Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4baa0e-317f-3e0c-908d-3701b6aa5d7f.roa
File: 1a4baa0e-317f-3e0c-908d-3701b6aa5d7f.roa (raw, json)
Hash identifier: RM3H7LLzH7kRfhjcuY3MwQlYK7yv0084+hMgJJPbWoI=
Subject key identifier: 75:62:B9:18:96:72:DE:9D:90:80:1D:4F:C4:1B:4D:D9:B7:49:EA:AC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A20941A33D06EECDF1F9200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4baa0e-317f-3e0c-908d-3701b6aa5d7f.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.39.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:94:1a:33:d0:6e:ec:df:1f:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=99795d4a-8c7a-47ec-8e7b-36ddab59101a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:07:f1:2e:90:47:6b:86:c9:9c:b9:e2:25:
46:01:c6:3b:76:2f:d6:55:5b:f1:67:14:88:f5:78:
e3:79:03:af:8c:3e:03:36:1f:31:39:12:0a:7f:81:
2d:b3:da:f2:39:61:8f:59:88:62:de:6d:56:fe:5a:
25:77:49:18:8d:22:48:1c:b6:55:54:20:e1:e3:0b:
e7:3f:3a:0b:7e:99:1c:7c:88:b7:aa:b8:32:66:f4:
f3:4f:4b:de:46:eb:ca:0a:98:bf:e3:4b:7e:94:67:
1e:f8:0d:af:c2:e7:3c:25:45:52:5f:b0:31:21:d9:
f1:a2:77:06:a5:01:84:ed:47:b4:42:5f:f9:86:db:
2c:c9:56:14:db:ac:74:1a:76:2a:3f:e4:b9:b8:78:
61:e0:50:b7:92:42:e3:78:65:8b:af:f1:bd:7f:dc:
4c:8d:8c:98:5d:c2:e7:69:bf:4c:1f:11:c6:89:d7:
39:e1:d5:b1:21:f3:8f:84:4c:14:f4:6d:6a:35:14:
75:f0:ef:c6:61:56:73:49:a3:f7:bf:01:61:20:43:
6d:fe:2a:0b:7b:51:d3:31:a8:ac:d6:47:63:bd:50:
be:d8:6c:3c:77:80:eb:c2:d6:a5:22:89:fb:81:ae:
c1:10:a1:4d:7b:c2:33:ab:4f:11:c7:50:f6:d6:4b:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:62:B9:18:96:72:DE:9D:90:80:1D:4F:C4:1B:4D:D9:B7:49:EA:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1a4baa0e-317f-3e0c-908d-3701b6aa5d7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:46:8c:b9:a6:e6:03:88:b6:65:dc:9e:58:2b:e9:b4:f8:12:
11:69:11:46:6c:dc:14:7a:b0:09:9a:90:e0:e0:51:07:cd:0a:
fa:e5:2f:b3:be:d6:91:e0:4f:ed:a6:77:b6:c4:07:8b:95:1e:
a0:30:80:c8:d6:cc:7a:7f:78:e8:fe:a9:99:95:09:ed:48:8a:
b1:d7:fc:11:d1:d8:36:16:58:50:01:44:d5:e8:fe:ca:84:2a:
c4:b3:9c:ec:8f:53:74:7d:e6:4c:6a:c1:53:38:b8:79:24:e2:
9a:64:69:e1:a9:f4:52:36:61:12:c9:64:d4:cb:4f:e7:14:dd:
40:d0:a6:fc:49:81:a9:4c:5d:a2:f7:7d:bf:c0:6c:37:0f:aa:
d3:dc:de:4b:14:34:c0:e8:13:ba:33:28:1f:65:80:64:2f:7e:
28:33:f9:f3:a1:9c:b3:c5:8b:9c:ef:f2:dd:58:51:ad:c8:16:
0d:6f:66:1a:c7:fa:2b:9d:03:9b:d2:70:04:9f:90:bf:84:75:
bd:b0:9d:02:8a:1b:af:b4:b5:3f:a3:31:76:d1:69:78:6e:36:
84:0c:b9:26:bd:80:e3:7d:da:9e:59:01:71:ab:88:51:77:cb:
cb:d0:53:4f:9b:31:72:60:04:a8:0c:c9:36:c8:9d:9c:e6:6a:
bf:59:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:40:11 2025 by rpki-client