Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/633a8e7d-dc57-3e15-91e9-5705fc4d7027.roa
File: 633a8e7d-dc57-3e15-91e9-5705fc4d7027.roa (raw, json)
Hash identifier: uZp9pohVr5IFZ3T27+F3FRvQo4QK2q1HDDtwi/tEgu8=
Subject key identifier: 4B:34:13:47:DB:51:A2:BF:F3:0E:FA:C9:07:3D:01:68:C4:62:00:29
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486D90635A46F79EA04798ED80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/633a8e7d-dc57-3e15-91e9-5705fc4d7027.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.32.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:63:5a:46:f7:9e:a0:47:98:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=1a04a143-808a-4b94-9cbb-64a0357af531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:80:6d:de:8a:a9:a6:83:1a:71:d0:c8:3e:
c0:4e:ce:ae:0f:7b:3f:09:34:39:55:53:76:c1:98:
a0:4e:d3:eb:e2:c5:28:f2:d4:c8:e2:08:b3:da:b2:
c6:21:af:03:69:3d:96:6f:9f:0d:d7:9b:db:f7:e4:
81:db:a1:c3:40:92:e0:ae:fe:85:ba:39:d0:c7:73:
71:14:74:2c:ef:63:24:91:b6:a0:b9:40:1e:b1:52:
4e:02:18:6c:cf:25:ad:94:03:21:93:96:9c:f7:94:
e0:2a:6d:b3:b1:26:c6:a3:bd:1e:b2:82:d0:7c:04:
bd:55:5a:d5:df:21:71:49:fc:bc:f9:81:c2:a2:61:
28:0a:68:e9:b2:29:e0:eb:1c:fa:66:55:00:49:19:
d4:72:bf:7b:8d:d4:87:92:80:7e:1f:1a:9a:31:ea:
92:9a:93:5d:cc:cd:8a:0e:ba:0a:83:8d:2e:ef:b4:
4f:44:16:dc:53:3d:a9:5a:9d:67:81:86:42:90:d2:
7c:b7:a2:34:cd:51:aa:ac:bb:36:d9:d5:cf:71:f1:
5e:e9:07:aa:d1:92:a1:ea:47:c4:38:57:44:48:45:
a3:9a:68:03:c6:c5:f4:40:16:d1:f3:43:ae:f2:87:
4d:db:3b:9f:e4:ef:24:f7:43:e9:b9:ef:4b:38:cf:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:34:13:47:DB:51:A2:BF:F3:0E:FA:C9:07:3D:01:68:C4:62:00:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/633a8e7d-dc57-3e15-91e9-5705fc4d7027.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:d1:ec:7e:5e:2d:6e:75:07:fc:32:43:06:eb:13:eb:70:7b:
25:03:92:1c:84:70:40:2f:62:0e:d7:06:20:4c:b6:9a:ed:2b:
31:d0:1b:c5:05:72:a6:9c:03:2f:89:9b:55:e4:33:51:86:64:
85:01:cf:41:cc:d3:19:81:47:64:ad:8c:61:0e:4d:3f:e9:5f:
f1:eb:6a:09:31:f4:95:69:cb:6d:5b:68:8b:34:dd:de:a9:d8:
e2:18:d4:64:5c:c4:90:33:37:5d:66:54:15:26:1a:25:ab:ce:
5c:22:2a:c0:a7:1b:37:ec:51:74:2d:1e:c2:30:a0:7d:51:40:
ed:29:10:50:90:3e:e4:62:5c:1c:c7:61:cb:ad:b3:a1:b5:05:
ef:ba:2e:9c:ab:ec:dd:aa:8e:3d:57:f7:dd:7f:b4:84:64:32:
0c:75:e3:28:c7:01:c1:9b:c4:83:ac:82:66:0f:85:e8:f3:9c:
3d:7c:a5:fe:b8:bf:e9:16:4d:fe:db:da:35:14:6e:78:fc:af:
01:67:cd:4e:0d:d0:36:c9:d8:bf:72:57:d2:70:a7:b9:dc:d9:
b7:a7:a8:5b:6b:6f:4d:59:45:c6:a1:8b:90:f9:b9:d2:35:40:
18:7e:82:43:79:09:3d:85:a1:0d:0f:bd:5d:15:ac:ba:2b:7d:
6a:e4:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:03 2025 by rpki-client