Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa
File: 53e5c72a-194b-3ae3-b890-b640b286e4d9.roa (raw, json)
Hash identifier: Ef3qIGOp0WX0R3kZsrX0HeysUG4GaHGUrXXOAmJbfzo=
Subject key identifier: 64:9D:0F:5F:67:58:CA:29:DA:88:D5:D9:C9:F2:CD:C4:55:95:06:4C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481F652EB2321A5417E41FEA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 35994
IP address blocks: 23.32.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:2e:b2:32:1a:54:17:e4:1f:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=6dfb2416-479e-46c5-a65a-660d300b5e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:20:7a:c8:d0:d1:fd:d4:aa:dd:13:15:cf:
ea:09:c6:3f:d9:31:f6:43:c0:cc:b1:07:f6:e9:e0:
f3:c3:9b:b7:9e:47:9b:7b:67:41:a7:cc:4c:a0:1e:
15:4c:33:e5:8f:39:59:6e:8b:54:c3:dc:64:67:6d:
15:0e:10:fc:2b:f3:80:4f:8c:78:17:85:c0:4d:55:
57:bd:a4:af:7f:e1:61:65:a6:01:aa:ee:ad:70:13:
8d:ae:88:dd:5a:ab:f1:b7:68:8b:8e:9a:41:f1:99:
89:90:35:37:93:2f:d8:3e:d0:b1:62:25:cf:0f:c8:
af:ca:7a:f2:ef:28:bc:c7:f3:09:a6:ec:d2:e5:ca:
c1:3b:a1:fb:7a:b6:a4:8b:f9:c9:df:43:f5:09:1a:
db:e8:4b:71:a5:87:dc:d0:bc:63:4d:d5:c4:56:22:
19:0b:e4:84:c8:22:1f:83:a0:38:3e:ee:a6:05:34:
2d:ef:51:2c:0f:ba:9c:82:21:2f:ad:79:f4:50:f1:
32:62:21:dc:b5:83:0d:02:a1:8b:1a:92:26:31:c9:
36:e5:86:ac:d8:86:c2:31:8f:c1:18:48:3c:77:f4:
01:af:d0:3f:1c:f5:f3:e3:f0:15:7b:50:b6:05:cf:
13:72:db:4d:3f:00:7e:ad:03:db:bc:71:81:33:e6:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9D:0F:5F:67:58:CA:29:DA:88:D5:D9:C9:F2:CD:C4:55:95:06:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53e5c72a-194b-3ae3-b890-b640b286e4d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:f2:5b:99:d0:e7:f2:6a:b9:2e:d2:69:50:89:65:f2:65:ab:
52:73:46:ab:98:52:33:6c:fd:47:a7:fc:65:fa:9b:d8:bf:40:
a4:5e:47:e7:78:69:32:22:a5:43:fa:8a:34:ca:5b:40:15:1c:
20:41:67:28:5a:d6:6c:c6:29:7d:a3:d7:f5:b1:67:67:72:6e:
4f:bf:4e:ee:13:e5:72:9f:58:0f:f7:51:6d:b1:14:59:ed:ab:
f2:6a:b1:9a:f1:3a:2f:15:3d:1c:34:22:a8:bc:5f:a4:ad:e0:
5f:fb:79:56:8b:37:4e:64:e2:22:c6:6e:5e:78:98:b2:d7:4e:
00:23:62:e6:29:ae:ad:c9:f3:b9:e3:ff:d4:25:8b:1a:c5:f0:
2c:3b:5d:88:db:62:5e:15:63:76:71:00:99:7e:6a:4c:b9:0e:
76:69:ac:ff:4e:cd:71:b2:23:27:8c:d7:a7:20:ed:b2:0a:7a:
08:52:3e:15:46:b4:3f:50:c2:4a:90:00:90:f7:cd:97:1e:f6:
c3:db:7a:c9:ae:b6:c2:e7:13:9f:d5:34:1f:e3:70:1e:26:f6:
6c:d0:e5:25:cd:35:40:a3:39:62:d9:b7:71:77:02:68:02:e7:
a0:34:d0:47:bd:34:d2:2f:7d:bf:97:7c:0a:2e:7c:5b:ec:13:
a5:e4:d5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:32:06 2025 by rpki-client