Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef864f59-73be-3ea0-913b-ae9a2d553700.roa
File: ef864f59-73be-3ea0-913b-ae9a2d553700.roa (raw, json)
Hash identifier: w0zd80G2lFxm+UY5GbgxfxK/isYS/Kxh2NDFoABKtRo=
Subject key identifier: A7:71:1D:C6:31:63:13:11:07:ED:66:22:3F:1A:04:20:2C:D1:82:02
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848CB164BD69F299CA3EEA1DA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef864f59-73be-3ea0-913b-ae9a2d553700.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.214.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:4b:d6:9f:29:9c:a3:ee:a1:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=eb79b304-bb06-47e6-83be-cca18300fde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:b5:c0:68:f8:71:a9:d6:71:e2:45:78:5a:
8a:f3:98:d6:63:e2:fe:f7:87:37:2c:3e:90:23:3c:
79:21:6e:b1:7f:2c:08:8e:95:9e:46:52:5d:46:6a:
b0:fd:8c:f3:27:9b:8a:9f:99:3f:f7:0e:13:06:5d:
f2:e4:35:06:53:8f:c9:a3:a4:8f:06:f2:ab:75:bf:
4b:69:55:38:88:e4:d8:e6:b5:fe:47:10:f9:fe:c1:
46:15:d0:9a:e0:a0:7f:fd:db:3e:d9:1f:1b:52:b1:
4c:e7:81:7e:80:e5:c8:7b:72:2b:55:19:ab:e1:9f:
0b:dd:da:8e:88:64:66:f3:2f:9a:42:4f:13:b7:60:
44:57:e6:6c:a5:28:be:45:15:a1:9f:5a:2a:fc:d7:
bd:52:de:b2:3c:12:fb:cd:18:f6:c8:24:84:c4:95:
4c:35:db:52:4a:49:f6:e4:18:af:f1:9b:ea:3e:ee:
79:08:64:27:45:e5:40:55:31:48:d2:90:c6:63:a5:
68:ce:3f:72:b9:7b:8a:59:7f:38:0a:a7:6a:32:ab:
14:97:68:49:7b:f9:f4:41:4f:5f:11:51:54:6a:b4:
a2:16:05:2e:34:8c:a5:73:d1:ce:d1:9b:08:b8:dd:
7c:31:ec:8a:bc:f4:9e:99:eb:be:05:29:60:08:68:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:71:1D:C6:31:63:13:11:07:ED:66:22:3F:1A:04:20:2C:D1:82:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef864f59-73be-3ea0-913b-ae9a2d553700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.214.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:50:fe:74:87:21:4e:c2:91:88:15:04:3d:04:4c:54:64:27:
fc:33:f2:91:21:c1:7c:5c:fe:5b:b6:8a:2a:ae:a9:67:61:09:
94:e0:67:6e:8f:ac:45:20:5d:40:d0:ed:21:35:90:5f:0e:a0:
4e:e1:14:59:d1:02:fb:6f:c8:68:42:20:ee:46:91:48:23:2c:
39:db:ed:cb:c2:32:2c:8f:fa:0b:34:bf:90:f1:8d:4e:5c:ef:
c7:e4:0d:bd:fb:0d:63:9b:11:3c:0e:ef:90:e9:3d:a0:11:60:
32:39:4f:68:2a:b4:c5:9d:77:d0:28:96:aa:d2:13:57:53:03:
0f:19:c1:c3:8a:6f:2d:d2:9f:92:d0:d6:64:b3:c2:35:26:8f:
14:15:19:a5:f4:99:3f:c7:a8:9c:e1:88:15:f6:b3:f7:b6:69:
ec:24:a5:2b:ef:32:44:9d:02:bb:0b:10:5f:c2:44:0b:f8:18:
b9:38:9e:c7:98:b3:ce:ec:2a:81:6a:3a:cd:f1:50:10:6c:2f:
e4:c9:ea:f7:60:e7:b8:5a:be:12:10:99:dd:8a:90:c4:a5:d8:
47:42:b5:f3:2e:ca:bd:51:13:c0:b7:6e:9b:4e:d0:a8:da:ce:
8f:87:49:07:c8:d2:f0:e7:e9:5a:67:e0:b1:79:d3:df:89:a8:
43:e0:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:40 2025 by rpki-client