Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d09fc71b-41ed-35be-ace7-b0a11084e81d.roa
File: d09fc71b-41ed-35be-ace7-b0a11084e81d.roa (raw, json)
Hash identifier: lvfv6q391t77txIE/Hrlgl9W+UFYxto/pQNC8Lp3hPI=
Subject key identifier: 0A:F0:82:64:5E:60:F5:DB:03:2C:2D:3A:A8:90:E2:DE:6F:43:19:43
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E70C449168F2BADE76D60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d09fc71b-41ed-35be-ace7-b0a11084e81d.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.12.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:70:c4:49:16:8f:2b:ad:e7:6d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=adf33032-f345-4c47-808a-31a789ef2ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:61:d8:ad:a8:7e:d3:54:20:92:4f:46:cc:19:
52:a9:72:9c:38:80:05:c8:76:5f:5d:b6:9e:48:0b:
78:bc:a2:78:f1:59:ff:5a:53:d5:77:f6:8a:06:fa:
a7:e4:e9:af:0b:52:9a:53:f3:0e:e5:6b:6c:c2:1c:
0d:e7:5b:02:9a:6b:b0:4a:61:6e:4a:91:98:62:0d:
6b:c9:fd:6c:00:cc:4b:d7:9e:06:f4:21:f3:ea:eb:
bc:2a:0a:56:80:81:68:12:a8:c4:a7:ed:ab:11:0c:
28:48:8f:75:fe:8d:d6:a7:c7:ca:6f:eb:6b:b9:a6:
d2:80:e2:15:cd:25:c6:d5:13:11:48:74:8c:18:b5:
1e:b3:b5:3c:d2:1f:c5:e8:d1:16:17:d2:fd:dc:68:
7d:eb:30:04:a6:8e:63:73:8c:28:aa:d2:be:7f:f8:
62:9c:8a:1c:b9:75:fd:7c:c0:e7:b2:91:22:b0:02:
3f:fb:0d:6a:de:7d:34:0d:36:c4:d3:be:a5:7f:9c:
d3:44:cd:a1:d6:e9:81:d8:8e:7a:fe:ee:ba:a9:3d:
1e:e0:03:a9:1d:3e:12:c2:e8:a4:37:fd:74:ff:46:
e1:1a:c9:a6:96:1c:47:06:fd:c8:25:24:a4:63:96:
b1:0e:54:d0:a8:83:c2:63:77:89:dd:22:e5:b3:6e:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F0:82:64:5E:60:F5:DB:03:2C:2D:3A:A8:90:E2:DE:6F:43:19:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d09fc71b-41ed-35be-ace7-b0a11084e81d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.12.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:8d:c6:22:d5:cb:44:04:56:b8:f7:80:cb:94:64:9d:7b:71:
65:3f:75:ee:d8:a7:2d:da:06:9c:e0:7d:e5:d5:0c:09:c7:74:
24:e5:60:5f:b9:0d:31:d1:04:b9:e4:39:ea:00:3f:da:66:bd:
b1:b6:a5:d4:56:08:11:66:d3:4c:d5:d6:8e:6a:ac:47:34:60:
8f:fe:b5:5e:04:c7:ea:14:1d:27:f3:2a:a5:43:5e:46:3e:8f:
f9:b6:22:24:ee:fa:d3:61:bd:de:e7:ef:7b:93:3d:fb:4d:43:
fb:49:31:1f:83:f9:63:50:44:8a:4f:4c:f4:03:63:85:c4:98:
53:74:6e:13:f2:81:5d:f2:99:be:61:c3:74:a5:68:ee:39:d0:
13:c1:b7:92:22:80:8e:2b:14:86:d7:83:60:9f:36:e4:17:45:
98:b9:57:5b:66:4d:d7:2c:fa:05:ce:91:08:c3:77:98:fe:06:
95:18:9b:b1:d0:25:b0:46:6b:1a:45:78:ee:85:9d:ec:c7:2f:
82:fe:7c:6d:09:3c:e1:03:ad:63:9b:cd:8b:a0:b5:93:2c:56:
99:b9:a9:5e:36:0b:b7:1a:df:05:c8:74:90:fc:a7:60:6a:75:
a5:51:fe:3a:db:1c:f6:ef:38:41:a4:04:f4:54:f1:2b:d4:3f:
9f:1f:43:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:02:39 2025 by rpki-client