Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2a403a1-92a4-349b-86cc-dd79e782232a.roa
File: f2a403a1-92a4-349b-86cc-dd79e782232a.roa (raw, json)
Hash identifier: Oy1Tp6YD5oRzyHW8TL+N918tEwhlOT5wAgVBca1Hqz8=
Subject key identifier: F1:A0:41:E9:9C:02:95:DA:96:44:A9:6B:AC:83:DE:C3:A6:63:BA:DE
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584883E5CDE7A84894A5ACF00800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2a403a1-92a4-349b-86cc-dd79e782232a.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 16625
IP address blocks: 23.51.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:cd:e7:a8:48:94:a5:ac:f0:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=7875a264-02d5-42fd-be7c-eb29cc3b0995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:d3:5c:54:ab:4a:5c:7b:e3:fb:f8:8f:4f:
5d:48:39:8d:bf:d0:8d:fb:94:23:f9:08:79:f4:ea:
d1:09:95:77:d7:c8:a2:b0:32:ed:3c:14:39:8c:ae:
ad:5a:4c:c7:7a:26:23:34:6e:69:5f:e9:d1:7a:23:
ae:96:5d:21:2b:12:10:28:7b:64:18:50:e1:d9:77:
1f:03:72:2f:9d:7b:73:5d:d6:71:cd:f4:3d:07:0e:
61:c8:81:cb:2e:d9:a2:a0:e7:d5:ac:ec:15:1a:be:
5d:a5:71:1c:29:2a:33:d1:15:ec:54:91:a6:15:68:
24:8b:22:f5:d5:23:b6:cd:69:7a:9b:82:54:1f:73:
f7:45:92:0c:e0:1e:7e:02:ea:d2:33:c5:cf:5c:b1:
06:a5:df:72:31:fd:e6:e9:f1:cf:b2:6a:37:e3:88:
d1:c7:56:11:95:1c:83:3e:69:33:d6:13:85:50:69:
9f:12:85:23:72:31:0f:23:c2:0c:e2:98:65:55:3d:
64:e3:69:39:5e:0a:5b:35:3f:1f:2d:a5:c9:80:ac:
f7:98:71:31:a8:1a:88:55:47:40:77:e7:d4:ac:67:
fa:3c:3a:24:b9:53:2b:22:ea:60:04:a5:69:23:68:
6c:c0:fc:3b:e0:c4:5f:ee:84:a1:2b:f8:cb:0a:58:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:41:E9:9C:02:95:DA:96:44:A9:6B:AC:83:DE:C3:A6:63:BA:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2a403a1-92a4-349b-86cc-dd79e782232a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.51.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:81:95:4b:1c:3d:d4:f6:dd:31:4d:86:1b:89:9f:c1:9e:c8:
11:e4:28:33:c7:0a:80:4d:89:46:fd:fd:ad:95:a1:89:ac:af:
df:f0:b6:e1:9d:9e:bb:cf:fb:be:46:17:7b:b4:e0:eb:b7:55:
5a:6e:72:e4:70:ff:b6:f9:e7:88:63:fb:f5:d3:86:d7:81:d7:
25:15:c2:4e:b7:6f:db:cb:58:26:2e:74:51:d3:3f:e9:61:aa:
ca:75:b1:00:46:c9:03:70:8e:6c:f4:50:05:d3:ad:9d:b7:ff:
4c:e7:d5:bd:ac:1e:63:2f:82:25:25:0c:af:9f:d0:06:a3:e3:
04:b9:4c:25:69:f4:ee:ab:78:2b:5e:e1:90:7d:89:dd:c7:92:
ab:06:2e:f4:ef:b6:cd:3a:cb:79:88:61:7a:36:c2:11:fd:a2:
75:70:91:31:dc:32:37:e6:cc:18:5f:32:6f:67:74:4d:f4:d3:
38:11:f0:f1:7c:f5:10:87:c2:37:18:49:2a:1e:80:bd:b1:69:
05:01:86:40:b8:0d:5e:6f:38:84:d9:54:12:5a:05:e1:b5:33:
c6:af:36:37:72:6f:98:b4:e4:06:e7:8b:b0:12:5b:e3:b2:f1:
9d:54:36:d5:02:56:9b:9e:ec:71:e0:40:fc:d0:90:c9:d6:bf:
d4:ef:13:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:41 2025 by rpki-client