Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d95a362-4da9-3abb-a605-f0a7233463f2.roa
File: 1d95a362-4da9-3abb-a605-f0a7233463f2.roa (raw, json)
Hash identifier: zJrwhDqOtU7TfZbG6r9SULewaGGQI/ilZrVqKlYtcOU=
Subject key identifier: 1C:D5:E6:3A:8E:4B:03:30:30:AB:1B:56:A8:EE:A6:3C:27:60:9B:78
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485B6B06C30202E33B748F2DC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d95a362-4da9-3abb-a605-f0a7233463f2.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.32.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:06:c3:02:02:e3:3b:74:8f:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=1b3a9e8d-90b2-42ec-a4ec-457e648361bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:32:8a:0c:f6:7d:fb:0d:99:56:37:ee:6a:
45:f0:1f:b8:59:2f:25:9d:4f:e7:45:b9:2b:a1:19:
8d:84:dc:72:0d:ac:a1:19:82:92:2b:0d:0a:43:63:
04:db:5a:82:28:00:44:7c:5e:b2:1d:52:21:c5:59:
f4:b3:fb:d6:26:b1:14:83:e0:f7:8a:24:c9:44:31:
ea:f1:27:1a:fe:34:b8:b9:be:8b:ef:d5:9d:fd:b7:
4b:62:8d:d7:06:a3:03:9b:39:09:dd:89:c8:95:e5:
af:f2:d1:34:65:b0:11:63:3b:2d:02:44:49:85:63:
69:a0:6b:91:ce:eb:09:0b:2d:a7:87:b3:da:f1:d4:
44:2d:56:07:83:ac:52:78:34:95:22:c0:08:3e:07:
a7:4a:06:7d:e7:b2:9e:fa:6b:3d:98:bf:e9:ac:ac:
8b:88:4d:1d:54:42:d8:5b:64:e1:e3:1b:a8:96:7c:
40:68:40:94:2b:88:b2:7e:fb:14:dd:9a:9d:d5:d2:
10:c3:70:8a:0c:62:5f:e4:3d:fb:a6:09:d6:65:33:
27:d0:ae:33:cc:39:6b:0e:83:b2:25:83:2f:16:a2:
b9:c5:ae:1e:9f:71:b6:27:c8:b8:78:ec:e6:2f:c2:
32:d7:df:38:3a:c7:22:a2:e4:18:08:96:65:02:29:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:E6:3A:8E:4B:03:30:30:AB:1B:56:A8:EE:A6:3C:27:60:9B:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d95a362-4da9-3abb-a605-f0a7233463f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:fe:3a:33:c1:4e:a3:cd:b7:6a:fd:d7:90:d8:b8:8b:19:77:
2b:58:63:65:a4:92:4c:d3:b2:cd:71:94:b1:68:f9:90:a1:1a:
8b:1e:2a:23:bf:42:36:9b:23:04:76:83:91:03:db:4d:88:0d:
b3:d4:fb:93:de:7f:e2:fe:fa:32:6e:60:73:2e:20:09:bc:eb:
e8:4a:ef:92:f8:5a:3e:e7:8d:56:9f:ab:89:22:0d:32:44:f0:
7f:95:e9:4d:ea:36:cc:7d:b7:5f:ef:14:83:9c:84:ae:35:a0:
ef:e2:e3:7c:3c:e3:55:99:f8:ea:ad:42:8e:b2:89:2c:45:2b:
51:01:68:02:7d:00:06:6b:16:a8:ba:08:df:17:1c:3e:98:bb:
cd:10:80:7b:b7:b3:e6:b6:c7:b4:7f:97:71:94:f8:5a:4e:af:
b6:05:49:18:36:5a:ae:62:52:68:58:77:77:10:e5:bc:d3:e7:
52:c3:12:ba:e0:71:de:b1:52:ef:44:36:e5:a4:a8:30:d0:9a:
07:06:14:ac:ed:a2:1a:39:04:8c:12:99:28:08:9c:c5:7c:ff:
48:20:ee:d0:31:32:f2:3b:96:3f:da:5c:09:89:b8:37:e7:e8:
5d:85:60:fc:c0:a8:79:e7:8e:83:b2:c2:aa:61:7a:ce:db:e9:
a8:f0:60:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:30:55 2025 by rpki-client