Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4152db43-4edd-3fc1-8db5-294f76552254.roa
File: 4152db43-4edd-3fc1-8db5-294f76552254.roa (raw, json)
Hash identifier: Fn+CrL2jfQlS2kqiYuGGQGRq2ox7f+4mSAK0GiaxJEM=
Subject key identifier: BD:7C:D5:B7:46:1B:9B:78:20:BB:FB:D8:8C:AD:64:CA:DA:BC:D2:87
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB78A542F1CAB7C44F6240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4152db43-4edd-3fc1-8db5-294f76552254.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.45.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:78:a5:42:f1:ca:b7:c4:4f:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=c572e40b-e11c-48c9-9c22-f088885923ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8f:d0:e4:83:32:78:1e:75:df:3b:cf:37:b4:
93:4a:64:87:f8:a9:1c:20:46:8f:9c:04:c8:4f:9a:
5f:d4:59:fd:bb:87:4f:02:a9:a0:2a:79:76:4c:1d:
92:37:d4:2b:67:50:56:55:f9:98:85:67:96:99:65:
34:a0:ae:22:db:f6:d8:0a:64:fe:f3:2a:fb:9b:03:
c0:1c:1f:05:0a:79:b9:d3:fa:9b:7f:88:09:54:51:
63:77:d0:e1:4b:e8:19:72:ad:7f:e1:d5:9c:02:67:
c1:f4:86:66:66:c9:60:68:17:fa:05:66:b4:af:b2:
20:ff:94:58:6c:14:09:60:ec:22:df:4f:92:6f:1c:
b2:68:5e:fa:53:0d:2c:35:79:53:c9:a2:ba:85:33:
f2:3c:62:76:6d:50:85:91:ff:5a:00:72:c7:08:2c:
e6:e1:72:90:9a:06:08:52:11:19:b7:82:f6:49:08:
86:10:bb:11:db:ee:40:52:c3:5b:4f:f4:83:99:30:
e7:66:c9:aa:36:fb:79:01:05:d7:2e:6e:57:4a:2c:
28:66:9f:b2:0c:10:1e:74:7f:0a:b9:08:c1:70:03:
cc:86:09:c1:3c:ce:c4:91:c7:72:12:05:01:48:37:
a7:0c:e8:86:b6:45:f7:6a:f9:b2:f1:fe:10:15:ea:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7C:D5:B7:46:1B:9B:78:20:BB:FB:D8:8C:AD:64:CA:DA:BC:D2:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4152db43-4edd-3fc1-8db5-294f76552254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:1b:98:d3:31:14:3b:1e:7c:02:ef:a8:14:75:3f:00:6c:67:
13:c6:f2:aa:71:ac:8b:4b:7a:8e:cc:b6:74:b2:86:ab:8d:d9:
f3:71:2e:12:c4:66:9b:dc:62:0f:95:31:24:42:59:cd:d4:60:
cf:73:eb:fd:07:5d:8b:db:a0:54:1c:2a:2a:af:c1:50:ef:63:
75:7d:d9:0a:50:98:5e:1a:b4:8c:7d:4f:dd:69:97:d4:9e:f7:
df:8c:58:16:cf:94:24:88:f3:c8:38:b8:00:57:eb:c7:28:2d:
fd:a3:a4:67:57:b8:9b:87:93:c7:78:16:65:89:8d:74:f7:f2:
b5:4e:49:54:9c:57:41:f2:a1:31:87:66:60:00:f7:0b:0c:61:
aa:90:ba:4f:a7:e3:3e:83:58:62:4d:4d:26:51:00:b2:e1:8e:
01:6d:8c:3f:35:bc:15:9f:b1:fd:9e:28:ae:fc:a5:5f:62:52:
70:d2:4b:a5:a0:fd:9a:17:cf:2b:94:d9:86:43:0e:2c:8d:10:
bc:52:0d:81:0f:ef:46:76:2b:4a:4b:82:c3:f8:b2:88:ff:11:
9f:96:21:45:9b:81:70:d6:dd:98:97:d2:3c:a0:43:67:5c:87:
eb:7d:aa:09:10:a3:9f:ae:d2:db:91:5e:a5:f8:5e:27:06:a1:
d3:8e:a4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:27:03 2025 by rpki-client