Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/494ec973-76c2-3ccd-87bf-803eb2983dd1.roa
File: 494ec973-76c2-3ccd-87bf-803eb2983dd1.roa (raw, json)
Hash identifier: MOFwQJ++XjBp98uTG+CaCPzvxfjkdMTKQt58SP0ly/k=
Subject key identifier: FF:BA:4F:F6:28:53:BE:DF:BE:DA:EA:CD:1C:CC:26:50:76:2F:FE:9E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584851A585994EFA99731F548380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/494ec973-76c2-3ccd-87bf-803eb2983dd1.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 20940
IP address blocks: 23.205.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:85:99:4e:fa:99:73:1f:54:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=c2cd48b1-be1b-44b0-8892-4be99361f448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4b:31:61:1a:e1:44:2a:a3:a1:6a:f9:c8:0b:
ef:30:3e:93:5b:79:2b:4d:f8:dc:ca:54:b8:33:a6:
b1:36:d7:c6:e5:79:62:11:da:56:03:12:bf:aa:3d:
93:fc:e5:7c:36:aa:58:4f:b7:70:4d:00:76:d2:82:
e3:fb:be:68:58:8c:b1:8b:32:5d:aa:f3:6d:52:8c:
c7:b8:3a:ee:8c:c2:da:40:84:0f:ad:68:b9:1a:2a:
b5:7b:67:92:ab:62:98:0e:2f:4c:b6:72:b7:51:1a:
42:58:54:c8:c3:c3:52:42:3e:41:9b:8a:44:df:93:
60:1e:e2:79:9d:d4:f8:1d:c2:19:4e:bb:a2:52:09:
36:72:f8:11:9f:7b:4c:57:c1:73:b0:86:1d:22:46:
08:78:95:9d:8f:7f:a6:b5:cd:14:d3:ad:46:76:c7:
a9:eb:99:c8:df:09:25:55:ce:d6:c7:07:ca:7e:b8:
1a:36:94:65:ed:ac:5d:94:84:4a:00:6e:47:56:f7:
c4:6e:ab:11:61:88:97:d0:f5:31:2b:6b:1b:c3:38:
5e:ff:4a:e3:63:6d:83:19:cf:8a:6f:66:62:b4:24:
85:a7:be:6e:cf:d2:fe:9d:09:34:e0:b7:ff:29:55:
93:58:4a:52:ae:83:65:58:42:8a:41:69:d9:79:65:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BA:4F:F6:28:53:BE:DF:BE:DA:EA:CD:1C:CC:26:50:76:2F:FE:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/494ec973-76c2-3ccd-87bf-803eb2983dd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.205.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:1d:85:89:8d:95:d0:c2:f5:d4:28:6f:c6:d0:a9:06:56:8e:
51:0c:d5:95:f0:dc:bf:b3:ab:80:e8:5c:a5:52:fb:80:19:d6:
e4:0f:38:71:f7:3d:0b:54:db:b8:b1:e8:d9:f0:6c:74:36:2d:
ba:90:d5:ad:dd:ec:41:e8:35:9d:8e:bf:7f:82:7d:73:db:c4:
d7:28:15:58:3d:35:94:72:42:6a:e5:d6:94:38:d3:6a:8f:a8:
7f:1a:62:8f:61:a3:ec:12:9c:17:16:6b:9a:33:b5:16:6e:8c:
2d:47:58:e9:6c:81:c7:0c:01:f6:2f:99:10:b5:b8:c0:b9:28:
67:18:8c:46:bf:b8:7b:67:4b:2b:54:c7:a9:96:49:aa:5b:69:
0f:1c:a3:f7:ee:b0:58:b9:71:42:e0:b0:ff:4a:dc:f7:61:a2:
c4:4b:41:3d:25:85:12:2e:27:71:1e:e1:cc:3d:18:85:62:23:
d7:be:14:8f:51:ac:2a:ce:d3:1f:e2:d6:ff:f6:f7:61:24:ae:
74:9b:ce:e8:32:9d:d4:b6:48:7a:28:5a:f6:2d:5a:36:47:f6:
b7:e1:22:e6:9a:55:1e:92:58:62:14:c1:96:5a:87:fa:a4:57:
37:4c:25:0c:33:05:c0:c2:e0:eb:f7:0b:74:0f:35:90:21:df:
53:d6:b1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:55:30 2025 by rpki-client