Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/267ff47f-2e5c-3674-9747-bdb6e5a03a17.roa
File: 267ff47f-2e5c-3674-9747-bdb6e5a03a17.roa (raw, json)
Hash identifier: 5bpc1Rn1+7ssHU9UKdZvOWPv12q0BeFrC4aOUmuSv9U=
Subject key identifier: 07:AC:DC:56:26:8C:73:E2:F4:E7:05:B7:3B:17:41:47:6C:02:57:A7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487B85BE5B6AE06A2C57603200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/267ff47f-2e5c-3674-9747-bdb6e5a03a17.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 16625
IP address blocks: 23.41.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:be:5b:6a:e0:6a:2c:57:60:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=c90d5010-c4d5-413d-828e-d90004c71c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:82:6b:d8:08:17:bb:6a:e2:80:90:89:8f:c3:
df:b8:bc:40:b2:64:1e:10:25:3d:b4:f9:72:18:1e:
8f:94:b0:4b:7d:3d:e0:6b:76:73:62:6d:1a:e4:54:
92:32:71:2e:b6:23:a8:23:99:5f:19:19:8e:96:76:
d2:66:71:05:57:18:07:94:39:2f:64:9a:86:47:77:
d9:2a:c7:94:e2:b7:0f:80:f7:b7:79:d1:a5:a9:23:
ca:20:aa:ce:e5:17:93:2b:3f:e3:20:15:12:87:9d:
eb:a4:65:7f:9e:f1:72:1c:48:0c:6e:3b:7a:f7:6c:
be:a0:aa:cf:70:31:27:68:a6:66:63:77:8f:1a:32:
92:39:9b:9e:6e:81:b8:c3:01:a5:eb:e0:ac:73:66:
23:24:dd:f3:e0:c2:d5:8f:c6:cd:ea:6c:b7:73:8b:
4f:11:c4:d9:ae:bb:4d:43:fb:fc:46:cf:94:18:13:
62:84:f7:c3:ab:05:39:38:29:d2:fb:93:b6:47:45:
84:67:3a:f2:4a:52:85:23:ab:71:8f:73:8c:f0:24:
30:05:eb:55:4c:1d:a3:d6:da:b2:72:a8:8b:ab:aa:
01:47:b9:92:57:9f:e2:7c:f4:29:b6:5b:c8:7c:2a:
e2:7c:59:6f:11:42:f6:93:a1:43:10:ca:85:68:f3:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AC:DC:56:26:8C:73:E2:F4:E7:05:B7:3B:17:41:47:6C:02:57:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/267ff47f-2e5c-3674-9747-bdb6e5a03a17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.41.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:be:c3:5e:ad:99:28:5a:53:1a:29:d5:af:6a:b6:9a:29:62:
a5:10:ed:cd:c1:1f:37:40:a7:40:0a:af:a1:a5:d6:d6:74:a6:
f4:4c:a8:70:9a:9d:5c:5f:09:d5:e7:5c:4b:54:7f:33:24:0b:
19:ec:da:28:f3:42:eb:c8:8f:ef:94:1d:f1:e8:a9:7a:18:4b:
2f:a9:99:c2:ee:e8:c9:9e:10:ba:d6:e5:d7:d7:ca:53:7c:b9:
26:b1:4c:4d:df:15:f0:ff:e5:94:49:c9:e3:6f:ba:f4:4a:cc:
15:3a:c7:1d:29:3c:5e:3d:e1:49:ab:81:f1:6e:18:2e:b9:39:
35:05:d2:3c:0c:38:f0:53:e3:71:c9:9e:be:a6:29:e0:6f:1e:
9a:19:9d:19:c6:9a:55:58:37:46:97:27:01:87:ba:c3:a5:98:
70:1a:28:38:40:93:c7:77:62:31:ae:c2:f2:a2:18:7a:df:8b:
c4:22:9c:c9:05:13:73:c9:62:6d:1b:f0:03:91:ce:bd:af:40:
54:8e:d0:d4:38:40:6e:ef:a7:17:45:ef:5f:af:2a:ce:55:43:
e7:00:24:63:ce:02:21:70:39:1b:fb:94:ab:bf:3c:9f:d3:a3:
75:7a:7b:04:86:74:d5:aa:d5:fe:9b:0c:c9:f9:d4:c7:78:35:
d0:cd:e3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:15 2025 by rpki-client