Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa
File: 3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa (raw, json)
Hash identifier: VP5icsWs7ZSyp2PjtpXpTlHyp9AIpjgMtES7Iwl5lf0=
Subject key identifier: D4:83:7F:B8:0D:93:ED:BF:38:7D:B6:E5:B2:1F:C4:6D:2C:8C:2B:6C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A2097D33C2E8650AFAC1300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.36.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:97:d3:3c:2e:86:50:af:ac:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=868ebf60-3ec1-41ca-aac5-ccc1aa866631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:13:8c:5a:82:12:8b:df:7f:79:41:75:ca:4a:
26:f0:8b:53:8d:8c:b3:95:19:10:2a:19:99:ce:24:
21:91:de:45:f7:af:83:5f:9d:8f:ac:7e:cc:48:60:
af:a2:b0:38:d5:e2:2f:1e:0c:1c:f1:eb:b5:59:c3:
7a:37:ef:f3:8d:64:41:f2:0d:ae:e1:f9:b3:50:6d:
62:5f:81:4a:26:cf:98:ca:d4:fe:8e:55:d4:75:9b:
60:fe:79:1e:47:e6:ef:18:cc:e5:0a:ec:40:cf:37:
3f:c7:b3:a0:37:5d:2a:ce:12:e9:83:2c:56:ca:9b:
36:f6:ff:c4:27:6c:73:d5:96:ef:d1:c7:87:8d:2c:
b5:f0:6f:a2:b6:eb:9a:6e:70:89:f3:ba:fc:a8:5b:
bc:bc:d2:a2:db:bb:2f:93:20:09:39:e2:7a:c4:ed:
cf:19:b7:14:5c:75:e4:05:c7:00:81:1f:01:c3:5b:
78:38:81:15:a1:9e:6e:db:ab:1c:0c:47:ee:26:68:
89:78:2d:a4:8b:f2:c2:3a:35:a2:ed:d9:2a:30:71:
2e:43:b3:88:0a:da:e6:86:03:4b:17:fd:27:52:25:
88:33:17:9c:e3:62:f0:36:dc:57:bc:58:db:3e:84:
c0:d9:7c:db:db:d6:8d:cb:90:b6:76:c2:17:5c:5a:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:83:7F:B8:0D:93:ED:BF:38:7D:B6:E5:B2:1F:C4:6D:2C:8C:2B:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f385ea2-7bfe-3dda-98c6-d04099e4ab09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.67.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:d6:56:ec:3f:de:96:2a:cd:5d:0f:7f:f6:19:bd:54:2b:d6:
f6:94:b0:e7:7e:f9:d8:20:57:76:9a:13:88:f7:59:1d:fc:6e:
f7:e1:4c:fe:56:f7:63:28:45:d7:a6:2b:e8:62:ee:ad:db:a4:
4e:6b:de:93:52:1f:7b:fe:4c:ca:ec:17:a5:4a:ee:0d:2e:04:
d1:b8:4f:2c:9d:79:4e:c1:e0:53:78:bf:ac:8b:a9:4d:10:61:
e5:40:43:f6:38:81:bb:bb:f0:9c:ad:d5:89:18:a0:55:83:70:
5c:56:65:95:51:ad:a1:30:e6:0f:a6:97:49:4d:a7:87:cd:26:
4d:cf:18:74:4a:7f:ba:08:4e:fa:e1:1e:c9:bc:68:8a:58:a7:
30:1f:ad:21:aa:fb:57:cd:29:1c:10:8a:28:db:73:85:fa:70:
b7:92:12:e6:b2:94:7e:32:24:e5:ac:20:04:54:cf:d2:e5:4d:
53:30:36:59:76:ec:4b:bc:66:fc:b3:e2:19:58:22:b1:88:a3:
10:24:4b:61:93:01:cc:a3:2e:0a:87:d8:d5:bc:e5:96:b4:72:
f5:fa:e4:26:96:93:e7:19:75:f9:03:51:2c:c7:44:01:cb:a9:
98:26:20:69:84:76:a3:2a:f8:c0:b8:16:8b:76:87:e8:dd:b7:
24:35:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:30 2025 by rpki-client