Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba5b5c7-a434-3076-95a4-095538a37740.roa
File: fba5b5c7-a434-3076-95a4-095538a37740.roa (raw, json)
Hash identifier: eRnmBYrUvuECweJSAcXVDYzoY5Xgehvwds7pVn5cwGI=
Subject key identifier: D8:3A:F3:76:A3:EF:C3:0E:50:0E:F8:08:23:63:20:D5:5A:BB:1D:3C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BA341D0EB04AA39C98D0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba5b5c7-a434-3076-95a4-095538a37740.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.217.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:ba:34:1d:0e:b0:4a:a3:9c:98:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=97f2f40b-99a3-4968-9360-e80c4f2e2e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dd:7b:48:c3:58:d4:0b:23:7d:4c:ea:5b:91:
f1:72:65:95:25:f1:a7:36:fc:63:c0:68:24:b3:02:
38:9a:eb:16:5d:83:28:ea:d4:ef:a5:9c:9b:20:16:
62:14:d7:99:2e:2e:83:41:16:f0:8c:d9:30:1f:a3:
6c:23:f8:d4:b7:cd:96:15:14:d3:b2:d1:7d:23:12:
4f:d1:b0:64:ff:9b:39:02:ba:75:a8:c8:e2:79:11:
78:3b:04:82:31:f4:43:be:ff:c4:b7:9e:3a:50:eb:
73:bc:89:43:92:4d:7d:b0:4a:e4:74:bc:f5:26:38:
1c:f4:53:ee:3b:d9:89:6e:4a:1f:5c:68:46:42:77:
d0:f9:3a:1b:a2:c5:61:fb:6b:1f:6d:99:28:8d:dd:
99:d3:4b:28:9d:02:0a:9a:67:1c:d7:91:b1:10:25:
2d:67:92:43:6a:b9:a5:66:67:a0:88:ea:ec:ac:3f:
2f:ac:a9:78:7c:92:0b:59:de:90:c6:d3:85:bb:66:
f7:bf:d4:30:b8:07:72:b4:44:a6:e6:20:c5:cd:0f:
d6:4c:7b:e7:c6:99:36:08:31:ce:d0:0b:01:f1:9b:
08:8a:a5:45:d5:e5:48:f4:d1:a4:02:34:94:2e:cd:
ed:2f:1d:18:3d:19:0c:ee:ed:0a:b1:6c:d0:78:15:
a3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3A:F3:76:A3:EF:C3:0E:50:0E:F8:08:23:63:20:D5:5A:BB:1D:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fba5b5c7-a434-3076-95a4-095538a37740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.217.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:7e:a9:d3:68:6d:3e:88:04:fe:c6:09:13:0f:01:5c:61:bb:
6b:de:19:8c:42:a4:f4:0e:e0:f6:d2:5f:58:40:c3:65:13:22:
d7:27:d3:bd:d2:2e:ad:86:cc:57:d7:18:51:34:a3:db:2e:ce:
84:b7:31:0d:a8:1a:4e:0b:8d:c2:d4:04:e0:4f:15:fe:33:c9:
68:7f:6a:db:83:08:ac:b3:5d:d5:09:fd:23:dd:17:8c:56:01:
f1:c7:8b:63:8f:88:50:2b:37:ef:72:75:c4:13:5d:87:7f:a8:
61:6a:8e:03:9f:bc:dd:10:d4:26:36:ec:4e:7c:26:6a:be:27:
5f:de:55:eb:86:e9:cc:a5:22:38:8d:1b:d8:6e:d9:29:f1:ad:
fa:96:22:56:53:d8:84:ed:d0:4b:55:37:2f:39:5f:f8:3e:1e:
87:5a:a3:ce:87:75:71:5b:93:67:63:c8:c8:df:59:5b:da:53:
27:a3:0f:e9:98:4a:38:fa:fd:cc:cb:0d:1c:07:c3:56:79:92:
68:89:15:4c:93:7b:db:06:22:0c:bd:75:ac:a0:a4:60:e4:92:
ee:44:41:54:0c:1d:ae:ec:5e:78:9d:68:f1:77:6e:75:16:1b:
41:7b:3b:cf:b6:41:21:c3:9b:59:99:12:d3:b6:fd:ce:c2:6a:
05:36:74:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:37 2025 by rpki-client