Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86d64a1c-5a45-3617-8af7-62ba2d20d7e9.roa
File: 86d64a1c-5a45-3617-8af7-62ba2d20d7e9.roa (raw, json)
Hash identifier: 1pHeTdOhroXziKEGY2dTrShmTIe3/v3h1QEYK86riP0=
Subject key identifier: A2:AF:82:E0:35:4E:57:6E:93:87:CF:F3:D8:A7:00:65:AB:23:15:42
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483F8043DA3F8A7B9B6EE53680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86d64a1c-5a45-3617-8af7-62ba2d20d7e9.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.73.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:43:da:3f:8a:7b:9b:6e:e5:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=692bf168-243b-4da5-b344-269364c06dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:42:d4:ef:83:b5:6a:86:7c:db:61:9c:67:
b1:33:a9:80:9c:99:2a:aa:91:63:88:b0:3c:7e:04:
20:6e:12:f7:7a:fe:46:c4:42:0b:c1:b5:de:e3:15:
71:eb:e2:40:ef:3c:33:91:d7:16:cf:45:d6:0d:f2:
55:fd:c8:db:44:28:1a:2b:dd:2b:ff:cc:14:86:b5:
a8:36:c2:99:de:6c:ef:fe:f5:a5:03:83:29:a4:2f:
ca:e2:ff:3b:d2:20:b7:36:20:6a:1a:c4:fb:5a:d7:
32:ed:9c:40:91:ec:74:5b:f4:b5:c5:8a:11:29:00:
dd:37:76:d7:b0:83:cb:8d:37:f5:b7:60:cd:0e:ff:
a0:91:d0:ff:03:cf:02:52:74:54:94:bf:12:2c:5a:
f9:ad:85:1a:4b:4e:4a:cc:5b:4d:f5:f2:2e:83:b8:
4c:6d:76:ea:0c:7d:34:bb:9a:e7:83:a6:b8:4c:b4:
bb:77:ff:56:4c:ce:7d:90:56:92:53:e0:e4:59:f9:
59:17:a3:9a:77:a0:f3:54:82:12:8a:e8:6a:d2:dc:
a3:8e:b8:73:8c:47:59:67:e7:b6:ad:10:dd:49:74:
1e:e2:47:12:be:1c:49:76:96:58:f7:4e:f8:56:02:
a7:48:e9:78:90:9d:8b:62:84:3a:26:21:b7:3d:e9:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:82:E0:35:4E:57:6E:93:87:CF:F3:D8:A7:00:65:AB:23:15:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86d64a1c-5a45-3617-8af7-62ba2d20d7e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.73.215.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:10:2c:2c:a1:b4:1a:7b:6e:b1:66:81:07:30:9e:42:bf:38:
2d:99:c6:14:14:46:15:cc:ad:fa:20:7f:33:66:82:f4:ba:2c:
39:03:53:14:fb:c5:9d:78:8b:78:7e:b1:d1:7d:d8:e2:ae:35:
54:1d:10:36:2c:15:b2:06:ac:2f:fc:de:6b:e9:9e:e1:6e:75:
fc:30:03:ec:57:17:92:1b:9c:68:ba:54:b7:fe:39:6c:0b:18:
0e:04:e7:68:32:e1:51:fd:fa:c0:59:b3:ac:e3:80:ee:5e:14:
98:42:31:d0:d1:ff:06:dd:e0:f4:81:c7:68:30:c3:29:f1:73:
04:7b:be:00:e0:12:a9:a8:68:bb:81:45:33:1d:04:25:3f:73:
19:9d:8f:a8:7f:36:57:84:d4:e5:71:9f:41:10:5f:00:5f:0c:
e9:21:4c:2c:e0:e5:b5:d7:ec:36:b7:df:30:f9:96:d1:e1:aa:
e0:34:93:00:9f:a5:6b:ac:db:74:9a:74:00:34:b6:c8:0a:b9:
83:98:30:9c:c0:28:67:af:f4:f5:51:f0:f6:1f:c5:98:85:15:
c6:79:2b:5a:17:14:98:2c:77:0a:4c:b8:31:56:2c:0f:6f:84:
0f:58:76:68:3a:be:89:8a:15:92:38:f9:e9:92:65:2a:6a:80:
c1:c3:aa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:38 2025 by rpki-client