Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87e6e5b7-5021-3cca-8682-9dfe6c857fcf.roa
File: 87e6e5b7-5021-3cca-8682-9dfe6c857fcf.roa (raw, json)
Hash identifier: jP5DToyrp3eFaptJClay1Z3gk8GRnr8fMtJZ8aEzk6I=
Subject key identifier: AE:B7:D8:AD:74:EC:7E:37:8F:F9:56:E9:D2:BB:6A:00:59:73:C4:D6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584819CFCFCB342781A1DC10E380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87e6e5b7-5021-3cca-8682-9dfe6c857fcf.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 33905
IP address blocks: 23.1.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:cf:cb:34:27:81:a1:dc:10:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=cf9b6dc2-b1d8-44b1-9495-8d54d7f9480a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:8f:3b:50:21:6a:dc:0c:c9:18:60:61:4a:
d6:13:32:20:55:5f:ad:6d:79:db:cb:0c:3a:b2:2e:
9c:e7:3f:64:b1:75:15:6d:b8:7a:85:db:87:0a:70:
94:73:d8:07:13:89:7f:c3:73:6a:69:c0:f3:b0:a7:
e1:ed:2e:30:34:c3:c9:b9:b3:50:d8:12:4d:0c:cb:
46:30:c0:b1:cc:62:67:0e:85:92:6e:25:3e:c3:a8:
0e:94:df:0f:5a:82:61:65:aa:81:d7:a8:30:08:23:
ee:0a:aa:a4:07:19:71:c3:b7:8d:76:c6:48:02:4a:
f0:4b:35:56:da:c4:16:a2:e5:20:ae:ae:b8:4d:94:
e7:31:30:6b:d4:3a:1d:e2:5f:68:3a:a3:b0:e3:a3:
bd:13:98:c9:62:8e:28:9d:1d:40:ce:db:fa:2b:ef:
7c:ef:c8:df:2f:58:ed:9d:bb:99:15:fd:8e:ee:51:
8a:14:b7:74:40:12:98:72:ad:19:a3:df:76:9a:09:
3f:96:51:27:0d:e1:c7:8a:7c:5f:5f:b4:5c:12:d3:
24:c5:3a:dc:55:f3:83:8d:b2:9c:2d:6a:17:ba:6a:
2c:cf:a1:e5:bb:8c:e0:b9:c6:b7:99:b3:14:b6:37:
60:d9:cb:37:f8:2a:57:e2:08:82:3d:db:b0:eb:cf:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B7:D8:AD:74:EC:7E:37:8F:F9:56:E9:D2:BB:6A:00:59:73:C4:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87e6e5b7-5021-3cca-8682-9dfe6c857fcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.1.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:69:aa:c4:88:6a:c9:2a:aa:8e:91:e3:7f:39:66:38:b0:b2:
35:e1:14:c8:17:b1:f3:00:68:6b:c1:3f:c9:64:95:05:85:86:
fd:57:94:e8:54:5d:bc:e9:97:1e:88:e3:c3:86:ac:50:3f:ef:
34:c3:22:e4:19:43:1b:11:c1:d0:ef:ef:f8:c0:28:32:42:2d:
55:e0:7c:8b:43:0e:09:2e:e5:49:33:ea:a9:f7:8f:5e:f1:0e:
cc:93:05:eb:94:7e:bd:02:a0:48:54:c5:61:26:44:2a:c8:4c:
87:94:ad:1b:c7:3d:1e:fd:a7:43:b5:83:ab:ff:30:d6:bd:69:
ac:8c:ce:a9:65:9b:97:df:2f:9d:e3:35:83:16:93:97:ef:ee:
bc:b1:7f:c9:86:73:96:68:1d:68:dc:37:30:56:a6:af:3f:5d:
db:2c:23:b4:1b:3b:a4:a2:36:b0:56:5e:44:5a:a2:25:79:6f:
a0:4e:7c:c6:23:48:ad:26:43:db:61:b3:4e:95:dc:f5:34:b6:
a5:f8:f2:44:7e:47:2d:8a:8c:77:14:4a:e1:76:c5:c0:22:54:
8a:14:fc:a2:d3:e9:fc:19:7d:3f:49:06:da:34:c4:cc:dc:cc:
06:e4:93:80:be:ef:a2:03:0b:14:cc:66:35:da:a6:8e:7c:ad:
e9:aa:8b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:00:30 2025 by rpki-client