Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d922eec7-d3d7-3d9d-bf56-7de3bfe148aa.roa
File: d922eec7-d3d7-3d9d-bf56-7de3bfe148aa.roa (raw, json)
Hash identifier: qeP7gNQ4AiA30AsOZmHyi1lBVguwjhDlioWfc1zfpg0=
Subject key identifier: 2E:F7:D8:AE:1F:55:2C:6F:C1:D5:A2:67:31:5D:6F:E3:1C:E3:CA:21
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BE863D102B50E02ABD593D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d922eec7-d3d7-3d9d-bf56-7de3bfe148aa.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.214.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:3d:10:2b:50:e0:2a:bd:59:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=8d937f25-7946-43e7-b68b-3718e842ccc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:2f:a8:9d:77:e8:98:6f:b2:19:c6:0b:c6:
ae:3f:e8:62:e5:cc:bf:ba:01:88:0b:4d:89:c5:c9:
5e:fb:f2:51:fe:b3:d0:95:4e:25:3c:b7:6e:b0:7b:
a1:d5:ab:c3:26:df:3a:06:f3:ae:9f:18:e9:22:5d:
2c:d7:de:8c:c4:58:f4:74:b2:b9:27:6a:7a:47:97:
b4:68:b8:83:a5:93:95:1b:b3:0a:f1:4a:1d:2a:ae:
b4:6f:68:a2:7d:c8:c6:99:84:e1:97:e5:01:cc:7e:
84:45:76:1c:a5:c3:bc:97:ad:22:34:5f:2a:9f:42:
eb:68:e6:1a:2a:ba:83:90:59:ae:0c:cf:b5:5e:9d:
d6:99:f9:30:93:f0:0b:8e:68:43:09:cf:33:68:d3:
24:ca:a2:ae:e5:5d:66:b9:ed:2a:15:81:54:5f:06:
70:a0:6d:89:27:92:18:4e:31:97:0a:97:70:0a:40:
2d:f9:ff:4a:65:06:46:1e:9d:bb:02:91:15:70:e3:
83:6a:b4:3f:4f:8e:07:bd:58:75:3a:83:56:cc:a2:
ad:de:d4:af:b1:05:c7:2a:98:82:42:79:2b:c9:7e:
53:49:55:3b:ad:31:59:bd:a6:d3:13:a0:5a:85:45:
79:fc:ae:ce:44:86:bb:50:25:70:b6:92:d4:f5:f2:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:D8:AE:1F:55:2C:6F:C1:D5:A2:67:31:5D:6F:E3:1C:E3:CA:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d922eec7-d3d7-3d9d-bf56-7de3bfe148aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.214.80.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8f:bd:e8:00:84:a8:bd:b0:37:f9:39:80:c9:f6:18:67:b5:
31:96:a0:6f:9c:c5:e7:aa:42:c7:8d:ae:84:74:c7:5c:34:4b:
d1:ef:f7:08:84:be:ff:dd:f4:6c:93:96:4b:29:89:0d:91:5d:
d3:da:f5:6d:40:d6:8f:c5:86:a5:9f:1a:27:63:4a:87:59:61:
5a:9b:1b:85:9e:c9:98:8d:56:36:e0:97:80:a1:29:6b:25:41:
18:0e:a7:ce:30:63:f0:36:a8:30:ef:64:a4:64:5a:fe:82:f1:
fe:93:43:b6:8e:ac:c3:8f:ee:23:d7:a4:5c:e0:67:ee:fa:3c:
28:93:6f:d7:a9:ae:36:08:ba:f9:16:7e:26:5c:34:37:a3:3e:
ac:8c:50:c4:ae:26:77:95:e9:e4:84:31:58:8b:43:ad:8f:8e:
29:3d:c4:10:69:04:61:b7:29:8f:25:a6:e0:71:d2:5d:ce:0f:
67:c3:4e:3c:41:c3:fc:7e:85:ef:da:b0:6e:d3:22:ff:69:8b:
da:13:37:a7:55:14:1e:e0:78:a4:e9:a4:64:86:e3:6f:9a:7a:
4b:d3:bb:4d:93:d9:ad:ee:d3:0a:73:57:07:5d:39:a9:5f:1f:
70:05:39:6a:01:03:05:9c:d8:6a:b4:67:14:87:1c:1b:9a:6b:
82:ff:58:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:56:17 2025 by rpki-client