Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01462454-eeee-33c4-aebd-af9f2e9fdc38.roa
File: 01462454-eeee-33c4-aebd-af9f2e9fdc38.roa (raw, json)
Hash identifier: PzCaa5UUf4EJopEDpLP+U3AMkk8txQ6IF4zm1aTVgtg=
Subject key identifier: 32:09:88:76:87:3C:77:54:38:3C:59:99:3F:A1:B7:0A:87:84:F1:A6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584863CB17E77D2CC0C78F5FD700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01462454-eeee-33c4-aebd-af9f2e9fdc38.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 16625
IP address blocks: 23.42.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:17:e7:7d:2c:c0:c7:8f:5f:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=4c7cf6a9-4311-45ac-a4f2-c2183397d5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:53:fe:1d:60:35:1f:e6:64:a1:90:e4:a5:
da:b5:2f:19:59:05:64:bc:01:4f:a7:47:8d:75:6c:
2a:24:e6:6a:17:02:6b:dd:fc:5b:80:80:a6:49:ac:
4d:f6:f5:61:8a:b6:a1:1c:4e:ae:ca:dd:8a:99:c8:
4b:16:45:e2:98:db:55:0a:99:5c:5d:4c:b7:1c:24:
38:a7:82:da:cd:68:10:8a:df:71:bb:c7:e7:95:45:
e2:47:d6:96:7b:bc:d6:68:7a:cd:8c:b3:5f:93:b2:
35:0c:58:0f:5b:2c:45:32:35:72:d0:21:13:95:48:
4d:6c:69:62:fa:9b:63:71:01:8f:26:df:dc:48:11:
9c:03:55:21:ec:9f:ee:df:51:31:b7:c8:d8:7d:37:
5a:76:ce:0c:ff:06:02:8c:74:fe:89:61:e9:85:a4:
8a:57:41:8c:ed:52:0f:10:76:88:23:9b:03:ec:2c:
63:2c:51:fa:7b:e9:8c:07:c1:52:30:78:f7:54:da:
05:0c:a9:b9:d9:21:ec:14:7f:4d:65:28:5a:0c:cd:
32:73:ee:21:84:b8:13:cd:81:e6:94:ee:29:2c:26:
d3:1a:77:c5:c1:55:10:ef:db:b0:48:84:b2:f7:f5:
22:4e:8d:c3:4e:8b:74:62:fe:38:04:6d:d1:05:4a:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:09:88:76:87:3C:77:54:38:3C:59:99:3F:A1:B7:0A:87:84:F1:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01462454-eeee-33c4-aebd-af9f2e9fdc38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.42.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:59:03:26:fc:9c:72:29:f9:c4:f0:d8:5c:73:1e:19:c6:51:
77:d4:f5:e8:9b:15:13:18:37:5f:19:cf:f8:96:e4:9c:b7:f1:
2a:84:1e:5f:c6:0c:63:6a:07:48:fe:b5:d0:28:be:3f:a3:6b:
01:c0:7d:3e:b5:4f:97:24:83:99:ec:9c:51:18:0f:96:f5:2d:
d1:de:b8:72:58:c6:05:37:aa:1d:7f:4e:30:d1:c9:d9:c5:47:
18:0b:71:21:ed:5a:a8:e6:aa:39:65:86:79:56:6c:02:a5:12:
de:75:1a:79:ca:63:aa:2e:ae:cc:b7:f0:88:f1:36:42:cd:6a:
31:75:b5:2d:72:ff:70:e8:8e:76:d8:db:50:7d:9f:7a:05:65:
d6:ba:98:d8:6f:8a:4e:74:be:61:b6:ec:24:7c:ba:7f:9e:27:
a9:2b:ac:dd:3d:97:d2:dd:b0:74:1c:1f:89:b2:19:8b:f5:d8:
f0:d1:28:a8:cc:3d:a7:c1:ba:b4:7e:a0:ac:d5:97:c0:49:7a:
11:1f:a8:75:34:32:d8:b2:d6:81:95:17:07:fb:6b:dd:fd:e5:
7e:c7:c9:df:20:5a:b2:1b:8b:39:1e:1e:3b:da:64:60:01:74:
26:45:26:f6:8a:f5:ef:30:a0:40:96:11:b6:94:70:7c:9e:ae:
74:5d:22:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:55 2025 by rpki-client