f:7e:35:0a:1b:c1:4c:26:3d:
e3:a2:d3:97:05:53:30:14:96:ea:c5:d6:55:8f:5a:29:23:af:
8b:d9:41:95:46:37:72:09:af:f5:7e:98:6e:5a:9c:40:0f:82:
83:02:48:e4:54:78:ee:e7:f2:75:a7:2b:11:c2:bc:d7:39:64:
2f:ef:ea:68:bc:40:d9:46:17:51:44:eb:34:50:d7:ec:74:e6:
b4:19:7a:16:7e:42:9e:3b:c2:82:18:ef:6c:09:c7:ba:c5:81:
bf:f5:20:6f:f6:00:36:0b:b7:16:84:12:63:6f:de:f6:74:ff:
2a:ba:59:6c:8d:4b:41:9b:4c:2b:7d:af:94:73:2e:07:b4:2f:
5c:03:2f:74:18:ca:94:ce:f2:c9:96:bd:2f:e8:17:c9:01:b4:
03:d9:01:9e:25:91:c5:3a:1b:11:b5:3f:8f:0c:92:33:65:12:
df:eb:70:7b:3d:ae:e3:e6:38:b4:44:b7:83:b1:e6:7f:30:2b:
16:03:c9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:24 2025 by rpki-client