Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01706fc0-ba14-3970-ac15-d24d980556ff.roa
File: 01706fc0-ba14-3970-ac15-d24d980556ff.roa (raw, json)
Hash identifier: u+rQf+3zdv4+2498Pgwte1+zjVfq879zTvsyKjmKocY=
Subject key identifier: DD:C7:78:BB:AC:92:2A:EF:05:E7:70:BA:39:9F:17:79:CB:B6:46:F6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C457BCE5B5FDDA7F2400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01706fc0-ba14-3970-ac15-d24d980556ff.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.33.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c4:57:bc:e5:b5:fd:da:7f:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=d0a858fa-4fc0-48cc-9dbf-17fa976bf595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:63:b4:ad:53:6d:52:13:f7:0b:12:d9:54:
ca:63:64:05:a0:06:35:58:5e:00:29:e5:bf:0c:84:
d6:8b:4a:66:42:c9:f3:27:f7:2f:94:c1:a3:9b:4c:
86:88:9e:76:fa:a4:80:da:82:d8:f1:4d:86:e4:c1:
0c:05:bb:bb:61:5e:08:22:db:10:37:c1:8a:f3:cb:
5c:8d:b3:12:e6:08:20:c0:a8:76:16:4f:b1:09:05:
41:c1:9d:39:2a:e1:27:8d:b8:0c:84:af:bf:44:47:
f2:cf:44:33:83:62:00:09:31:7e:55:0d:9d:4a:90:
61:d1:c4:68:eb:e9:b8:fc:77:e6:42:a8:3a:5f:80:
6a:35:d7:9d:f3:2d:9e:d7:ef:9e:00:bb:b1:4e:99:
92:47:fd:25:94:fc:75:16:9e:16:7f:d7:8f:a1:ee:
51:6a:99:79:b5:93:87:8a:2b:f4:05:03:5f:5c:2c:
13:73:36:6d:59:25:f0:e5:92:fc:5a:92:6d:ef:13:
f8:e5:c4:f4:6a:8f:82:99:a3:e6:3f:c2:0e:c2:98:
86:74:e9:b8:33:b1:e2:dc:04:95:eb:5a:24:bf:ce:
6b:7c:51:9c:75:75:50:69:61:d5:96:d7:16:0e:08:
71:0c:8d:29:39:05:c7:25:63:15:f6:a3:41:db:7b:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C7:78:BB:AC:92:2A:EF:05:E7:70:BA:39:9F:17:79:CB:B6:46:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01706fc0-ba14-3970-ac15-d24d980556ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:31:d3:af:6d:0c:79:6a:be:1c:79:e5:1f:33:28:1b:c4:72:
a3:3f:92:2d:d8:15:e7:04:cf:df:d6:ee:d7:c2:69:46:ff:21:
92:b9:67:b1:79:e6:3f:df:ca:19:42:52:4e:ab:50:04:b0:c6:
7f:07:98:91:58:3c:d6:e9:da:99:9a:c3:84:ab:fa:77:1e:95:
79:bc:80:45:6c:a1:04:e2:65:38:eb:29:95:0b:6f:fe:fb:4c:
29:bc:ae:3a:46:5b:ad:fa:89:47:64:33:53:9d:71:07:62:fc:
da:e3:d9:1d:1e:cf:c0:5a:f7:03:cc:9a:02:bb:e1:1c:49:2f:
e6:a9:53:32:99:9c:3e:cf:61:6d:63:bd:b5:41:65:80:36:df:
88:8b:7b:3e:6b:44:4a:08:65:c1:70:d3:3b:cc:cc:e4:7b:98:
7d:a2:49:a8:3d:a5:89:8a:b4:c0:aa:33:54:6e:07:69:ed:a9:
a3:55:7a:a2:e7:63:c1:ea:51:ec:1d:37:92:b0:ea:2b:29:62:
82:e5:83:c0:e3:1f:34:26:92:0b:01:3d:6d:18:cc:39:78:25:
63:1c:fc:09:cd:71:01:0b:0f:a5:d7:0b:b4:59:1e:4e:10:f6:
7f:75:11:10:07:45:bc:5d:23:54:60:62:49:22:bb:b0:a4:c7:
ee:f1:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:57:12 2025 by rpki-client