Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23a0838f-fdf4-3061-9292-4bc03560679b.roa
File: 23a0838f-fdf4-3061-9292-4bc03560679b.roa (raw, json)
Hash identifier: KzzjIP6VXIjh7na2Jq+CjUaZrx9YZMljxfJzeHpsdok=
Subject key identifier: 7C:A8:96:0A:72:38:B9:7A:60:EA:E1:B4:21:5E:86:AE:B6:CD:58:3E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847DF2F61F01D27984314560000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23a0838f-fdf4-3061-9292-4bc03560679b.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 16625
IP address blocks: 23.214.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:61:f0:1d:27:98:43:14:56:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=67fb296b-a4fa-4335-a3e8-b88ba62aeec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:dc:bf:96:d5:02:36:b8:2b:a5:11:1c:f6:
1c:33:89:ec:15:57:59:1d:cc:39:76:fa:e2:47:0c:
79:2e:54:08:f3:94:1b:89:a2:1c:a1:ff:4d:e0:32:
4a:21:f4:d0:07:7d:2a:1b:5e:84:f6:14:79:68:9b:
13:15:ac:9b:90:57:9a:b6:a6:e4:fe:2e:42:81:08:
ef:4e:ba:8b:00:cb:b5:5a:0e:d7:13:d1:1e:de:e6:
6e:3b:4c:9f:9a:44:ac:de:de:5e:1a:6c:f6:f7:0c:
e9:a8:de:a1:46:d3:0e:ac:49:8a:71:b7:d0:2f:ce:
df:47:f3:08:57:af:d5:5c:9d:78:70:4b:78:04:24:
42:4b:57:55:32:58:9b:9a:49:85:df:c2:f7:91:34:
6c:b7:f6:ed:e0:5a:b8:a1:b4:d6:37:5c:fe:3d:2a:
b5:7a:78:3d:3c:9a:2b:2a:21:51:66:af:ab:14:f5:
bd:d1:b2:b0:85:22:e8:e3:ef:d9:ff:09:72:59:4b:
32:63:a7:9f:ab:d7:c9:9b:c3:b6:6f:05:1c:af:24:
fa:41:fe:3d:10:ed:7d:26:f2:89:87:22:1a:1f:ac:
70:c7:40:7a:f0:af:23:00:7b:c5:f8:df:a3:10:95:
03:a4:b2:3f:55:f3:3a:cf:28:8a:f0:23:63:a7:a1:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A8:96:0A:72:38:B9:7A:60:EA:E1:B4:21:5E:86:AE:B6:CD:58:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23a0838f-fdf4-3061-9292-4bc03560679b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.214.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:e2:c8:21:6e:4c:c1:cd:8e:de:2f:0b:9d:1e:95:48:ac:e9:
9b:bb:28:d7:9e:79:f9:ce:87:fa:74:81:52:2b:1f:f1:e8:fd:
5c:8f:ef:4c:d5:8e:fc:16:57:98:d6:cd:13:56:c9:bc:d3:1f:
b7:f6:69:3b:15:32:96:4e:ac:5f:23:c6:c2:31:ae:6b:08:b5:
7c:8d:b9:05:f2:49:b9:4e:9c:5a:75:5c:9d:9b:0f:3d:9b:20:
f8:7b:af:1a:cb:af:7e:8c:5f:8b:a8:ff:88:21:4a:fc:26:c0:
aa:31:12:8a:26:cd:59:76:8e:42:32:e8:fc:8d:ba:6d:7d:41:
ed:ef:be:eb:97:1f:8c:9c:35:da:48:06:8f:4f:d3:57:56:1d:
76:14:da:08:36:41:a6:da:ab:28:cf:44:77:cc:59:66:0a:f6:
e4:07:4a:77:5f:df:21:b1:eb:5c:fa:62:30:87:bc:1d:3d:e0:
13:75:ee:c5:9f:b1:c0:50:9d:d6:bb:d9:ef:22:5c:6b:3a:06:
27:ea:45:5c:1b:3c:3c:02:46:7a:f6:d3:84:0f:63:3c:e7:99:
65:72:0c:24:f3:78:01:dd:f7:7b:d2:33:a7:28:fb:85:e9:24:
b4:68:ae:9b:dc:fe:77:c2:56:f8:c8:da:6a:d9:86:a1:35:51:
c6:17:97:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:51 2025 by rpki-client