Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ecd9f70-c510-3af8-9e3b-cb9895806b2c.roa
File: 0ecd9f70-c510-3af8-9e3b-cb9895806b2c.roa (raw, json)
Hash identifier: nkisON2BbgpMFkluahj6TKUI69PyEUVGFUdPbBdYsBI=
Subject key identifier: 76:97:D0:16:82:70:AF:1B:B0:96:29:BF:31:B7:4D:CD:BC:5A:EB:74
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C6A12A7451A6C75BEFB0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ecd9f70-c510-3af8-9e3b-cb9895806b2c.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.34.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c6:a1:2a:74:51:a6:c7:5b:ef:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=f15c3467-34d0-42dd-b5fe-92c66d13c3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:96:7f:76:76:7f:db:44:29:bb:5c:34:76:
fd:09:1b:96:3a:fb:74:6d:62:14:51:51:8d:f5:0c:
11:fc:ee:07:e8:9d:cc:80:08:fd:96:e4:1e:c0:94:
6e:1a:e6:c8:0b:d7:4a:34:60:80:a7:0a:e5:1b:7a:
06:be:82:70:fd:2a:18:03:54:37:1a:3c:31:06:53:
7f:83:64:9f:ad:a9:18:5d:df:fc:42:8b:e3:f3:16:
76:6e:5c:2d:fb:fa:4d:a7:25:50:68:a8:0a:32:42:
28:68:46:53:d8:15:cd:b8:b4:5d:ff:5f:a8:41:3f:
8c:cf:ff:cc:f5:9b:f6:9d:0e:ce:52:7f:ea:40:08:
aa:69:0f:01:84:49:d5:c4:c6:52:6b:64:93:86:49:
b6:c0:1d:c5:89:f8:c3:27:61:58:cd:6e:17:60:ba:
a7:7f:29:0e:a9:d7:c2:40:b4:d7:70:f2:4e:09:cc:
23:f3:76:63:20:c0:70:41:b6:9b:4f:ea:ed:24:97:
75:82:56:54:28:99:37:35:d6:f6:16:c0:e8:4e:b1:
9c:ae:48:9f:8f:90:a4:ee:8c:95:65:b9:03:23:a7:
ac:b4:85:66:57:a4:14:3d:b5:ac:90:41:b4:21:09:
be:ec:42:18:bd:a0:c2:9f:ef:79:8b:ee:5a:e5:ee:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:D0:16:82:70:AF:1B:B0:96:29:BF:31:B7:4D:CD:BC:5A:EB:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ecd9f70-c510-3af8-9e3b-cb9895806b2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.34.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:1b:f7:42:c6:1b:8e:e7:f7:12:02:2e:35:9a:dc:9a:45:fe:
a1:a6:ac:80:9c:ca:a4:62:ab:15:9b:39:27:68:a6:f3:37:cc:
31:1a:45:9d:e0:49:32:57:0a:36:26:9f:34:60:5b:7a:34:c6:
d3:12:ed:a8:ca:1c:43:73:4a:8a:a6:dd:d5:ca:fb:8d:39:f1:
6a:37:fe:bf:b6:ff:64:8a:0d:9e:e4:a8:ca:1d:c4:48:f3:1d:
67:3e:36:51:78:b7:52:be:e9:3b:84:37:3f:ff:83:b0:f1:2a:
f1:c9:cd:45:d8:a2:12:f1:00:ae:0a:a4:4e:d7:4d:24:34:43:
45:a2:c6:c9:18:2f:5c:fc:17:c4:48:ac:6c:15:d8:2b:33:95:
fc:76:d0:4c:00:ae:e7:9d:66:cf:a9:5a:a3:e4:3a:3e:79:da:
cd:a2:12:72:02:b2:95:3b:86:97:45:65:c3:b1:32:99:93:b7:
85:52:49:95:b8:76:74:22:e6:9a:46:a8:2b:c1:ea:60:d4:d2:
99:9c:7e:b7:c1:98:02:40:9a:4e:98:bd:f1:4b:07:6e:9b:d8:
96:a4:56:f1:e4:91:ab:e2:99:51:20:c1:03:02:c0:d4:19:71:
71:d3:7a:9d:6c:b6:f1:fe:fd:49:8f:22:b1:16:0b:eb:de:c5:
b5:bf:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:14 2025 by rpki-client