Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b95c541-0faa-37bc-aed5-473b1917e42e.roa
File: 1b95c541-0faa-37bc-aed5-473b1917e42e.roa (raw, json)
Hash identifier: mxN/S7XT1gpKuixNPWaeXFMvK2gfBFOjduN7mSxfhDQ=
Subject key identifier: AB:D3:D2:26:44:87:64:EE:4C:8B:FE:BE:3B:F0:49:C6:20:68:D0:7C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584834558C3EF13293F0CA6BE820
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b95c541-0faa-37bc-aed5-473b1917e42e.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.67.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:8c:3e:f1:32:93:f0:ca:6b:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=2cbcdf39-db39-43cd-a6d8-c433fba9e001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:04:38:d6:f0:03:0d:6b:9b:be:59:f9:ed:
73:d5:fa:a1:a3:7f:ad:66:e7:1d:74:1e:fb:8f:85:
36:fc:85:0c:51:d9:32:3b:70:da:82:b2:14:d9:9f:
60:d1:99:19:fb:b3:88:4e:ee:bc:7f:34:8c:73:7e:
af:34:ba:03:20:3b:7e:5c:4f:0e:63:64:f1:a3:cd:
4d:df:d6:e4:e9:82:50:9a:7b:00:d0:c6:3f:46:08:
cf:17:6b:5e:a0:9c:6f:2b:6c:e8:f3:99:fc:f8:3d:
48:2a:b4:eb:2c:91:4a:5c:c9:1f:9d:19:fb:c2:18:
e9:b1:93:69:97:34:01:80:76:53:d5:92:de:16:3a:
28:77:3e:79:9a:51:48:91:b8:80:a0:51:bf:6b:af:
c3:0c:8e:83:9a:1f:f3:0a:a6:d7:b4:26:73:8a:3b:
af:19:27:22:74:f3:32:db:1b:34:ef:18:75:9e:91:
91:4d:f5:cf:43:7d:e4:1a:92:cd:62:a4:d4:6b:1d:
13:68:1f:b8:34:25:f1:d4:c8:1b:c4:e1:4d:52:ff:
4a:44:83:50:1c:43:5e:c3:ea:12:4f:c5:c5:1c:d6:
da:17:1c:34:26:ab:40:68:df:b6:45:69:87:66:90:
a5:f1:57:aa:34:b7:42:b3:cc:f3:42:04:74:78:93:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:D2:26:44:87:64:EE:4C:8B:FE:BE:3B:F0:49:C6:20:68:D0:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b95c541-0faa-37bc-aed5-473b1917e42e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.67.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:a1:da:5b:17:33:98:36:97:ca:c5:93:2e:2a:f7:56:c4:89:
9a:ac:95:db:e6:47:0d:6a:1e:f5:fe:66:aa:0e:fd:dc:65:76:
42:fe:69:38:72:15:b9:5c:7c:75:4a:2f:a7:2b:ce:64:88:5c:
f8:85:05:7b:1b:df:2c:14:44:fb:38:62:f9:e5:1d:57:9b:92:
bb:53:53:13:8f:90:96:42:41:64:c5:6e:8e:f8:64:0d:4e:f4:
5d:6c:ca:f6:4d:a7:79:b2:2b:43:fa:be:a0:c3:e4:53:af:8e:
52:4c:69:70:36:98:4e:4a:06:9f:04:c7:ff:77:60:bb:7f:0e:
d5:97:e9:21:63:b7:33:96:d8:ef:29:48:b3:c9:f7:43:86:0a:
ff:fd:41:02:7f:91:6f:6e:73:21:29:47:e1:6d:e0:22:77:97:
e0:3f:ba:87:59:81:ec:2a:88:9d:b4:c8:c2:f7:67:23:c4:fb:
55:92:b2:61:98:23:aa:e2:32:a2:37:3f:82:0f:ea:cf:23:81:
d8:eb:17:90:e8:b2:59:fe:3a:d6:e4:c9:d8:d1:fd:57:a0:0f:
ea:a6:46:5f:43:ef:1d:bf:a9:65:93:b2:6b:68:0d:18:3f:96:
11:73:f2:10:1d:56:cd:46:37:d1:13:a2:77:6c:d1:45:18:28:
6f:3b:aa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:51:23 2025 by rpki-client