Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa
File: 898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa (raw, json)
Hash identifier: 4BjHrfhg/Ph/nAukOAQ7Zct7/a720vrJLZWsiZfXt3k=
Subject key identifier: E8:7D:3A:8E:9C:60:90:AE:6F:41:D9:B2:5B:AE:B6:6F:62:60:3F:F9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486D90639C64DC725C99BB27C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.32.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:63:9c:64:dc:72:5c:99:bb:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=094f4933-10fc-4d7e-9cc3-273fd32137cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:41:c5:08:43:22:49:6b:e1:8a:b0:59:1f:
53:6f:54:b6:81:2f:1c:0f:91:cf:d4:d2:50:0d:3d:
d9:0f:9a:bd:0b:83:b2:ae:3b:24:3b:de:5f:c9:2c:
e3:17:d4:c1:a8:18:b2:3d:f9:1b:1a:9f:9a:b3:59:
6b:c2:2a:49:a6:01:6f:79:b7:06:ac:26:66:a2:c1:
25:09:fe:9b:fd:0b:bb:ea:1c:b7:7b:b5:21:75:cd:
4e:92:77:80:7d:d7:df:51:e8:e8:cf:7e:41:9a:d7:
87:f9:da:1b:26:b4:d6:5f:24:53:81:fa:8c:8c:f2:
44:44:92:04:d5:a2:fa:a8:a3:5b:20:8c:d7:c6:79:
9b:0e:1a:8e:68:28:db:11:13:65:a8:3c:c3:76:a5:
7e:62:20:ba:8a:5a:27:da:d7:9d:0a:55:ba:b0:05:
bc:29:a8:3c:99:f9:88:f8:1f:c3:7e:a0:d4:4d:d3:
e4:3c:e9:b9:c5:9f:e0:69:ee:39:18:de:82:fe:7c:
d6:9b:48:6b:83:38:0b:cd:53:c7:6d:d2:62:c0:77:
83:42:db:ed:69:c6:4d:cc:f2:7b:f4:1d:85:77:c1:
3a:2f:13:2f:46:c3:36:a1:0a:a6:22:bd:9b:5f:b4:
62:55:6f:fb:60:98:15:dc:49:4b:54:41:77:83:c4:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7D:3A:8E:9C:60:90:AE:6F:41:D9:B2:5B:AE:B6:6F:62:60:3F:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898f20b4-a394-30bc-afc5-cdbf6e6a455a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:a4:84:d1:24:37:6e:e2:92:4d:b1:2e:36:73:23:c8:a4:ec:
c9:b2:ef:bb:f0:da:75:5a:21:94:89:fb:b2:1f:c8:ce:ff:1f:
3b:61:bd:d7:f3:1f:d5:14:2c:04:08:67:bb:c4:b5:42:bd:2a:
cb:6a:9f:bd:e9:14:00:2c:14:78:6c:47:2c:f0:08:34:62:82:
88:af:ac:80:47:55:33:ad:56:d8:18:2e:d3:69:5a:e8:91:26:
64:e4:1c:c0:89:6f:15:6b:9e:02:d9:28:eb:6e:3b:b9:ca:a3:
7c:9e:ac:5d:a7:3a:26:d8:98:1f:88:2c:3a:e9:60:a8:ee:de:
5b:e3:2d:16:5f:1b:d6:c4:a4:a7:00:28:7c:4d:71:2f:0b:7e:
10:54:97:fc:34:80:51:4c:10:84:30:d5:f7:e1:58:a1:5b:9c:
96:15:d4:d1:fd:1d:c6:40:75:81:cb:1e:eb:43:e6:38:e8:5d:
0a:8c:99:a7:f1:be:db:58:65:0a:7c:4f:82:2e:e9:14:82:07:
4b:31:e5:da:5e:2d:2b:65:64:c3:a9:05:81:a2:0a:6d:dc:f1:
71:17:b3:1a:8b:d5:b5:b8:ca:92:61:d0:a9:ff:67:3f:03:8b:
82:c2:a1:2c:16:3c:f7:41:cb:4e:3c:57:06:37:9b:6b:c3:42:
64:31:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:40 2025 by rpki-client