Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f97d212-04fe-3382-bcdd-869184340e2a.roa
File: 6f97d212-04fe-3382-bcdd-869184340e2a.roa (raw, json)
Hash identifier: EEP6Fvt32Fv+L0obvY/rZnp/njifnR8oYyJEImYvy5Q=
Subject key identifier: 3E:E6:AB:3C:B3:09:FB:FA:9C:96:34:41:E8:E4:8A:37:C8:CD:49:12
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487B85BF9E81B973537AA3A980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f97d212-04fe-3382-bcdd-869184340e2a.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.41.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:bf:9e:81:b9:73:53:7a:a3:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=05d9d1cd-8507-4bfd-a5bf-7d75271df030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:76:b4:08:cb:58:3e:f6:6a:97:97:48:6f:
59:c4:e9:d6:b0:a8:2e:54:30:f9:8b:a5:05:46:88:
24:a9:4a:58:40:da:0f:0e:81:34:97:da:c9:3e:a9:
59:a8:62:5e:3f:44:f2:9f:0e:d8:7d:d1:28:2d:4f:
c2:40:35:2f:9b:cf:1d:40:6a:a3:0d:fe:b9:d8:7b:
8b:ad:a6:3c:71:18:a7:67:1c:72:dd:75:3f:ae:e8:
21:77:40:c9:ba:b6:52:23:01:09:fb:b3:bf:db:fb:
54:d4:b7:c7:45:ee:eb:21:31:3c:09:87:ec:03:64:
aa:6b:57:5c:ce:63:24:06:44:82:57:9b:b0:e1:95:
9c:1c:e6:16:6d:39:4b:0e:11:ee:f6:75:90:6f:b0:
47:b0:74:c3:5f:da:d0:dc:10:cb:1e:1a:5a:d9:49:
d7:2f:f7:31:f7:df:2f:af:d3:60:01:0a:f8:c7:af:
f5:ed:04:f6:43:69:f2:71:c8:c5:b1:4d:6c:84:83:
02:65:da:41:dd:48:e6:1c:61:88:dc:d0:61:02:2f:
53:ad:36:91:e7:ad:e2:84:3a:32:20:11:e5:17:53:
f7:ce:7e:74:7e:b6:92:6b:31:a1:3e:97:a8:6e:a9:
33:6d:78:ca:f4:1b:17:bc:1a:df:84:26:f5:03:44:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E6:AB:3C:B3:09:FB:FA:9C:96:34:41:E8:E4:8A:37:C8:CD:49:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f97d212-04fe-3382-bcdd-869184340e2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.41.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:f8:d9:10:57:8f:5d:8b:55:c1:c3:e7:03:8f:bd:52:14:c7:
ca:a5:fb:96:3b:8b:8f:21:8b:c0:cd:3b:05:3d:2e:4f:78:5d:
37:61:9e:a6:24:97:ac:f5:d5:f4:a8:eb:08:7d:69:6f:10:83:
bd:a7:c3:ac:06:94:02:61:45:7d:be:fe:11:69:12:bb:eb:9c:
9c:a0:ca:70:04:ca:63:44:54:45:63:0b:77:51:b2:4b:57:c5:
c6:db:99:fb:b5:75:23:f1:96:a3:23:e4:de:18:5a:6f:1e:fb:
ca:b5:d8:16:b6:81:cf:1a:a3:cd:ee:17:5d:83:5f:25:b4:9a:
a1:90:1b:4a:61:06:ef:3d:b1:0e:cc:34:b0:aa:24:89:b2:bf:
6d:51:d4:9b:32:57:76:27:d3:c1:26:15:96:4e:44:43:dd:c8:
fe:0f:29:86:ce:e7:a1:e5:33:16:a6:5c:40:74:70:5f:bb:7a:
6a:5b:0a:37:8e:ee:7e:69:14:fc:ef:ed:36:0b:9d:b5:0f:cf:
b7:c6:2c:b5:29:40:0f:e2:cd:ca:e6:ad:4e:06:64:10:f4:c3:
45:f0:02:bb:17:e9:7d:75:ff:2f:c3:b1:3b:75:e5:b8:88:5e:
9c:c6:5f:38:a3:7b:77:d2:31:7b:e6:05:f2:b2:46:49:0c:4f:
27:11:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:09 2025 by rpki-client