Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/073df92b-7fe5-316f-b1c0-c7fb37d3d9d0.roa
File: 073df92b-7fe5-316f-b1c0-c7fb37d3d9d0.roa (raw, json)
Hash identifier: f4Kczsh7JqnmwdUZgyCYU5BAtGUBPZ+Fl6es2Azqk9w=
Subject key identifier: 12:92:5A:9E:27:3B:FC:96:2D:5D:2E:01:FC:09:40:70:D5:59:6E:84
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848451597B2F4915AA0FDE02E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/073df92b-7fe5-316f-b1c0-c7fb37d3d9d0.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.2.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:97:b2:f4:91:5a:a0:fd:e0:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=db4bbfd5-fae4-45c0-a33c-a98ff50e0935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:e4:a2:28:a5:8d:b0:7a:37:a3:9a:3f:e2:
b6:c2:aa:96:67:f9:dc:ea:b7:9b:10:b5:ee:09:b0:
44:a2:a4:a6:d1:64:23:92:c1:f2:ba:06:9b:19:79:
49:85:5a:8b:8b:da:62:77:d5:04:69:b7:bf:6f:02:
75:85:de:a2:29:26:0d:e4:8b:9c:ab:92:c0:43:22:
a8:4c:b1:d3:dd:05:2a:ec:3c:0c:9a:9a:9c:07:8f:
dc:4a:30:e7:95:b8:68:21:12:1f:96:37:51:a1:28:
2a:fe:b9:2e:34:7b:04:4a:60:8d:41:b3:41:5d:65:
26:d4:ab:be:e6:99:1f:78:54:20:d4:d1:29:56:86:
a4:ba:4f:05:22:5c:52:df:4e:5f:6e:da:19:92:d4:
62:35:2c:0a:88:8b:7e:0f:b2:f1:0d:7a:54:53:15:
79:99:d7:23:50:bd:01:da:d9:0f:bc:2f:52:b1:a7:
f2:2b:95:07:67:06:41:7d:81:d4:4b:ff:79:24:66:
be:45:44:f6:77:d0:aa:6b:8a:55:58:f7:9e:0e:77:
34:eb:2e:08:70:77:90:45:e5:56:8d:66:2d:63:16:
bf:cc:92:13:40:6f:f3:68:b5:98:87:ce:29:36:b0:
00:16:ad:01:24:44:6a:ad:b0:c1:6a:57:8c:da:58:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:92:5A:9E:27:3B:FC:96:2D:5D:2E:01:FC:09:40:70:D5:59:6E:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/073df92b-7fe5-316f-b1c0-c7fb37d3d9d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.2.34.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:20:38:36:1c:6a:8a:10:82:a0:0b:5d:58:e2:b0:7d:a9:05:
1b:80:2f:d1:92:99:56:be:45:9a:71:4a:89:07:ce:e9:f0:8e:
d4:3f:98:50:55:f3:cb:13:4e:de:0c:c7:a3:a4:d7:ab:5f:67:
38:7f:65:fa:4c:eb:57:68:dd:bc:96:13:cb:f2:f3:b5:12:d2:
b6:a0:f1:62:cf:1a:80:56:0f:36:11:72:55:ae:3f:e3:fc:2a:
e9:e7:20:73:3f:e2:f2:fa:d3:f5:7c:1d:9d:fe:1c:21:df:a1:
b7:87:a7:a7:71:d5:70:f4:65:90:a7:7d:06:f5:c2:ce:10:fd:
a3:7d:6d:5c:f3:df:54:74:e8:57:e6:e8:d7:35:c7:34:9b:57:
1c:dd:29:21:27:b7:34:70:c3:de:59:20:4d:51:96:af:ac:63:
49:11:73:50:2a:1b:f2:3f:0c:35:e7:95:ab:45:d0:19:a4:3f:
66:49:ee:f6:7b:14:37:32:e4:db:f8:3a:06:ed:c2:f1:d5:1f:
30:0c:83:f4:e7:92:95:9e:9f:95:a1:f9:60:c5:32:5a:c5:0c:
86:05:09:dc:34:d9:84:ee:cb:47:c1:eb:a3:72:48:51:f1:72:
32:79:30:3b:f1:16:4f:fc:64:1e:80:db:f3:ee:c7:7f:02:d2:
34:aa:1b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:29 2025 by rpki-client