Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01d475ab-a03a-375c-8d98-1d9c959d74da.roa
File: 01d475ab-a03a-375c-8d98-1d9c959d74da.roa (raw, json)
Hash identifier: 0Kejp9Zbosv0n+gmCg4c6dm6D5RNwLczcv8YZK+FavY=
Subject key identifier: 8F:E5:C2:B9:23:1C:D2:DF:22:CA:91:08:18:3E:26:13:AB:8C:D5:1D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584800AF9C810BB94FF9319B6540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01d475ab-a03a-375c-8d98-1d9c959d74da.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 16625
IP address blocks: 23.9.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:9c:81:0b:b9:4f:f9:31:9b:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=7b0b2bbb-83d7-4ff0-a690-8ce2372c6b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:78:b7:9c:1b:2a:7a:41:a9:4c:35:39:6a:
df:18:ca:6a:f7:1e:52:5c:31:9c:0a:25:e4:e9:c5:
39:e7:c8:fb:76:b1:6b:06:0a:a8:79:4a:e2:1a:51:
09:c4:aa:08:1e:e0:8a:26:d7:26:6a:83:68:b0:3b:
71:f8:ec:91:32:1b:aa:00:95:79:1c:77:d4:73:f6:
b4:72:4b:7c:6c:79:1b:e5:6d:60:4c:82:c3:86:c9:
31:d8:15:93:48:8d:53:75:fe:07:1d:11:92:b9:73:
9b:8c:08:6f:db:fc:d9:80:73:2f:ef:4a:c4:e7:d3:
da:f2:bc:b8:a0:d5:ac:87:d5:9b:f1:6d:65:a5:d8:
cb:28:95:4a:53:7d:0e:23:b8:0d:88:76:0c:da:8b:
d2:27:46:4b:c6:36:15:cc:08:29:be:a8:db:34:a2:
ff:35:cc:0f:d3:13:6f:b8:e5:fd:fe:77:da:95:4d:
d5:40:72:55:6a:7e:04:44:de:51:a5:a0:5a:72:e5:
41:91:72:39:4a:ae:a1:7a:a7:1a:28:76:b1:80:31:
88:d6:0c:e6:bb:86:85:00:17:71:01:28:9d:d5:f4:
75:ca:54:5a:b0:d3:40:7d:81:cd:4a:0b:56:97:e9:
b1:1f:2a:da:ea:bd:ad:81:48:c0:d2:7b:75:2c:18:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:C2:B9:23:1C:D2:DF:22:CA:91:08:18:3E:26:13:AB:8C:D5:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01d475ab-a03a-375c-8d98-1d9c959d74da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.9.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:a9:af:59:d3:c9:ae:8c:bd:97:e6:a9:b3:18:ca:e7:56:34:
fc:7e:1f:63:58:6b:6a:18:9e:6d:40:3a:42:19:3e:97:fc:7e:
8b:a4:aa:f7:91:58:cb:cd:cb:9c:fd:4d:a3:02:7f:fe:64:a3:
07:ff:4a:24:78:df:c5:e6:e4:fd:57:95:ab:47:3f:c0:fc:44:
c0:88:b5:ce:8e:82:49:5d:21:a3:49:60:ea:88:89:7d:e3:8b:
05:db:da:7f:8f:14:53:02:fa:dd:9c:54:06:7c:84:c9:5c:9e:
fc:48:d8:63:03:f7:a0:1d:56:96:92:e9:6a:66:94:22:39:75:
49:5d:6c:43:56:5c:53:20:e3:45:8d:25:af:89:b9:c5:f9:3d:
dc:7a:c7:28:c2:d5:ef:64:f6:62:3f:86:26:96:c4:d7:2a:ba:
60:e1:ac:b1:b5:cb:16:d9:97:a2:70:9e:91:c7:70:9b:cd:12:
df:c9:f7:ec:3e:07:c5:ff:0f:6d:8e:11:55:79:dc:56:51:ce:
7b:95:31:fb:a9:0b:a0:5b:8b:90:db:a6:c1:5e:08:87:63:80:
df:b1:9b:15:2c:3c:4b:6a:4f:b7:67:4f:90:46:0c:75:30:18:
b3:02:c7:bb:d4:02:85:2c:7c:ef:91:0f:ca:df:d0:f8:44:13:
de:10:5b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:23 2025 by rpki-client