Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3016569-f03a-3e99-ad19-248f0ee5d302.roa
File: a3016569-f03a-3e99-ad19-248f0ee5d302.roa (raw, json)
Hash identifier: gOH9sIH3fTSp0qx54vIl2jAXlEdoQwv7H/PZAvDWbBY=
Subject key identifier: 3B:F0:3E:7A:1F:2F:61:76:0E:CF:B0:A2:71:48:42:6C:5E:EC:D7:60
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209B394608575BAEDD24E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3016569-f03a-3e99-ad19-248f0ee5d302.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.38.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9b:39:46:08:57:5b:ae:dd:24:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=a9637f7b-71f8-4108-9b74-eb805049700d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:06:63:6b:12:b8:d9:a3:8b:42:96:f9:6b:
52:0d:b9:31:e6:fc:97:51:47:b3:be:74:ea:70:7c:
7d:b5:fc:db:d0:1c:d2:a7:ff:20:77:cb:66:f4:13:
ae:aa:21:be:50:cf:88:6d:71:17:73:1d:ba:14:7f:
38:53:c8:44:5c:ff:db:19:ca:39:88:28:22:7a:bb:
c1:af:7f:4f:8d:05:6e:77:ae:b9:ce:f5:aa:e9:d9:
27:86:c0:59:51:35:bb:e9:03:9b:76:f5:2d:b2:69:
3b:6c:9b:87:bd:74:6f:0f:c0:2d:c2:60:98:9e:e0:
6f:10:10:f4:0e:47:ab:69:72:91:6f:24:5a:bf:91:
b3:d2:33:51:a6:40:14:fd:9e:89:11:0f:a6:44:e6:
86:78:23:09:9f:f8:e4:fb:b5:19:43:8a:db:7a:1f:
a3:02:ab:e3:68:bb:9b:7c:37:d6:31:29:59:99:4e:
09:86:12:96:fe:bf:7b:26:85:8f:62:f6:90:16:20:
1b:4e:5e:2d:b5:8b:a5:2c:26:bd:95:80:74:33:d9:
cf:af:6d:4d:73:df:cd:f2:3b:d1:fc:f0:87:63:ee:
c0:bc:16:3b:58:5f:bf:4d:e0:ff:23:46:4e:f3:d4:
91:00:7b:12:67:12:68:df:c6:c1:2f:47:d7:37:fd:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F0:3E:7A:1F:2F:61:76:0E:CF:B0:A2:71:48:42:6C:5E:EC:D7:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3016569-f03a-3e99-ad19-248f0ee5d302.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.166.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:e8:6a:fb:25:0f:08:26:7c:ae:92:70:6c:0e:aa:02:89:e5:
94:68:88:d3:87:ad:db:c0:87:8e:d6:92:ef:f8:df:ee:9d:5a:
51:a4:72:6d:6b:14:a4:12:4e:d7:77:eb:e6:2b:28:28:f5:9b:
c5:98:a3:ce:78:5a:7d:37:68:f8:64:76:1d:af:cc:85:57:ca:
47:6a:d5:9e:d8:23:11:92:60:06:9f:d3:a4:79:02:e0:c6:04:
42:f4:ad:c7:45:88:0b:30:e5:c9:93:38:79:36:15:7b:86:09:
37:c8:ae:05:0d:f2:0a:31:bb:ab:c9:fd:03:aa:cd:cd:17:da:
55:e5:5d:b7:80:d0:58:31:87:e9:fb:a3:e6:3a:dd:7b:d9:a5:
d5:68:63:38:b5:73:f3:8a:e5:6f:2b:3c:45:b4:74:84:7c:b6:
03:85:d0:43:09:a6:41:81:33:9f:39:65:7c:a7:c1:6c:65:03:
57:0f:dd:3a:9d:69:e9:2c:93:e9:76:65:54:49:db:45:c4:a4:
ed:07:b2:13:01:5a:7b:d4:d0:82:c4:a8:ab:b8:5d:df:d4:0e:
b6:fe:fa:6a:92:4f:24:95:6b:e4:68:cd:48:55:8a:3f:3a:3a:
5c:8a:73:a5:6c:34:78:93:3c:b2:80:88:62:10:21:09:7b:a4:
ce:9d:2a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:45 2025 by rpki-client