Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a2c4db-ab21-389c-b109-f8529e7aebf1.roa
File: 40a2c4db-ab21-389c-b109-f8529e7aebf1.roa (raw, json)
Hash identifier: 6Ec/s/79NV6onc3u9SmC6fXwOWqYDAyIwJZrrJo9VZY=
Subject key identifier: 24:97:E4:3B:E3:2D:01:00:CD:87:28:02:DE:E5:2E:AF:95:E2:27:BC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485E35C39556C7998A5C0AA4C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a2c4db-ab21-389c-b109-f8529e7aebf1.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.53.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c3:95:56:c7:99:8a:5c:0a:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=09260341-637e-46bb-8daa-51b062427b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:43:27:16:8a:30:ca:08:c1:73:50:b4:2c:ef:
d1:27:1b:4a:55:31:d6:d5:fb:a1:f6:f1:21:c2:08:
1f:57:09:82:26:78:34:09:45:b0:75:10:a7:b0:c8:
16:54:b1:a2:36:c9:09:11:c4:07:bb:5c:6b:e4:0b:
3f:5c:8b:08:96:02:3c:69:14:1c:f4:a5:d8:4c:15:
27:0f:33:de:f6:b8:26:22:c5:54:33:01:f8:23:d7:
3c:03:ce:73:4b:b5:cc:45:25:fa:9c:75:20:6b:8e:
d0:36:7f:8a:4f:02:c3:1e:e4:a6:fa:3d:27:c8:2a:
a9:4b:a8:93:3e:a9:df:b0:1b:96:1e:ba:e6:b9:be:
9c:40:86:6a:f4:a8:fb:73:2d:97:17:72:6d:f5:3f:
7e:43:7a:36:89:40:3d:e9:1f:f6:2b:dd:d0:6f:1e:
b8:23:3a:03:22:30:8b:30:b7:62:e8:d2:e0:e6:46:
98:34:e5:9f:b6:58:53:42:5a:49:dc:dc:2b:60:22:
0e:d6:34:3e:98:b8:7b:1c:1e:a2:02:89:d7:34:ef:
4d:5b:f3:c4:af:a3:d5:96:e3:e2:3a:2c:04:32:93:
c7:0c:6b:5a:6b:de:95:0c:72:58:bb:95:f7:a2:e7:
79:db:89:a8:10:26:5d:94:7a:3d:a5:ec:8e:d6:d2:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:97:E4:3B:E3:2D:01:00:CD:87:28:02:DE:E5:2E:AF:95:E2:27:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/40a2c4db-ab21-389c-b109-f8529e7aebf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.53.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:92:d1:67:79:df:5b:f7:1e:ac:b9:28:73:b1:67:a9:05:61:
da:67:6d:f6:e7:cc:ed:24:f0:f1:fe:9f:06:a0:66:96:1e:57:
c5:0d:83:89:e5:5f:77:af:b7:82:53:ce:f6:f2:ad:fe:55:04:
df:66:45:88:5d:c4:e8:a5:62:07:c6:73:c5:ba:0a:55:96:6e:
b9:48:4a:ed:1e:57:d7:c2:6e:d9:43:69:25:2f:a9:f1:45:75:
1c:28:69:59:df:2c:84:5a:95:23:59:e4:44:46:1e:a9:94:2d:
60:c9:47:a9:b6:6e:bd:2f:19:34:50:cc:c0:15:9b:5f:d3:7b:
cb:ff:cf:ea:4d:1d:ae:1a:ad:b9:f2:8b:ba:1d:33:92:32:de:
eb:b8:72:71:7e:44:a9:4a:03:9f:1e:97:76:49:35:d0:5c:13:
dd:43:3b:90:c9:68:a6:a3:7a:68:65:1f:03:14:17:7a:e3:82:
c4:01:de:d3:d7:49:8d:15:81:1a:0a:96:30:cf:ef:f3:08:1a:
d6:f5:1c:5e:0f:67:54:47:f1:e4:f4:22:5d:73:99:54:f2:ff:
98:81:dd:75:51:97:f2:d3:99:f6:5b:c0:b5:94:9b:f6:02:da:
75:9f:d5:4e:db:93:c6:71:c9:e4:14:2c:96:fb:c3:a4:ea:74:
c1:cf:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:25:02 2025 by rpki-client