Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ff234a5-2ecc-382c-87d1-76329628aaee.roa
File: 3ff234a5-2ecc-382c-87d1-76329628aaee.roa (raw, json)
Hash identifier: srCHPQZz6PTUFs2Rai/Nz4bCqJiDeC9etDV0DHnYdXA=
Subject key identifier: 0F:D0:74:FD:01:9F:3B:6F:FA:74:A0:4D:F8:FA:0A:97:65:C7:CF:3F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A2092DFC9C716026DC72B40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ff234a5-2ecc-382c-87d1-76329628aaee.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.38.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:92:df:c9:c7:16:02:6d:c7:2b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=46d6297b-2000-4e6d-ac09-dfc1376a9c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:0b:86:a6:b0:c7:0b:5c:88:86:e2:77:98:
9e:d7:14:ef:7a:52:2d:12:aa:39:31:1d:af:fd:71:
d0:2b:9b:c9:ba:d7:aa:1b:2e:ca:39:19:fe:4f:3f:
3c:80:34:8b:8d:52:ea:d3:d1:b1:33:a9:63:dc:0d:
64:55:63:bb:f3:2d:8d:3b:46:5b:00:af:56:f7:99:
31:3d:88:34:e1:88:94:b7:88:ce:ec:ba:cf:1a:33:
0b:4d:58:c9:93:42:11:82:6a:97:ee:e9:84:d3:90:
e5:45:61:77:23:da:78:5d:f1:68:4a:b8:21:c8:d0:
38:e2:e7:49:94:01:0a:d2:69:b8:ce:d7:71:b7:72:
58:9b:31:94:5c:a4:bd:e9:63:49:92:fe:1b:39:d0:
7e:07:ca:51:56:22:74:b1:d6:5f:72:41:e9:3b:d3:
08:63:d1:49:58:1b:22:82:58:9b:64:20:48:bf:c5:
eb:56:9c:e2:32:cb:b8:e8:cb:f0:5c:8e:65:30:13:
6f:07:e9:49:69:68:10:84:90:88:08:30:97:28:80:
bf:db:4a:30:76:32:5f:66:3d:d1:58:99:73:f2:55:
b5:95:6e:be:d6:9c:13:d9:81:7f:2a:e2:63:26:16:
3a:9d:c5:46:de:e2:9b:0e:80:33:f5:7a:26:a1:b2:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D0:74:FD:01:9F:3B:6F:FA:74:A0:4D:F8:FA:0A:97:65:C7:CF:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ff234a5-2ecc-382c-87d1-76329628aaee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a9:08:ff:b8:58:a5:d9:d2:d6:97:9e:f9:e0:75:30:db:3b:
65:ad:b6:e4:40:6e:8b:0e:f7:f8:43:f1:7b:87:53:f3:c4:ba:
a0:26:29:bb:f0:8b:c8:60:8a:64:3a:3e:28:79:48:08:32:bf:
24:44:09:2d:bb:0d:b1:58:64:e7:a9:54:d7:13:7d:2f:ba:93:
ac:1e:b3:4a:79:b9:cf:32:cf:36:05:0b:15:cd:64:15:bb:f3:
33:8b:1a:25:e6:3c:ba:5f:b2:9d:df:aa:31:80:65:eb:90:2b:
a8:a5:3e:31:00:45:1a:29:a7:bc:08:98:f9:6f:4d:92:d8:17:
b3:db:f4:25:82:aa:cf:da:1b:08:9d:6b:8b:24:13:6e:5e:9c:
24:57:8c:a2:c5:e8:6e:99:60:98:67:0f:52:f1:6c:19:2a:dc:
59:34:09:46:b3:7c:0e:29:82:e2:40:ac:77:6c:96:80:49:9c:
e8:0d:b1:7c:29:3c:47:22:0d:bd:01:fa:a4:69:b3:cc:61:53:
c5:da:a5:d5:c4:7a:12:a6:f8:ae:bf:3c:d7:84:9f:8c:b0:fc:
f5:44:21:bb:cd:56:f6:d5:00:1a:77:1c:66:3b:d9:f4:a5:8e:
eb:1f:85:b0:15:c2:00:36:35:f2:2a:52:9f:93:cd:1d:8b:cb:
2a:4a:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:43:56 2025 by rpki-client