Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e08ce07-b07b-342a-afc8-3d37ffcef217.roa
File: 3e08ce07-b07b-342a-afc8-3d37ffcef217.roa (raw, json)
Hash identifier: mB5dFDQvyTDjhxQNWvfYZzZA9LM025Sqf04QurIFbAw=
Subject key identifier: 3E:29:90:54:42:02:53:24:12:1E:D1:1D:65:13:AC:02:10:AD:42:84
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB4AD68741D6B9F9DDC9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e08ce07-b07b-342a-afc8-3d37ffcef217.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.44.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4a:d6:87:41:d6:b9:f9:dd:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=8ab0803c-c5e3-4146-9501-53fd90756654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:14:7b:b9:eb:50:d7:4e:cb:0e:45:8f:f1:
e9:37:a9:d9:94:5b:fd:ab:9d:8b:0f:b9:76:99:35:
90:70:59:4a:31:a5:50:8d:5c:45:6b:06:ba:14:f3:
30:c8:7d:a4:ac:e8:89:d6:ad:22:1e:de:a3:da:5f:
94:46:dc:eb:db:12:a9:05:6e:9b:5f:50:d4:b0:a2:
a6:cb:43:fa:d5:91:50:fc:aa:5f:79:6d:bf:96:34:
6c:99:1d:c5:43:36:5d:4c:d5:e7:71:14:36:8f:f2:
e1:54:06:72:28:04:70:f0:53:e6:07:ad:33:28:fc:
d1:1a:3e:73:2b:91:99:68:29:6d:d3:db:78:70:a1:
73:06:aa:b3:04:e9:ea:da:1e:91:43:bb:aa:31:59:
a2:64:63:cc:a5:69:ed:58:be:8c:b3:7b:7c:69:8d:
2d:6a:20:33:39:b8:29:45:0a:78:60:06:d8:99:47:
11:c5:6f:e1:b8:51:8c:4c:9b:f1:b0:a6:5a:4a:cd:
55:64:e2:25:81:47:cc:c3:ee:c9:ed:55:37:55:61:
28:e1:3b:85:d7:cd:01:8b:85:56:69:45:bc:b8:f8:
19:df:c8:ee:10:c9:7d:e0:25:be:d1:67:d9:41:b4:
e5:ce:cb:af:4e:5b:8e:13:f1:a1:30:79:62:7b:0a:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:29:90:54:42:02:53:24:12:1E:D1:1D:65:13:AC:02:10:AD:42:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e08ce07-b07b-342a-afc8-3d37ffcef217.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:f4:22:92:e2:a5:3a:4d:a2:b0:94:3b:f8:10:92:a2:88:35:
dd:18:44:08:e3:3d:7a:9a:4c:eb:78:93:b8:f8:88:23:7e:cb:
9e:de:e4:ff:56:6c:84:8c:fd:f4:14:12:32:c3:22:a4:4d:64:
36:83:b1:b1:c5:cd:89:bf:e5:13:8d:a8:6b:8d:ec:47:ab:5b:
88:37:b3:5f:ac:51:bd:2e:03:dc:34:85:d8:39:4c:02:4e:65:
87:ae:33:db:f9:4c:1d:09:8f:c4:ee:75:da:9f:1d:92:01:df:
a0:68:77:aa:6e:27:0d:88:f1:79:bc:9a:23:02:08:52:9e:a1:
37:c5:58:91:17:2a:f7:d3:d9:a5:42:b6:f1:82:72:bf:e4:79:
4f:92:ed:47:ed:1b:6a:2a:27:18:2a:38:4a:1a:c0:42:10:10:
1f:3d:02:60:06:b6:16:59:b2:b8:17:5f:fa:19:93:d4:ba:ae:
fb:11:2c:2c:5a:25:f2:87:94:55:65:58:07:db:3f:76:e3:51:
ac:a1:a4:f7:86:49:48:b3:94:6c:18:69:63:26:5f:2b:14:65:
52:5a:f8:1b:97:47:79:f0:16:a2:a7:aa:ba:62:a5:78:af:38:
d0:98:7e:b7:01:b2:c7:cd:de:d6:9a:ac:6a:9c:a7:90:ad:0d:
a1:e6:f7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:53:05 2025 by rpki-client