Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/447bfd64-181d-3de9-bf44-3662b1042e7e.roa
File: 447bfd64-181d-3de9-bf44-3662b1042e7e.roa (raw, json)
Hash identifier: qZhhVSuLdu31twVE/qR174Smu3UeM0niIPHLIHK8t90=
Subject key identifier: 20:EC:59:EB:54:F9:92:DA:1E:BA:02:76:96:0D:C1:2D:E6:90:40:E4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848854B6D26E276761C9F4F9440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/447bfd64-181d-3de9-bf44-3662b1042e7e.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 24319
IP address blocks: 23.53.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:6d:26:e2:76:76:1c:9f:4f:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=29c2b4d8-7d8b-43a9-ae63-d38b867029d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:20:c9:97:39:ba:31:87:a6:2d:96:8b:8a:
f7:ae:7b:5f:05:33:f0:4a:1c:3f:a3:10:88:62:43:
e4:c9:f9:58:68:9e:aa:6d:a6:fe:0b:f7:cc:63:58:
8d:89:d0:1b:e5:77:22:85:0d:d8:90:bf:ff:a2:63:
06:ce:38:c6:4c:c8:4c:bc:3e:20:46:d0:4e:91:87:
0b:04:64:1e:52:f3:8d:89:1b:87:14:6b:47:6b:5f:
15:c7:68:e0:06:55:db:6b:5e:24:41:6a:54:d3:5f:
73:32:18:26:a9:ad:cb:4e:92:7a:eb:2f:86:7a:30:
07:39:17:65:98:a5:42:60:81:3a:3b:24:4b:7d:af:
57:28:1d:f1:84:c1:41:38:a3:a6:53:54:0a:38:c7:
70:7f:6b:5f:33:6f:c1:66:79:32:72:ec:bf:f3:60:
b2:67:97:7f:76:15:83:83:1a:43:e0:a2:80:2b:e7:
85:2d:53:1e:91:4d:12:11:bf:2c:3a:e2:69:99:01:
d4:ef:3b:9e:5f:f8:44:a8:29:44:f0:43:f6:0c:7d:
c0:14:c7:72:4e:2a:89:30:4c:00:6b:47:d9:6e:0d:
af:b0:c3:ed:b7:8e:85:20:25:f1:4d:db:ed:e0:06:
f4:b5:37:b1:75:95:3d:cb:bd:66:4a:41:26:22:69:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:59:EB:54:F9:92:DA:1E:BA:02:76:96:0D:C1:2D:E6:90:40:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/447bfd64-181d-3de9-bf44-3662b1042e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.53.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:06:55:92:2a:7a:28:53:41:64:05:9a:3c:bd:bc:7e:a0:c4:
0f:df:e0:c6:7a:1f:b2:15:fc:6b:8c:56:09:55:9e:1f:8f:4f:
4d:ef:4b:48:ae:8d:cf:2c:a4:fd:87:dd:dc:39:0f:50:24:22:
e3:b5:72:8f:74:0c:b3:22:8a:98:a4:8a:0d:de:c5:34:3d:20:
01:de:c2:bd:a6:3e:29:19:38:bd:bb:46:6a:c3:21:01:bd:13:
42:02:93:6b:b3:15:59:64:ad:4c:56:7e:55:f5:4c:18:40:e6:
52:30:47:b9:c4:ad:56:67:60:07:96:83:b6:a6:7b:4a:ae:f7:
b4:74:cf:9a:d4:92:49:ee:bc:46:2e:88:d2:2f:f0:8a:a7:7a:
03:a6:17:a5:01:96:38:2a:c0:94:46:08:69:cc:8b:73:d0:ec:
bc:c6:af:0a:a9:c4:93:f4:77:1d:9f:d9:c9:56:c7:22:e0:67:
af:e6:fb:ae:9d:fa:5c:df:ea:88:52:1b:95:71:91:8b:e1:bc:
c6:aa:f9:b8:1b:46:d9:fe:1a:53:45:89:42:09:9a:1c:4d:9d:
a2:6a:23:74:b4:fc:99:58:d2:d2:29:0d:ce:c7:c7:11:63:ab:
78:69:76:c6:a5:d8:d6:9b:80:94:ad:54:b7:93:9d:5d:8c:64:
94:aa:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:32:46 2025 by rpki-client