Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa
File: 975b2e17-f15b-3eda-aa6f-40d437f71e08.roa (raw, json)
Hash identifier: sjyPsiIqGCFUWnYnga4/6wI943IQHzFIAYTxtatgS2M=
Subject key identifier: E9:9E:25:1D:5E:FE:6C:CF:D4:57:FE:6C:45:FC:BF:8C:6A:64:C0:8A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584827C5413B520C525C08185550
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 24319
IP address blocks: 23.214.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:41:3b:52:0c:52:5c:08:18:55:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=770b22dd-ecc0-4dda-a03c-7647d1f73542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ac:7e:d9:dd:79:40:b2:a6:a8:bd:e7:99:fb:
7c:63:5a:a8:6b:22:37:77:45:ae:94:a9:34:3b:08:
65:96:61:01:66:bd:e6:50:1d:7c:05:0f:6f:17:59:
97:99:80:80:e1:3a:2c:90:76:30:54:d2:65:f9:da:
4b:a2:13:a0:47:90:b6:e6:28:c1:fe:64:84:a2:28:
9c:50:f2:4d:e4:38:6a:76:44:e1:fb:3f:64:36:4a:
da:1f:e0:e5:5f:32:70:77:95:c3:e7:1a:4a:eb:08:
19:41:6e:99:33:d6:09:c2:62:7f:3f:75:26:95:b5:
77:9f:e9:84:5c:a6:7a:d4:de:6b:01:39:a2:40:65:
69:74:83:e1:46:3c:6b:45:5c:19:56:cd:a7:26:ac:
60:3c:c5:df:86:fb:4c:ac:de:ef:ce:88:de:2b:48:
10:4f:3c:15:bc:4e:b1:dd:a6:6b:cb:e7:e6:4d:21:
9b:71:ef:18:cb:17:05:df:50:39:35:a8:bc:0b:1d:
24:c2:95:b2:ca:70:a1:6c:81:d4:25:62:f5:77:9b:
33:c8:26:ae:1b:22:80:74:89:1a:86:5e:ae:f4:57:
91:98:2a:52:2a:8d:68:58:48:a7:ae:5f:25:10:80:
53:2e:7c:8e:85:ec:b5:bd:fc:65:c1:e7:97:1a:e4:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9E:25:1D:5E:FE:6C:CF:D4:57:FE:6C:45:FC:BF:8C:6A:64:C0:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/975b2e17-f15b-3eda-aa6f-40d437f71e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.214.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:36:5b:13:0a:67:53:b6:ff:63:b7:2b:4a:b5:b4:f2:09:8b:
68:c6:ba:b1:a8:46:46:95:49:eb:96:47:2e:e7:05:ce:c8:bb:
09:54:59:47:e6:ff:b0:94:2a:41:e7:12:66:73:36:aa:38:4d:
49:0b:78:e6:6a:6f:84:2b:af:ea:a4:8d:39:d7:e0:7b:c8:6d:
ca:24:ee:d2:3c:df:4a:63:c0:2e:ef:81:22:7f:99:ee:6d:15:
75:10:11:b5:e6:3b:fe:66:03:dc:e2:a0:b1:b8:4f:27:f7:f2:
8a:83:1e:ea:57:12:c7:f1:36:a4:ee:4d:ad:f4:95:0e:58:fb:
39:42:8f:87:65:a4:e3:d1:cd:53:b3:e7:36:04:fe:02:ba:db:
38:5a:1e:55:9b:09:09:a5:e7:98:f6:68:5a:0c:d5:b3:5e:d2:
4e:c5:8b:ec:aa:26:e7:6a:a9:91:6c:f5:5c:64:b6:22:0e:d7:
f5:ee:ef:ce:17:3b:f0:5e:d3:67:69:e9:33:61:0e:55:8b:a6:
73:c4:71:b2:56:e7:0a:91:dc:77:73:b8:0e:47:83:63:31:0d:
f0:91:1a:87:22:f0:29:9c:c6:e2:cd:81:40:14:7e:60:c3:44:
17:90:97:85:33:97:53:62:45:01:c5:2f:04:8b:32:60:91:ce:
f9:6c:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:31:59 2025 by rpki-client