Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdc814f2-d5fc-38ab-8808-35720ea3e7ec.roa
File: cdc814f2-d5fc-38ab-8808-35720ea3e7ec.roa (raw, json)
Hash identifier: aIFCi5b5It990hdoPJUO3z1SC8DAwFG+4+9Lnmwkfno=
Subject key identifier: 79:03:39:A5:6D:4C:F1:0B:D1:A4:18:CE:BD:B5:0E:EB:F5:30:B4:AD
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848CC7BA2FB487CD63D1A4F7780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdc814f2-d5fc-38ab-8808-35720ea3e7ec.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.221.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:a2:fb:48:7c:d6:3d:1a:4f:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=f88b8fcc-0631-4f95-b463-8d0be5868440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:c9:7f:98:8d:b4:94:bc:7f:55:bb:51:8f:
fa:36:ef:76:5f:4f:af:4e:de:c5:a5:89:79:a6:d5:
26:5f:db:a2:ad:1a:00:c1:b9:dc:46:b8:6b:9b:d5:
4a:47:80:d1:2f:7f:95:b6:85:bf:a7:48:7f:67:f8:
f5:eb:09:df:80:37:4a:b9:6a:11:8a:17:88:73:24:
83:b7:7e:dd:b3:b3:a0:fe:68:f1:da:ec:49:6a:2e:
2f:c6:eb:5f:37:77:9d:47:90:ca:cb:d2:b5:06:6a:
40:87:ad:81:33:e3:0f:9b:38:9e:b0:b6:3d:69:38:
77:ef:c3:70:14:b3:e2:a8:ce:79:34:2d:4f:f9:34:
c0:f9:64:38:34:9b:2f:01:df:d7:e1:b0:6e:6d:57:
ff:eb:ba:7c:8c:26:72:e3:9b:00:3d:bf:1d:b9:ce:
bb:47:e9:c4:67:89:cb:24:08:41:25:aa:17:42:51:
60:4d:d3:81:02:ee:72:4c:05:2d:60:84:29:34:84:
48:f0:ab:e0:83:8e:91:58:de:cb:3a:ff:87:56:cc:
6d:77:a0:51:7d:c9:56:0a:26:c1:fa:79:a0:27:a7:
70:1a:0b:2b:40:72:94:1d:eb:dd:9f:75:ca:e6:42:
d1:6c:3a:31:f0:48:2a:fb:07:91:86:9e:79:cd:f0:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:39:A5:6D:4C:F1:0B:D1:A4:18:CE:BD:B5:0E:EB:F5:30:B4:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdc814f2-d5fc-38ab-8808-35720ea3e7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.221.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:72:90:74:00:b2:9a:fe:30:41:fc:fc:a2:53:1f:e1:85:1e:
1f:b0:56:40:18:c9:26:fc:d2:99:23:3a:ed:98:d8:4f:43:05:
64:06:f9:d0:6c:6f:65:f0:19:ae:72:6a:f5:b5:ea:53:6e:2e:
03:6c:37:a6:da:6a:84:8c:c5:9d:ef:45:1d:48:c7:a8:06:dd:
fa:02:42:d0:ee:76:2c:db:4c:d0:64:fe:dd:e9:75:da:40:0e:
ba:a4:4b:7f:91:e4:33:71:99:e5:02:2c:38:af:83:ca:a0:98:
e2:8a:23:6c:3f:6c:09:04:d7:61:d5:1f:5a:68:24:bd:46:86:
d5:84:03:9b:33:8d:68:08:d6:c9:91:fe:a8:8c:87:64:8c:60:
33:9d:86:8d:42:96:2e:f0:82:a7:d7:f8:e3:c3:14:5b:cb:0f:
4e:df:38:ca:af:c4:dd:8c:a0:cb:9b:20:ba:29:26:f1:5d:15:
c3:72:7c:eb:36:6f:e1:f4:d9:31:a8:57:1c:19:34:3b:cb:8a:
7f:68:ae:1e:14:04:7e:c9:93:ef:87:00:07:fd:d6:cc:ff:a5:
a6:f7:6b:e0:a4:f5:85:d6:35:e7:2f:b0:14:f1:0e:4d:76:5c:
e7:c1:c2:fa:bd:af:a0:85:28:68:b8:e1:c1:14:73:20:f9:21:
91:ca:94:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:02 2025 by rpki-client