Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74023690-c063-32d6-a9b1-d99817afe9f5.roa
File: 74023690-c063-32d6-a9b1-d99817afe9f5.roa (raw, json)
Hash identifier: bLzLODZnrDNqlakSR4SRgQgOXvGYg7d4vhq+s0C4W8w=
Subject key identifier: F0:9D:C7:18:66:3B:B9:AC:E8:C0:16:2F:47:D8:30:8F:F7:D7:42:86
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483F8044E721E3FE713F9F2900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74023690-c063-32d6-a9b1-d99817afe9f5.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.77.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:44:e7:21:e3:fe:71:3f:9f:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=b7ac2fed-fe1d-49aa-a056-78f8a78a0d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:a0:ea:fa:13:ea:6d:4d:e4:b1:24:e2:9c:
d9:2b:36:4b:9e:dd:4e:90:a4:b0:b0:38:6b:c5:2e:
8d:31:b0:7d:e8:7d:81:13:51:14:8e:7f:67:ed:4d:
8f:66:2b:ca:18:84:f4:bd:af:08:44:89:b9:c7:25:
39:81:f7:c1:01:4b:7d:7e:57:46:56:56:39:78:f1:
dd:08:fc:dc:87:f3:d3:2a:18:a7:00:11:d1:b4:9d:
72:9c:ef:0e:14:36:be:db:4c:66:a4:56:c5:d7:84:
06:fc:6e:43:78:db:6a:b0:d9:ad:62:c4:05:dd:f8:
3f:74:46:78:45:93:19:d1:76:25:87:5b:78:1f:c2:
c2:2a:5a:49:a7:06:ef:0a:f0:cf:48:12:ed:be:d0:
e5:3a:1c:2a:30:69:b5:19:8e:ea:91:de:2a:82:f3:
4a:ed:70:f4:36:7a:d7:ec:88:13:74:18:db:4c:a8:
6e:58:ff:b3:23:70:8d:a6:7a:80:16:23:dd:9e:73:
4e:9b:65:f3:a2:02:91:bd:d7:99:a7:70:04:06:52:
a1:e3:88:2f:b0:97:a1:ef:6d:c5:c9:5b:5c:54:0a:
f9:95:76:c6:c5:51:7d:fe:03:79:c6:01:e9:4f:db:
16:96:b5:fe:ec:3f:8d:5a:25:b8:80:07:64:f9:da:
d1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9D:C7:18:66:3B:B9:AC:E8:C0:16:2F:47:D8:30:8F:F7:D7:42:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74023690-c063-32d6-a9b1-d99817afe9f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.77.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:0d:9e:44:c9:05:96:88:52:1d:49:13:03:a7:48:15:9d:05:
85:60:ca:10:cb:20:58:c1:b2:df:48:6d:aa:6f:d4:23:c7:cc:
fb:38:3d:08:57:b8:c0:b1:e7:d3:da:27:9b:7b:aa:d7:86:6e:
84:42:cf:13:35:23:02:7d:86:cb:c7:3f:cd:fd:d5:3b:11:16:
41:30:14:7f:43:af:85:42:8e:9c:4c:fb:6e:56:34:fa:d2:11:
2d:3f:a7:61:ef:bb:1f:24:60:48:d7:b4:cf:a2:22:62:44:80:
09:cd:a0:72:dd:85:06:31:72:53:ae:75:0c:dd:22:32:f2:b5:
a8:d3:47:b3:eb:83:fa:7a:c2:b8:c2:94:09:c2:71:55:34:ae:
68:a6:02:ec:b1:2a:11:b7:95:f2:df:5e:84:59:bc:f8:9b:dd:
ef:2b:58:da:9b:de:10:a6:96:a6:e8:c9:de:e3:33:f7:f7:77:
d5:67:19:12:9c:8c:4a:34:fa:77:40:cf:c9:31:e3:5c:38:4a:
87:ba:f9:42:8b:86:b5:e2:76:1a:f4:ca:91:86:2c:6c:88:24:
fb:da:3e:32:23:f4:af:4c:7d:4c:fc:c4:a8:ea:67:3f:1e:24:
90:e3:b7:a8:9e:72:e4:b1:30:e8:6c:3d:71:3c:a4:7d:68:44:
32:e1:ab:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:59:45 2025 by rpki-client