Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa
File: 25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa (raw, json)
Hash identifier: jrZF5FmkDIShVEDpfsfXrI6rcBqsHbwn/VhCRFZG7ag=
Subject key identifier: B0:69:C6:75:34:06:56:01:D4:23:AC:04:A5:42:CC:CE:2C:27:C5:94
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848748B1C9AAB0F9E904861E0F8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.207.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1c:9a:ab:0f:9e:90:48:61:e0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=c7420c2c-7bbe-48b9-a08c-d07847704073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b7:b2:ce:2b:28:83:9c:e5:9b:d4:31:ea:bd:
0b:4d:c6:ca:90:35:7a:d5:6c:f2:2b:53:ad:33:e1:
4c:34:e9:9a:55:3b:9a:80:cd:57:ec:7f:67:ed:23:
d1:6b:ff:6e:92:97:cb:58:ca:09:7e:a3:e1:7e:f6:
02:cf:85:20:d8:d7:4c:ac:b6:4a:ce:f3:d8:3b:01:
d5:03:cb:95:21:81:51:db:42:b9:e0:cb:b2:0c:a5:
7d:d3:38:7d:f3:e8:c0:7e:68:d7:4e:09:3b:38:cb:
37:6d:10:7f:35:a8:51:41:75:53:4c:20:12:a4:6a:
c9:1e:e0:71:78:1b:4d:ae:35:4f:e4:2d:d3:47:75:
01:5b:83:d1:2c:89:0b:19:60:fc:43:d7:f7:7a:77:
55:03:f1:de:f3:b2:23:cc:3d:97:a3:48:8d:92:e2:
9e:ea:70:73:50:35:e6:5f:76:9b:cd:a7:68:1f:b3:
8b:57:24:ad:90:34:36:1d:fb:39:2d:f3:bf:08:50:
59:23:96:a0:ca:1b:26:36:cb:f1:1e:a3:c1:bd:e4:
f6:f5:30:19:2f:02:5c:58:0a:d5:e3:29:34:4a:49:
f1:1e:5d:ce:46:4c:18:13:97:10:e8:12:5d:3c:2b:
5f:5a:56:9e:c3:d2:de:83:ea:11:d6:62:f4:61:bb:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:69:C6:75:34:06:56:01:D4:23:AC:04:A5:42:CC:CE:2C:27:C5:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.207.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:dd:87:10:b3:0d:1e:8f:7d:2f:1e:0e:c5:4b:f8:1b:50:95:
5f:36:1b:f7:dd:0a:c8:32:c7:29:56:ca:46:6f:9f:bd:18:ba:
99:a3:0c:1e:d5:7e:79:68:dc:66:c3:78:a5:be:73:11:29:ed:
d2:7d:4c:93:46:b5:64:9e:79:ce:d0:88:ed:70:ce:7c:d2:00:
b9:6a:8f:75:e4:c5:7d:81:02:97:7b:67:da:52:58:ff:55:a6:
eb:06:11:f2:0e:10:71:10:dd:f5:88:f7:91:97:5d:e2:b4:50:
f3:d9:c7:fa:eb:63:47:e4:c3:6b:d8:a6:ad:eb:6c:4d:f9:10:
e3:86:0f:da:70:6e:d2:14:d2:32:5e:bd:c3:a8:a0:cb:4a:b1:
3e:33:95:94:e5:26:40:b7:20:72:4e:22:1c:87:33:69:ef:18:
7a:98:99:7e:d6:25:83:22:e6:30:ad:3c:81:8c:1b:53:cc:8a:
98:29:3a:8e:a7:0b:c3:33:eb:51:a3:96:db:95:33:1a:4f:84:
2d:2b:9b:00:eb:c5:0b:55:61:76:ff:26:73:97:d4:0e:84:18:
ef:95:90:8d:1b:51:c5:39:48:4c:b8:64:23:6a:6e:55:a7:d3:
f6:d5:28:2d:0c:64:54:f8:6f:fd:1f:ea:d1:1f:32:f1:7a:3a:
66:8e:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:02 2025 by rpki-client