Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cefc5c7-bd2c-31df-b07b-ab07d6b17240.roa
File: 4cefc5c7-bd2c-31df-b07b-ab07d6b17240.roa (raw, json)
Hash identifier: bt5UH9R9O3boAByaTC/MQClyjZFt8H/xo7+cX3ih7+w=
Subject key identifier: C1:94:9C:1B:E0:49:65:9E:84:7C:FD:8E:30:99:90:46:FB:17:28:A4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848854B5A7F88744A5C18783900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cefc5c7-bd2c-31df-b07b-ab07d6b17240.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.52.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:5a:7f:88:74:4a:5c:18:78:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=29829709-7c36-472b-a055-9abee524b40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:cc:92:38:b3:89:70:ba:36:37:3e:06:ce:
1e:c0:91:9e:2b:89:f1:fd:ad:05:15:e9:05:b5:fc:
89:17:24:0d:1f:95:4a:25:44:96:53:ae:4e:72:ce:
3b:86:66:32:07:c2:13:ed:c2:11:59:a3:59:c4:a3:
d3:96:cc:b2:16:20:04:ff:3a:14:c1:ee:72:9a:83:
2c:a8:c4:5e:b3:df:c3:44:d2:71:79:2d:63:fd:4d:
a5:c8:c0:c9:0c:d0:c9:e2:4b:21:62:66:48:03:59:
96:40:31:f0:4a:3d:40:f6:25:3f:db:59:ea:51:a4:
6d:10:16:38:38:92:99:28:5d:21:e8:4e:39:d7:9e:
3e:87:12:20:8d:20:71:a6:fb:3e:f0:60:0e:09:a8:
c7:67:e5:ef:3b:eb:c8:7b:ac:ab:1e:fb:fd:60:60:
1b:69:c7:a3:56:fc:6a:43:8b:dc:9a:05:4d:40:cf:
d0:0f:8d:6a:34:5a:fb:f7:27:8d:f7:1f:4d:69:e9:
9c:29:f9:da:3d:ab:8f:49:36:0b:3d:09:c8:9b:76:
80:c1:92:3f:bb:28:cd:e6:71:33:34:ab:dc:c4:16:
2c:e0:96:99:bf:90:19:6e:9f:58:58:07:be:a3:e3:
01:2b:d0:cc:d8:fc:7d:be:b7:0e:aa:6c:94:56:c2:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:94:9C:1B:E0:49:65:9E:84:7C:FD:8E:30:99:90:46:FB:17:28:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4cefc5c7-bd2c-31df-b07b-ab07d6b17240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.52.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:a9:82:6e:99:ed:7f:13:ae:16:ea:13:2e:9d:8e:41:c1:ff:
6c:29:9f:a5:b2:d1:6f:99:5f:65:27:2a:0d:ff:bc:21:23:64:
29:53:e7:f3:58:ff:b1:6c:45:19:4b:3b:19:a4:bf:5c:93:a0:
99:ae:8f:ce:cd:fd:74:b4:24:f2:35:9e:c5:be:7b:7c:c9:8e:
6f:84:1c:4b:9a:8b:97:ee:a6:49:57:18:07:aa:ff:93:a6:be:
76:e2:ac:af:94:bc:f9:50:32:03:15:75:88:7f:05:b2:66:8c:
cc:7e:29:10:b5:ce:bd:4c:dd:61:59:77:77:fa:8a:c7:e6:f9:
7c:ed:bf:ef:1b:10:e8:b0:59:5a:eb:d0:48:3c:59:23:0a:dc:
2f:33:dd:96:22:12:9b:e9:c1:67:94:ee:28:3f:1e:aa:67:3b:
17:91:6a:e0:0e:c2:3a:a7:da:31:aa:96:62:bc:06:48:cb:fb:
e6:5d:93:33:17:ea:a5:67:3a:4c:24:39:53:b2:ca:6a:5a:de:
3e:a6:b7:c6:b5:f9:af:e4:82:1f:04:6e:e0:12:cd:cc:34:58:
18:b7:34:38:65:f4:4f:48:42:61:97:1a:84:1b:32:9f:94:4b:
fb:80:db:9b:21:f3:a6:6f:92:d7:d8:c9:0e:28:29:99:b6:23:
12:e9:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:33:40 2025 by rpki-client