Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa
File: 429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa (raw, json)
Hash identifier: A0V0pUrNgiW3Ukpo2NT4g9eATLeCs1TUwFL6fmjdc0I=
Subject key identifier: 5D:B1:E7:5E:F2:44:19:B8:6D:9A:7E:C3:0E:97:5F:49:D8:39:A2:AB
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485B6B096A4422317EDA2E1F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 35994
IP address blocks: 23.39.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:09:6a:44:22:31:7e:da:2e:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=48982593-780e-4390-b90d-11fea0e54d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d9:ea:94:33:b8:3a:f7:3b:f1:b8:59:40:95:
b9:14:98:cc:05:92:9a:b1:4d:37:61:fb:13:8d:91:
f4:00:36:36:36:38:da:10:d3:f0:e4:91:cf:25:55:
65:11:39:e8:8b:dd:d8:10:8f:15:e8:33:d3:24:7c:
0b:7a:24:70:eb:b4:aa:d0:22:f4:ed:9e:a8:0d:a3:
7d:59:ed:bc:e7:a1:69:74:86:a5:0b:dc:06:d6:3f:
db:e3:2c:c8:9a:29:e0:c9:3a:4f:87:04:c6:6a:e1:
cd:6b:e6:1f:3d:58:89:17:5f:02:88:1b:01:84:9f:
17:1e:bf:65:68:04:14:c7:58:f1:39:cc:bf:20:18:
4f:d2:63:ff:be:88:d4:3d:5e:3e:6c:82:10:01:ad:
fd:84:8d:1a:5c:2a:6e:23:21:30:da:d1:88:7c:c8:
b8:91:61:d2:d1:5a:c9:92:11:ad:32:12:2f:7d:b9:
41:a9:58:39:03:fb:16:2c:9b:0e:b6:ba:96:8f:ca:
2b:43:18:0e:cd:a9:26:6e:6f:2a:33:5a:e2:69:92:
f2:57:48:ed:b9:1b:d1:ad:35:7a:51:c7:b6:47:d3:
4d:99:1e:c5:f7:fc:e3:00:85:cf:9c:33:ea:1f:ff:
df:32:13:90:db:30:12:97:b5:ff:43:9e:6b:fd:da:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B1:E7:5E:F2:44:19:B8:6D:9A:7E:C3:0E:97:5F:49:D8:39:A2:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/429401a2-a73b-3bc5-96b6-b0d701e95e5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:2b:14:2e:a0:e9:37:83:8d:6a:d4:d3:fb:d8:6d:8e:84:75:
34:10:75:45:86:9e:d2:7b:f7:47:95:66:63:0d:24:65:99:72:
f0:23:73:df:4e:9a:1c:77:ac:20:0f:b5:30:e5:c1:68:4f:fc:
6e:50:bd:8a:78:80:cf:6f:75:df:7c:9c:a7:23:66:ab:8a:5c:
d4:4c:ef:f9:85:9c:85:32:7e:5b:56:7c:bd:06:30:ac:c3:42:
54:96:10:4b:53:23:85:31:de:b9:7a:41:a3:55:bb:bf:5a:21:
fb:62:1e:1f:4d:a1:00:19:8d:26:92:5d:0a:a1:bb:3d:25:bf:
aa:be:f8:65:4b:74:64:4f:0c:8b:67:79:e8:a8:95:84:99:6b:
3e:71:df:53:ba:2c:7d:41:54:e7:bb:3b:93:ee:c2:18:b7:a0:
a0:f1:70:45:90:a7:f6:cc:50:f3:f9:86:1f:8c:dd:ce:5d:31:
ca:3f:08:b5:75:53:ab:2c:53:96:ac:65:c8:45:ce:08:26:9a:
c3:4e:7d:4d:26:9e:13:2f:20:c4:48:8a:b4:91:19:c0:08:87:
1c:47:38:12:ca:98:69:3f:ea:9e:53:b9:5b:6a:13:17:2c:b4:
8e:18:cf:1c:01:83:61:39:5f:5b:9f:35:9d:6e:03:d4:29:82:
d4:7b:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:08:34 2025 by rpki-client