Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eff65473-c004-35a2-9a38-602752a969e6.roa
File: eff65473-c004-35a2-9a38-602752a969e6.roa (raw, json)
Hash identifier: rEMg5fDGKzM3BvEWlwf9SZhLi0u9oZMHkrEcxaZdZ/I=
Subject key identifier: 48:C0:7A:B2:9C:E3:E6:53:B2:7D:D9:C2:06:1F:A2:36:D1:C9:B7:12
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BE8643096E4F42441C369E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eff65473-c004-35a2-9a38-602752a969e6.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.217.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:43:09:6e:4f:42:44:1c:36:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=97d91ebe-6943-46de-b044-18d027b1b369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:2b:29:af:cb:66:43:34:3e:7f:db:31:3a:
27:fc:46:cd:2b:2e:f6:12:d0:a7:75:c1:0d:71:dd:
50:28:d6:0e:7a:46:51:22:c2:a2:1f:8c:14:60:31:
ac:a9:87:68:56:39:34:e5:17:c7:10:48:56:16:ba:
e6:b7:4a:bd:a2:a0:98:b7:8f:5d:1b:76:43:1e:56:
24:39:f9:96:81:56:3b:b3:4e:73:ff:ab:47:2b:cd:
99:a0:7f:1c:39:a1:6c:85:58:7d:d4:a9:00:8e:f0:
3c:3e:fd:fc:c8:67:a2:91:8c:7f:47:9e:ad:d7:4e:
d7:98:f2:40:c6:35:5e:87:29:54:46:a5:a6:af:e4:
a1:45:aa:87:1d:f4:6a:7d:bf:f0:de:5b:83:75:4d:
85:f9:cf:3b:8e:26:82:c5:92:5e:16:3c:a0:36:b3:
2e:36:25:33:57:09:52:bb:5e:23:79:17:49:3b:44:
bd:34:9a:e0:4b:dd:c8:a9:bc:2b:62:08:c8:b2:ce:
92:66:7a:84:e1:f5:28:18:c1:d1:b0:7a:f3:f6:87:
f9:01:f7:b2:ae:e8:e2:bb:0b:33:1f:e7:42:07:99:
b5:82:0f:05:8e:2f:3c:80:f3:75:dd:9f:47:f9:41:
38:30:a9:3b:01:c0:cd:4d:a6:fd:3c:90:d4:79:6f:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C0:7A:B2:9C:E3:E6:53:B2:7D:D9:C2:06:1F:A2:36:D1:C9:B7:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/eff65473-c004-35a2-9a38-602752a969e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:2b:9b:57:1a:87:65:f8:1f:5e:59:f8:e5:32:6e:7f:5e:a1:
61:99:8d:e2:9e:b1:1e:68:9b:d8:c0:e8:5b:56:88:e5:12:ff:
41:8d:96:24:04:99:c4:45:c0:6f:dc:6b:5e:de:2d:71:38:82:
f2:5a:23:bf:75:ff:59:b5:93:4c:74:85:d9:3d:f5:b3:1b:5d:
4b:6e:7f:06:84:53:5e:13:e3:d2:6f:83:82:1b:d1:13:12:48:
8f:f4:12:de:39:d0:d8:50:05:cf:05:0e:0f:63:d1:10:0a:1a:
dd:70:bc:e4:77:6a:a0:b8:ad:96:44:31:4f:4a:4a:82:2e:cc:
33:e8:d1:fe:b5:92:7a:92:3c:76:5b:79:1b:73:aa:03:fc:25:
1d:60:b3:7e:98:62:59:29:a4:99:69:53:52:54:bd:e0:a8:bd:
b8:9a:9a:4d:b8:0c:be:ef:57:07:b0:bd:9d:6e:b0:0f:d3:77:
13:11:51:15:a0:a8:47:88:f7:8d:04:df:61:cf:3d:a9:0e:60:
17:25:5b:d7:6f:58:57:e5:3b:35:0c:a5:f2:82:ab:cf:e9:4f:
43:a0:37:72:e7:97:22:dd:8f:85:cc:23:a2:24:b1:b8:13:28:
00:65:47:6f:e5:03:dc:01:5e:b3:dd:3f:f9:3b:05:b5:7f:71:
64:03:bf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:16 2025 by rpki-client