Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e7eae1-18cd-332a-b2c8-7177e973bc7e.roa
File: 69e7eae1-18cd-332a-b2c8-7177e973bc7e.roa (raw, json)
Hash identifier: 7YNcYnkrCugdHt0t5svKucAHCUf86UE5xIRgGlEzA40=
Subject key identifier: CF:DD:4C:B4:60:97:F8:A9:5A:4A:DD:9B:D9:CF:D7:D5:73:41:92:E4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584819CFC8648A8B49BCC0F91880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e7eae1-18cd-332a-b2c8-7177e973bc7e.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 35994
IP address blocks: 23.210.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:c8:64:8a:8b:49:bc:c0:f9:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=f97e2804-6fe6-4445-b900-590507547c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:6b:9e:85:f7:24:cf:13:6c:be:1f:b2:17:
e4:be:fb:58:0a:fd:03:61:87:48:8e:8c:9b:15:7d:
fe:f0:cc:50:b3:49:a4:e8:05:f3:4a:48:21:67:13:
d0:91:73:a6:f7:ca:83:93:71:17:55:a9:1f:23:b8:
17:3c:b3:1a:e1:12:ac:ae:7d:82:b8:0b:f1:5d:41:
e5:2a:37:07:76:f4:d4:fa:b2:62:dc:c9:4e:99:70:
52:e9:e4:00:d0:d2:2b:b2:75:82:87:26:d8:9f:d0:
f1:11:0b:a0:8a:65:e9:c8:e2:78:62:48:4e:31:20:
c9:1d:80:55:32:17:50:1a:44:78:77:bf:4e:af:df:
61:79:1d:3b:ca:92:81:f8:d9:85:c6:b4:ab:01:19:
56:f1:02:43:fc:f4:55:b5:b4:9d:58:30:83:6c:f4:
95:53:e0:df:64:ad:6d:f2:ad:da:f2:9a:3b:88:46:
13:fc:a8:9d:5c:39:58:ab:fa:52:0a:8e:01:13:1b:
97:93:bc:24:17:2f:56:83:1a:24:69:42:d3:53:80:
66:04:e2:5d:ca:73:c1:35:de:fc:01:f5:1c:94:71:
f6:07:cb:cc:7f:f3:ab:3f:51:51:49:8a:22:b6:f7:
ec:fa:28:2a:d0:f8:5d:94:74:b4:69:c2:1c:5c:0a:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DD:4C:B4:60:97:F8:A9:5A:4A:DD:9B:D9:CF:D7:D5:73:41:92:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/69e7eae1-18cd-332a-b2c8-7177e973bc7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.210.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:84:cb:49:80:1f:29:d8:84:55:6d:75:d3:d8:fd:45:ea:d4:
db:c6:4a:f7:44:dc:17:41:98:30:a2:d7:54:70:bc:2d:9e:1c:
83:38:85:f6:1d:66:4c:f8:c7:da:e6:6a:65:f4:c9:63:8b:48:
de:b0:b4:66:ad:e3:32:1c:04:48:6f:23:0d:52:c5:13:6d:5e:
20:9f:38:b3:cc:c5:d6:a3:2d:f0:92:61:6f:b2:a1:72:b5:88:
9a:40:6d:4e:13:bd:57:1f:b3:91:4a:6f:48:72:97:e0:ea:fa:
ba:ad:af:d9:26:74:44:f3:6a:4a:3a:65:d0:64:ee:95:cf:3a:
ea:a5:0b:ca:83:60:71:e2:02:73:5f:7d:1a:f1:6c:ee:a5:91:
77:7c:70:18:34:95:4d:c6:08:05:a8:c4:f8:1a:3e:d0:fd:95:
cd:3c:ab:c5:03:72:cf:69:e4:9e:ba:bc:05:2f:37:6f:6b:44:
a7:d6:6e:0b:d5:b1:48:72:17:5c:1b:b4:f9:a0:da:ee:bb:e5:
85:53:ef:2b:5b:3a:c0:2b:9e:9f:58:a2:88:8c:11:68:4b:6b:
7e:8e:73:09:19:04:a1:a0:09:d7:eb:db:fb:7f:51:18:38:27:
30:a7:e2:12:8a:3a:7a:20:fd:32:34:1f:93:a5:d9:08:e4:9b:
14:67:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:46:56 2025 by rpki-client