Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/889586bd-cdc4-3dcc-bdde-dcfb18dd2a4b.roa
File: 889586bd-cdc4-3dcc-bdde-dcfb18dd2a4b.roa (raw, json)
Hash identifier: VeOQkSZ9fVG5h/O6U83IaQC2RKix0Va4nWgc0O0koWA=
Subject key identifier: E4:80:62:DE:D9:E2:FE:D9:D8:A6:42:41:38:75:6B:22:FE:91:2C:B1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858481F652D855653F9BDCD350A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/889586bd-cdc4-3dcc-bdde-dcfb18dd2a4b.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 24319
IP address blocks: 23.35.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:2d:85:56:53:f9:bd:cd:35:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=ae2e5dd3-4fe9-419f-afa1-24a8965b9a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:12:05:4b:c5:ec:d9:d8:c6:0a:e8:0a:78:
e9:8a:8e:0f:b9:92:15:15:70:8c:13:11:c0:d7:15:
0d:52:aa:92:41:f1:b4:29:03:fd:0a:ec:cf:9f:a7:
a0:f6:62:d8:d7:05:86:cb:e6:ef:64:fd:4f:01:12:
d9:00:89:1e:2f:d9:f1:b4:2d:73:86:b2:fa:67:62:
a4:fb:13:08:73:8e:11:07:84:9e:75:bd:02:9b:17:
94:84:45:b5:fb:e7:16:b4:09:8c:22:6c:26:06:17:
29:ba:d1:2c:6a:98:6b:41:d7:0b:3b:25:a3:87:b4:
b5:6c:0c:bd:76:41:32:76:c6:c5:b6:81:b2:69:78:
ed:e5:db:3a:54:38:01:36:c1:44:bf:30:96:09:2e:
41:83:39:69:d5:bc:32:ea:84:6f:eb:30:c7:fd:90:
79:aa:c9:23:03:39:57:26:23:bb:d5:92:d2:c5:63:
9d:20:fb:d7:37:76:e8:4a:01:5c:f3:b5:35:77:8f:
90:da:65:2b:33:17:66:d4:8d:27:53:ec:7c:e6:7d:
5f:c3:e7:0b:94:0b:cc:40:a0:68:83:f1:2d:06:24:
c4:13:cd:2f:05:29:cf:1f:9b:ca:96:a0:c8:36:a4:
4f:0f:d1:0f:0c:d7:c0:f2:55:e4:29:3b:c7:88:21:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:80:62:DE:D9:E2:FE:D9:D8:A6:42:41:38:75:6B:22:FE:91:2C:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/889586bd-cdc4-3dcc-bdde-dcfb18dd2a4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:0f:33:23:67:ec:4c:a1:b8:61:ef:80:db:fc:3d:44:4c:7e:
c1:e6:4f:9b:dc:24:c7:32:05:97:40:a8:7c:fa:1a:b2:2c:cd:
29:9f:06:b4:53:23:1c:a3:ca:61:1d:6c:a3:30:fe:24:17:bf:
a9:44:07:3c:39:af:9d:0d:48:4d:6c:54:4c:de:64:be:e0:08:
56:67:96:b3:e3:f7:11:18:75:b7:7e:88:20:55:24:d6:d9:06:
91:21:ad:42:0e:ab:c3:e9:23:ce:9f:f7:37:d6:6c:be:67:bd:
70:5d:c4:8d:02:c1:58:77:8c:f0:17:16:c1:f2:5a:e4:b6:f1:
54:7c:80:c4:10:97:e6:2d:c2:e0:98:03:8c:61:36:45:c6:e5:
6a:36:14:67:5a:51:5b:df:f5:74:39:d7:ec:9f:fe:d4:78:66:
6b:5e:df:d3:5b:8e:da:99:8c:18:b1:23:d3:88:15:16:cb:b3:
b4:84:d0:f4:79:45:b7:68:fd:fc:1a:9a:63:e0:23:1d:80:3c:
cf:d4:ac:3e:d4:ec:f5:e5:fe:32:d6:6d:da:22:c9:34:2b:61:
8f:c3:c2:36:1d:25:a7:f7:f2:64:4e:d6:0b:c0:1f:1e:63:fb:
c2:10:6f:c5:e2:5f:59:65:3e:dd:fb:08:1f:65:b6:ee:b7:d8:
98:9f:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:37 2025 by rpki-client