Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8ecbb0c-dd54-37fc-a608-d333bef477ed.roa
File: f8ecbb0c-dd54-37fc-a608-d333bef477ed.roa (raw, json)
Hash identifier: dD5IycrJLKmpfaZf/VTp33or3aA4msVfMNSZQoo+q4E=
Subject key identifier: 51:E9:BD:99:41:CA:14:15:2A:E6:CE:16:53:80:F5:60:50:C1:71:EB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BBF6A0723B72923BC500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8ecbb0c-dd54-37fc-a608-d333bef477ed.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.209.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:bb:f6:a0:72:3b:72:92:3b:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=8f873bf0-33ad-4f56-af4b-aee323795e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6f:c5:18:1b:00:19:ed:34:77:4d:47:0f:c1:
f5:5a:12:51:0f:08:bb:28:85:be:de:e9:28:14:00:
a0:f2:c7:e8:c3:c8:9e:1d:8a:76:a2:82:69:e0:46:
19:67:75:73:13:a0:24:e8:98:36:96:7b:4f:c5:f8:
87:78:b8:e6:0d:c0:ea:8c:dc:e1:e1:55:53:1b:59:
5e:9b:69:1f:2f:5c:2c:db:57:f5:32:5f:88:00:d3:
7e:f7:77:8d:53:48:42:f0:65:31:48:a1:cd:56:2c:
84:00:20:fb:27:cf:77:e1:02:ac:54:8d:8c:62:20:
9d:b1:3e:a1:64:a8:dc:8e:a2:e8:39:1d:5d:62:98:
0c:99:dc:3c:59:30:8a:2b:8a:aa:b7:9e:8e:17:7c:
aa:87:75:bf:ca:00:52:cf:ae:e3:86:a0:32:1c:8d:
d7:fa:74:04:5e:65:9f:2c:dd:80:77:39:7b:19:c0:
e1:af:cf:ef:7c:a6:26:7d:49:f7:57:d7:29:d6:10:
95:b9:fc:fe:8b:ef:83:66:dc:1b:52:86:51:6b:83:
ce:83:a2:a1:97:91:88:bf:46:0a:ae:41:63:99:a3:
25:b7:79:14:80:69:5e:82:b7:43:00:2e:7b:7b:62:
24:73:4b:67:07:7b:af:b6:f0:06:57:e2:75:1e:25:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E9:BD:99:41:CA:14:15:2A:E6:CE:16:53:80:F5:60:50:C1:71:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8ecbb0c-dd54-37fc-a608-d333bef477ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:c0:d0:64:35:b6:9a:94:47:14:ae:de:f7:c6:72:f9:05:93:
eb:5a:fd:b6:89:30:67:58:bc:ed:5e:bc:33:f4:42:47:ad:61:
b0:6d:7d:56:7f:85:eb:69:6b:5f:9a:cd:83:f3:35:bb:13:f6:
1c:fe:38:98:03:fd:3b:4f:6b:9b:36:6c:93:03:1e:91:17:ac:
08:61:42:8d:89:dd:7c:fc:2a:9a:f3:06:75:d5:37:6b:99:fb:
d4:94:a3:94:89:60:66:28:b8:ba:9f:6d:7a:88:6c:c9:d5:67:
79:cc:f5:9e:ab:e7:04:a3:e4:ff:6c:08:d2:4a:f3:02:6d:69:
07:28:5a:bd:27:0a:1d:0d:37:38:a2:8f:f9:1a:23:03:7a:f7:
e8:d9:6c:e0:56:fc:04:8f:68:2b:bf:9f:77:0e:68:c2:ed:59:
33:bd:c2:54:4b:19:56:00:8e:0b:53:44:60:d0:0d:f4:1c:f6:
af:43:2c:59:ba:5b:e9:29:7d:74:ce:e2:42:d3:4d:b8:e9:1b:
ac:e9:63:06:60:1e:e6:b9:b1:1d:7f:cd:c5:19:bf:4d:bd:6b:
88:72:78:a3:d6:f4:ca:d9:0f:c3:c6:2e:cc:70:01:99:20:73:
ef:ad:0c:df:3e:b4:5f:a7:38:0e:a6:6c:75:51:99:af:b4:d9:
f9:1e:ce:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:34:01 2025 by rpki-client