Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67ab8033-adc6-3652-99be-1b5f8d893499.roa
File: 67ab8033-adc6-3652-99be-1b5f8d893499.roa (raw, json)
Hash identifier: dqb+b1iv/cmD5zsIBf9PTLAGV1XIaGR89xH8QyIKWro=
Subject key identifier: 98:B8:B2:30:CB:5B:2D:AC:22:9A:FF:B8:96:4D:25:D1:DF:EB:F7:D3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485B6B0768E93B32C7D5BCF300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67ab8033-adc6-3652-99be-1b5f8d893499.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.34.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:07:68:e9:3b:32:c7:d5:bc:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=51b2fdfc-a682-41f3-8845-d16776601558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:26:54:34:e1:11:32:9f:c0:92:af:fa:ab:
cc:e8:56:1d:70:2f:4c:ee:fe:aa:7c:c5:8a:9d:8c:
a5:c4:23:7d:2f:9f:9e:7d:c2:3b:e4:cd:f5:d3:62:
fc:94:3b:b1:8e:21:2b:6a:89:34:01:dc:62:a0:22:
c7:0d:fd:8f:ba:90:81:d9:ce:fc:c1:86:33:04:6c:
d9:f1:d0:38:5f:a8:ae:da:9d:27:3d:e8:b9:c9:ca:
b2:a0:dc:47:a4:28:2c:e2:a8:49:49:e5:a3:e7:19:
7a:34:98:d5:d6:e8:fc:0c:c3:2d:e8:ef:f6:6c:8a:
fb:e7:99:d9:9e:eb:98:50:5f:ac:ab:bf:2f:7e:2f:
70:06:2e:a1:75:b1:d9:1c:c6:20:2d:4e:b6:50:bb:
2f:2c:a1:cf:92:7f:d8:b5:9c:ef:11:36:c9:74:70:
15:bc:c5:f7:1a:ed:ba:cc:97:ed:98:13:53:5b:20:
11:5e:02:2a:02:6e:ad:d0:d3:09:8a:0c:2e:f3:98:
50:b8:c9:42:9f:77:91:98:eb:b9:17:2f:4e:34:fc:
10:a6:76:aa:4e:33:6d:53:b7:3c:63:e5:73:9e:f8:
71:4a:56:06:4b:54:fd:42:23:dd:c1:cb:af:8f:a2:
e2:ec:68:c2:7d:ae:f6:b5:ac:7c:9c:46:c1:9d:c4:
e0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B8:B2:30:CB:5B:2D:AC:22:9A:FF:B8:96:4D:25:D1:DF:EB:F7:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67ab8033-adc6-3652-99be-1b5f8d893499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.34.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:b8:2d:44:b4:86:d3:1c:4d:fa:4f:15:d5:c5:2a:b1:f3:88:
4a:f7:cb:5e:fc:1d:8d:8a:9b:18:55:08:0d:ff:68:e4:55:5a:
bc:77:80:5c:33:9d:89:96:11:e9:09:75:cc:c1:8b:7f:71:4a:
33:3c:a8:b4:7b:5e:1c:db:c9:88:2a:76:2f:36:9d:bc:08:a8:
0c:38:29:81:d7:40:8e:b7:69:0d:37:22:ee:05:f4:39:70:c3:
40:0d:8e:74:a6:c4:ff:83:ee:31:85:7b:cc:51:08:16:1b:33:
d9:47:93:aa:b3:02:4f:a5:46:05:bf:fc:01:33:b9:07:39:4d:
d6:03:af:34:e5:31:95:36:c2:ba:60:b1:8d:1f:b2:a6:6e:a5:
40:a2:10:30:32:46:d4:10:df:91:94:67:d9:b6:8e:fc:76:39:
64:1f:05:8f:b2:dd:22:f0:cc:d1:9d:22:da:29:3f:71:c6:2f:
c1:92:dc:7e:84:7d:6c:a2:f1:6b:7c:55:e9:f1:19:6a:d0:3f:
03:6c:76:da:10:3d:f7:1a:62:f0:79:fc:a0:04:2a:a5:de:8e:
60:0f:cb:e2:ae:9e:c3:89:36:ab:51:e8:c5:e2:52:31:17:ec:
3f:eb:30:94:40:e5:34:6f:87:b0:d5:3c:40:3d:87:81:e0:9f:
92:ef:1e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:31 2025 by rpki-client