Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/831a4cfc-3b4b-3ee0-bfbc-61d947d1a48a.roa
File: 831a4cfc-3b4b-3ee0-bfbc-61d947d1a48a.roa (raw, json)
Hash identifier: UdoCC+Fxf2DyQBEXzzPq/iYzYZRBXBdR6OSKDMuFS1E=
Subject key identifier: FB:DD:62:51:DB:CD:68:71:2E:9F:41:8B:F6:EE:BF:DA:CE:43:3A:20
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584827C5387E1B75766351790E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/831a4cfc-3b4b-3ee0-bfbc-61d947d1a48a.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 24319
IP address blocks: 23.194.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:38:7e:1b:75:76:63:51:79:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=0ec48e09-0ce5-4038-ad58-ffb6d5abcafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:f3:1c:6f:01:81:d8:c4:19:ec:c3:15:ad:
41:dc:fc:1f:44:d7:d3:48:fe:71:d5:86:63:2e:f9:
94:8f:68:27:9e:01:68:f3:41:2b:32:b6:dc:5d:2e:
a5:b3:c0:69:ee:56:35:0f:d3:01:e8:f0:0b:c8:31:
61:8c:ce:a0:d6:cd:f8:f8:2f:31:01:26:8c:44:5a:
3e:d2:8a:21:ed:5d:12:27:a7:66:16:76:48:5c:65:
eb:31:4a:4c:55:9a:85:40:e7:47:47:b3:74:6d:f6:
c4:2f:5c:e0:f2:5f:d8:e2:7b:ea:fa:92:76:e6:fb:
d5:ee:cf:c7:dc:9e:a9:a9:c3:b4:19:22:17:6c:3d:
0f:fe:2c:f6:88:f1:e6:ca:ef:af:51:d6:7c:be:ad:
65:d4:7a:99:fc:7a:e1:0c:a1:e9:9e:5e:c0:d7:69:
a0:0d:30:5d:49:a7:3d:d9:5f:fc:2c:80:ae:24:5e:
90:b6:ad:41:f7:ef:ed:67:f1:ee:89:20:87:52:d3:
21:1b:34:e6:8a:32:26:90:78:5b:1b:4f:37:6f:ad:
4b:24:f5:ed:58:c1:4d:34:70:94:45:1c:3e:bd:37:
d0:2f:4a:5a:75:ca:ca:f6:00:fd:35:4a:29:be:b7:
91:0e:d5:6d:52:4d:09:0b:c2:f3:ab:4e:33:94:6e:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DD:62:51:DB:CD:68:71:2E:9F:41:8B:F6:EE:BF:DA:CE:43:3A:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/831a4cfc-3b4b-3ee0-bfbc-61d947d1a48a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.194.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:6c:66:53:8a:62:44:59:50:f8:26:85:8d:63:bb:99:bb:5a:
bc:dd:1d:40:b6:36:6d:a9:ec:68:13:7d:03:53:5f:d2:3f:e0:
e3:85:a4:20:50:86:64:af:8e:9c:7b:aa:37:58:7b:c7:f7:5f:
31:a0:e8:91:6f:a1:6e:17:1b:ed:25:53:da:0e:a0:96:95:b1:
39:ed:63:1b:e3:87:7b:aa:20:2c:82:ca:e4:df:a4:68:72:4d:
cb:05:11:7b:ea:a6:7d:44:83:2e:c0:fa:6d:1d:5d:15:e2:38:
9e:ab:b3:d5:0e:a0:ab:2d:08:03:35:23:fc:5f:84:5f:92:a4:
8f:cc:3b:f8:38:25:9d:a1:a6:3a:d4:52:6c:0e:a3:87:95:d0:
f7:90:53:8f:03:5e:f9:7a:16:33:0f:57:43:d7:0c:91:e7:62:
fe:5f:a1:f4:e4:2c:18:98:83:f1:4f:8c:99:b3:49:41:b0:8e:
95:68:ee:06:5d:b5:ce:d5:03:0a:f7:4d:84:46:81:56:d4:55:
f2:78:5c:bd:cf:e6:da:e4:b4:a4:bf:29:9d:e6:92:6e:91:7d:
0f:d5:ee:e2:18:67:1c:82:ed:60:02:ae:b3:76:dd:31:fc:1d:
be:e4:de:72:13:ee:7b:1b:ff:bc:25:eb:ee:d8:f5:ee:6c:cf:
36:1d:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:28:51 2025 by rpki-client