Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b909eec-9e49-3687-a9a0-23cefbbda300.roa
File: 8b909eec-9e49-3687-a9a0-23cefbbda300.roa (raw, json)
Hash identifier: Ce/sqg3P7NXZXPNfOTBeBsACsBk8jkqQGS+KsHKcN/w=
Subject key identifier: C6:09:90:BA:10:30:90:ED:E2:FC:20:2D:9E:C9:A7:20:E6:19:62:8C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB4965E2767AFF22FA97F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b909eec-9e49-3687-a9a0-23cefbbda300.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.43.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:49:65:e2:76:7a:ff:22:fa:97:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=4f05c4b2-53c4-43b6-b631-61d497a1d3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:69:c0:6d:7d:d5:49:37:4f:7f:55:00:94:
74:a1:c3:5f:7b:af:46:78:a0:9a:17:c4:6e:bf:af:
1e:fb:78:0d:1a:6c:48:84:7c:26:87:c1:a4:42:9a:
95:8a:f4:df:d1:58:10:f5:57:12:ae:ba:fa:7a:b3:
02:3d:e5:50:1e:50:ef:99:00:d5:a2:6c:89:47:fb:
d8:7f:a8:d0:18:66:47:5c:ec:0b:29:d7:23:22:52:
07:e6:4a:57:28:e3:ce:df:9b:e6:05:b0:4a:2e:b2:
5f:68:82:a0:d0:c5:99:21:85:04:18:b9:46:7f:21:
84:c4:34:a5:76:f3:a2:7c:cf:3a:e0:da:66:6b:ae:
5c:22:a3:17:15:ca:c8:b1:95:3f:7f:97:ec:a2:f0:
77:80:39:dd:4d:65:a9:70:6c:56:14:0e:f2:f6:5d:
fa:e6:c7:1f:28:f6:4f:15:e9:bd:42:2e:c1:18:a6:
d5:10:8a:df:e2:b8:38:1c:e8:4a:a3:41:77:87:b4:
fd:27:92:f1:80:19:31:e0:c6:e3:53:77:e9:d0:5b:
3f:0d:a9:58:89:b8:6e:c6:d2:87:37:17:12:fd:80:
43:d7:72:c0:5e:a7:53:a7:c1:f7:00:da:63:91:6a:
53:c3:5f:05:68:85:aa:13:ba:9e:cc:36:ca:ea:4d:
2d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:90:BA:10:30:90:ED:E2:FC:20:2D:9E:C9:A7:20:E6:19:62:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b909eec-9e49-3687-a9a0-23cefbbda300.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:4d:a6:69:cc:4f:45:32:fc:14:00:2a:fa:3b:e0:ad:52:ea:
e2:15:9a:57:be:9a:74:c3:90:43:dd:ad:a0:58:6e:fc:95:09:
62:94:82:13:90:03:0c:4b:38:99:b2:f2:56:24:9c:d0:8d:d4:
db:7a:5f:64:d6:9f:aa:4e:0c:51:d5:8e:90:b6:14:9c:a8:76:
d4:a1:27:80:c6:5a:c8:65:84:02:f5:0d:e3:b2:70:9e:46:53:
09:47:32:45:69:3d:e2:3c:b4:61:f0:1c:06:a0:16:f5:8f:f0:
aa:39:5d:ea:c9:08:2a:4f:01:ac:f6:b7:48:d7:01:12:4c:36:
11:43:04:27:1a:af:ae:8f:6e:e8:1e:4e:19:43:fa:d5:59:a6:
e2:42:07:9f:cd:ce:47:5b:49:02:c2:fc:0a:1d:2c:d4:c6:e0:
c1:2c:49:3f:18:12:a5:bc:8a:62:00:3d:fc:80:35:23:f5:02:
22:76:fb:42:a1:b4:bc:14:a4:2f:a4:fd:86:6e:85:88:cc:ee:
54:06:59:22:56:b7:b5:a2:0a:c2:0c:c0:f5:ba:49:d1:a1:bd:
9b:c9:d2:bc:8c:a5:10:c9:3f:07:be:49:ac:6d:15:e7:89:fd:
67:02:98:42:45:e4:23:d0:5d:c3:a2:99:95:32:86:8d:f9:a6:
43:db:10:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:50 2025 by rpki-client