Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/948bc23f-05df-35b3-96a1-0a623a2da157.roa
File: 948bc23f-05df-35b3-96a1-0a623a2da157.roa (raw, json)
Hash identifier: p4O2QY62VRH1J3GRXItsiIbCfDrHVXq+PwKK0Rwt2kg=
Subject key identifier: 99:C6:CE:B4:3C:D0:A4:67:79:60:32:23:5A:70:6D:4C:13:6C:2E:4F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C84F149063D61BD96E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/948bc23f-05df-35b3-96a1-0a623a2da157.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.35.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c8:4f:14:90:63:d6:1b:d9:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=606611d1-bd47-461f-9d07-781db034e302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:88:a8:11:7c:fc:27:2b:04:de:80:16:41:
ba:4b:ac:f3:45:b4:45:21:1c:5b:71:02:dd:4b:a4:
bb:52:ac:61:9a:fb:1a:bc:8d:fc:84:f7:3a:ad:4f:
ec:2d:30:fd:d0:07:7d:2d:58:0f:26:b6:ae:fe:64:
5f:3d:c9:20:29:41:7e:26:93:6a:fc:45:1d:cc:ef:
44:43:e0:04:2f:b6:7b:0e:8b:e7:b6:8e:68:7a:33:
0d:55:09:b9:36:0c:c5:89:e8:ea:2e:ef:04:33:4e:
80:12:27:47:0f:2f:93:2f:aa:29:fc:ae:14:f8:c1:
e7:34:0f:f3:d9:3d:2a:d9:16:8d:29:2a:32:24:34:
ee:8a:0d:b2:b0:4d:a0:bb:55:3b:02:78:d1:af:bb:
ec:fb:d5:1d:92:bf:6f:ef:a9:76:90:0d:77:c6:9c:
be:3c:69:a6:ed:ed:cc:7b:0e:94:11:32:40:cf:bb:
49:ef:9d:f5:c2:86:85:7e:23:90:a7:da:45:ba:77:
0b:aa:7c:40:e5:69:c7:02:44:ef:e5:f0:19:99:bd:
d4:b6:77:0f:f6:6d:dc:cf:af:0b:d7:a0:5c:3d:e5:
01:3c:68:b2:5a:e9:1f:33:10:01:e0:ed:24:ad:f2:
7b:d9:23:ed:1d:4c:d8:bf:8c:c3:35:a6:84:0b:c9:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:CE:B4:3C:D0:A4:67:79:60:32:23:5A:70:6D:4C:13:6C:2E:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/948bc23f-05df-35b3-96a1-0a623a2da157.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ee:8d:49:83:b5:94:6c:3a:50:31:17:3b:b2:3a:f9:1f:18:
70:03:ca:24:b1:22:66:e1:d8:3e:4e:90:dc:d3:3a:92:45:96:
14:43:ce:87:92:ca:1b:02:df:b4:1f:48:22:08:f8:80:57:4c:
e0:44:3c:e8:79:2b:fd:30:01:85:71:ff:a3:c3:68:2f:3d:78:
a6:c5:05:a1:57:91:e2:d0:df:14:dd:1d:9d:b8:e1:25:bd:b5:
23:80:a7:68:8b:48:0f:91:c2:13:29:1a:78:b4:36:3c:75:a6:
e9:8c:53:b8:9b:8b:c5:80:a6:93:d7:15:52:70:60:f8:cd:51:
7b:5c:80:1c:e8:17:4e:cf:dd:6a:c9:66:75:95:56:ab:5f:8b:
c8:10:ff:2d:6b:69:d9:5b:d7:eb:8a:97:61:67:7d:83:aa:41:
37:85:20:17:ad:c7:0a:ea:40:d9:fd:f2:55:77:b9:7c:82:ac:
73:2f:ad:56:25:8c:ce:c5:44:fb:b0:7e:8c:14:df:fb:b4:de:
3d:2c:97:2e:ef:83:a8:d9:e5:02:49:89:2a:05:24:e4:52:00:
29:66:a4:71:f1:1a:4d:8b:10:31:04:4d:55:0a:a8:e9:ad:65:
31:ef:2e:bd:fb:e6:e9:55:89:bd:a0:ee:0c:a5:fd:ec:c9:01:
76:f9:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:53:14 2025 by rpki-client