Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/888ddc78-ba09-3978-b2dc-1aef50c77798.roa
File: 888ddc78-ba09-3978-b2dc-1aef50c77798.roa (raw, json)
Hash identifier: bRABa4a6uaRTMVvpOiI5ZjN6UJJ/VeLTtw4ULOQzrUU=
Subject key identifier: 91:B5:5E:1E:98:9C:51:29:EE:B0:77:86:94:49:FB:66:D4:74:21:7B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB4AB93D9F36FA7598C4E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/888ddc78-ba09-3978-b2dc-1aef50c77798.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.44.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:4a:b9:3d:9f:36:fa:75:98:c4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=cb6cd0cd-87af-4d50-9931-846cb503f09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:06:9f:8f:31:22:f5:3f:f0:7b:e7:7e:7f:
1b:01:01:0a:f2:75:97:2d:37:49:df:2f:5a:72:85:
18:6d:0d:33:2d:3c:8f:4b:c6:26:8c:57:80:c4:e7:
44:12:13:c7:86:a5:37:fc:98:2e:a9:ab:77:5f:81:
d5:09:6c:ae:7e:9a:94:3c:ae:13:7f:29:9c:c3:de:
41:76:e0:40:e0:48:9b:03:9d:e9:a4:4a:90:3f:9f:
2c:9a:46:86:e5:29:c5:7a:55:d5:0b:f4:01:19:28:
e3:07:59:dc:cd:11:36:42:90:87:01:63:96:a8:72:
14:f8:27:8f:bc:57:58:b8:39:86:60:ca:30:9d:5e:
7c:2f:75:d4:81:6d:34:b2:ec:a7:16:63:cf:8a:e2:
5d:76:59:cc:30:31:f1:86:21:59:98:5b:f3:09:89:
8e:13:81:20:2c:a2:e6:e8:28:d6:e5:ae:83:91:65:
3d:fd:17:3c:8e:16:38:ee:34:07:10:27:b5:b3:c5:
c5:53:b1:40:90:9f:3c:fa:5d:9e:4b:20:0b:a1:c0:
74:2a:68:a2:75:a2:68:7f:91:3e:80:7b:f6:d9:5a:
50:e1:ea:ac:65:83:2f:fd:09:9e:98:ab:fd:a7:c8:
89:cd:86:9b:0c:ba:6d:c0:9f:50:c5:10:97:58:24:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:5E:1E:98:9C:51:29:EE:B0:77:86:94:49:FB:66:D4:74:21:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/888ddc78-ba09-3978-b2dc-1aef50c77798.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:77:80:63:01:c9:f8:31:35:a0:10:a5:13:47:5b:49:ae:26:
3b:f8:2b:08:5a:26:1a:0b:c4:0a:b2:9d:b8:60:0b:90:9b:6a:
ca:d4:be:45:8b:60:36:1a:1d:c9:47:ab:50:77:2d:f2:b8:6b:
70:6b:70:92:2b:70:87:24:f3:6b:b8:7e:af:7d:0e:2c:47:b0:
83:66:5b:cb:f5:fa:87:92:8d:dc:08:f4:05:22:c4:c6:f1:ad:
55:da:ac:8b:68:47:b2:48:9f:d1:33:56:c9:cf:57:57:49:0f:
2b:fd:ab:75:d2:03:e4:94:62:5c:b7:f7:d5:ff:16:ea:c9:36:
d1:e9:9d:85:40:ca:98:c5:53:28:2c:5d:15:23:38:49:77:1e:
7f:05:5d:35:36:be:50:c9:d0:7b:5a:86:96:1f:13:4b:67:9b:
98:e1:ac:33:ae:ab:1c:b6:66:c4:8d:bb:b0:9a:c7:e3:26:73:
dc:95:5e:23:4b:79:97:82:0d:ed:ea:61:cc:43:60:8a:13:7b:
39:08:8f:24:88:62:a7:7b:1b:e9:9d:fd:f5:8f:3d:6c:1d:ed:
26:99:0c:2e:3d:18:b9:19:11:d0:f3:76:3c:1c:bc:b5:68:e2:
29:2c:4a:82:5d:03:1c:dd:ee:cd:31:92:68:1c:e1:f0:95:47:
4f:36:b6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:57:26 2025 by rpki-client