Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa
File: 405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa (raw, json)
Hash identifier: 1yaUHK96MaWMSj/eXz7tFnx8jAfH2FCXFglkHJPYFMQ=
Subject key identifier: F0:02:BE:24:87:6E:94:FF:0C:7A:48:83:41:65:D9:03:1F:01:FB:99
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485B6B06ED4D10C2C99B52BFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 24319
IP address blocks: 23.32.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:06:ed:4d:10:c2:c9:9b:52:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=30255a78-77d2-4baf-8f56-711dbb1f6960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:21:25:94:ab:b4:b4:5a:68:e0:9b:ed:fb:
d8:9d:7f:74:31:98:79:e7:4f:48:6d:30:99:24:83:
1d:de:6d:b7:9f:34:35:57:94:8f:64:aa:bb:17:73:
37:b7:57:11:46:43:8d:ef:2f:c0:9d:43:f7:a2:fa:
24:35:9a:55:7c:d7:68:0c:54:bf:67:99:a8:c3:41:
5d:fd:e8:23:8c:93:4e:2c:1b:c4:4c:aa:7d:b1:86:
46:2a:ca:b6:4e:e8:d3:55:06:94:05:a9:f2:2f:ff:
89:3a:cc:5a:a6:5e:43:5f:d2:69:a7:da:d6:a8:67:
8e:81:91:80:80:f9:0d:72:f6:cb:aa:a4:54:6c:0d:
1a:e2:6c:fb:7a:e2:10:c5:1d:82:17:78:9e:3a:67:
0e:f5:6d:bd:b6:23:0f:e2:4c:fd:e4:1b:29:9a:64:
4d:ac:dc:58:4e:62:b6:a8:54:cb:31:1d:9e:55:4f:
6f:3f:fd:bf:fd:bb:56:3f:1e:17:f7:c0:6b:54:7d:
6d:17:c0:98:10:e0:98:58:d1:b7:3e:d1:81:01:b1:
75:e6:fb:bd:4f:b4:cb:40:30:23:38:d4:2f:02:63:
72:9e:a2:3e:eb:09:b6:1b:79:ef:95:d6:ad:59:64:
9e:1e:db:9f:44:d9:74:b0:7c:6c:02:10:2a:f8:5a:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:BE:24:87:6E:94:FF:0C:7A:48:83:41:65:D9:03:1F:01:FB:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/405a8ae2-2fdb-3e5d-a759-430a8319e34d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:98:24:27:eb:a4:ad:18:f6:59:54:d5:92:09:7e:88:d4:43:
af:a6:d4:da:cd:9e:1e:4d:49:9d:43:04:0e:84:27:98:dd:db:
73:04:d7:c8:e8:69:e3:28:06:12:c5:47:2a:c2:34:ed:27:7e:
44:ce:fc:d6:1b:73:61:ee:6f:20:79:96:c5:95:b6:7e:f8:e2:
4e:7e:0f:4c:fa:0b:f4:49:ad:63:02:e1:c2:bd:38:3a:9a:e0:
ea:c2:c4:62:0d:0a:88:4b:8b:c3:99:33:c3:bf:ad:20:bb:bc:
63:b8:9b:5d:e9:42:31:f2:7d:0f:56:6f:55:4c:6f:63:76:a6:
7a:8c:80:54:f3:8b:4a:32:60:52:c0:b6:42:ac:97:3f:bb:38:
b8:08:c2:eb:02:96:48:0c:df:93:73:ac:35:66:32:5c:40:e0:
69:be:03:2a:02:a9:e7:27:62:a4:f3:45:c7:1e:15:59:e0:0b:
b6:de:fc:e3:5d:98:e0:40:67:7e:36:7e:c5:fb:a1:20:b6:3d:
0f:55:47:a6:e0:bd:ba:42:fd:5a:a2:2b:3c:a1:00:c4:80:ea:
ed:26:6a:6c:eb:c1:c6:cf:98:7a:60:f7:a6:e9:f1:ba:5e:94:
61:b2:87:73:25:7e:a1:77:f4:18:e8:68:2d:df:6b:de:10:2e:
db:56:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:18 2025 by rpki-client