Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1ae068c-b2bb-3e50-9a66-b03a81564113.roa
File: d1ae068c-b2bb-3e50-9a66-b03a81564113.roa (raw, json)
Hash identifier: vMLXvdkXI5StBFY0+soY/4N7gLVlIdAYK0erwecwQPM=
Subject key identifier: 43:23:BC:6B:39:75:6C:BF:45:02:1B:3A:E5:78:0E:9D:B7:93:05:8C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487FB5F316575A343E603B54C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1ae068c-b2bb-3e50-9a66-b03a81564113.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.48.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:f3:16:57:5a:34:3e:60:3b:54:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=d67ef99b-1167-4954-98db-13b6fb8809c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:24:d3:83:54:ee:77:7a:f9:39:ff:b4:87:9f:
db:1f:df:2b:d9:b3:00:95:58:aa:88:f4:95:96:a2:
94:2a:2c:1f:24:28:f7:a2:a3:04:da:4f:55:50:a7:
4b:07:79:6b:56:66:eb:c8:74:ce:94:1c:34:95:42:
cc:e8:98:44:03:04:7c:be:ea:2e:75:28:19:0b:aa:
e8:c9:bc:a4:96:c6:86:09:d2:b8:af:b0:6e:f3:f5:
0e:92:91:c8:96:91:d9:10:ee:0c:a5:35:ef:92:cd:
22:97:46:88:1e:43:8b:b2:dd:a5:0f:36:fd:75:d7:
8d:63:77:01:61:be:87:ab:59:ab:ad:98:6d:f7:12:
27:31:14:a4:5f:e9:d7:42:76:fd:97:20:94:98:fb:
0e:9a:57:c1:d5:8b:96:d3:29:6e:fe:56:53:33:c6:
01:44:e2:4d:d7:f2:a3:e5:a8:38:9f:d5:79:9b:d6:
51:da:5f:5d:c1:65:9d:d5:16:1f:e9:f9:55:16:0d:
a7:e2:89:47:79:c1:0c:bc:d2:f4:76:44:01:5d:15:
1b:a7:91:51:31:da:84:f7:ea:dc:f6:a0:3a:2a:75:
fa:a0:7c:9d:38:99:36:43:60:7b:7d:ab:1d:61:1a:
9d:2d:df:7e:3b:4b:6d:af:ad:70:1a:09:69:c4:ed:
ee:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:23:BC:6B:39:75:6C:BF:45:02:1B:3A:E5:78:0E:9D:B7:93:05:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1ae068c-b2bb-3e50-9a66-b03a81564113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.48.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:e2:26:6b:fc:f2:20:37:19:40:65:7d:3b:3a:c2:01:ff:88:
66:52:1f:6b:3f:78:0b:51:25:e1:28:5a:f0:34:95:e7:30:4b:
1d:d5:16:62:53:40:28:2d:b2:96:0d:31:71:1b:49:2a:68:8e:
85:f9:03:04:5b:58:4a:40:aa:9c:fd:cf:67:b2:03:11:65:6f:
60:17:dc:24:9b:be:18:c6:d5:a5:72:ef:b7:46:fe:44:a3:d6:
31:b4:54:c3:e7:b0:14:bc:88:a8:28:ab:b3:cb:0a:4c:4a:6f:
67:a2:1e:34:3e:99:6f:df:63:74:1e:8d:28:08:ad:1f:c9:4c:
5f:59:a4:d3:8a:a1:12:c0:46:f9:f4:fb:e3:43:df:65:0a:3b:
0f:ce:c2:68:9f:2d:40:78:30:d5:f7:a2:ec:cc:80:15:d6:2d:
a2:2c:f0:9d:72:65:b7:46:79:c2:3f:5e:cc:13:9f:d4:7b:a9:
62:36:e7:10:c0:c3:33:b2:87:9f:1c:72:be:66:ee:88:6c:5a:
d8:51:1d:53:32:b4:49:70:75:9c:20:0e:a5:4c:17:8b:0d:83:
81:c6:b0:07:47:66:bd:7c:09:3a:c6:70:b9:9a:a4:84:0d:1a:
13:d0:48:da:33:50:58:7d:ae:a6:ab:46:65:99:b4:a7:54:15:
eb:79:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:29 2025 by rpki-client