Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5d737ea-6630-3722-85dc-5d144ef4e777.roa
File: a5d737ea-6630-3722-85dc-5d144ef4e777.roa (raw, json)
Hash identifier: Vi2ZAiaWMmLJ0OqWvoIFHkST7gN37L4J9n6LBQpGUa8=
Subject key identifier: 07:10:A9:D5:7F:A6:F0:07:EB:B2:EB:D2:7C:90:5C:86:EC:DB:CD:65
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB73C194C227657E70E400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5d737ea-6630-3722-85dc-5d144ef4e777.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.43.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:73:c1:94:c2:27:65:7e:70:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=badd6ece-3c6d-4d64-bfaa-a7ef6eea5ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f5:5f:a1:ca:16:b5:9b:3f:71:bf:b5:65:e3:
e4:70:5c:9a:19:63:cc:40:bc:d2:6f:85:f7:c4:9b:
d5:05:f1:ca:09:b5:e1:f3:82:b5:be:35:ff:58:af:
32:e5:e4:4c:51:3e:89:f1:cc:70:2c:e5:98:76:19:
30:74:ef:52:9b:db:29:82:bb:d8:3e:e2:c3:5b:0b:
b9:ec:12:1f:78:5a:f1:21:0c:41:00:36:41:e8:18:
b0:e0:9d:5e:01:2b:9d:2d:29:4d:e4:33:8c:ae:e1:
d2:c6:79:bb:74:52:8e:ef:31:ab:f7:a4:e9:8f:4e:
27:4b:b1:17:0e:a2:0b:fa:58:c1:49:b4:94:bc:b6:
35:da:9d:48:61:d9:21:71:c5:39:ae:19:60:b2:f9:
97:46:08:95:0d:4f:f8:c2:48:c6:90:4d:d6:42:08:
8c:ad:ae:83:ed:e0:58:9c:d8:c7:6c:8e:13:2b:e5:
9c:a2:35:66:8b:62:f0:35:0c:00:5d:b1:82:00:0d:
c1:ca:a3:bc:d7:77:8e:35:c8:75:8f:f4:f2:fc:9c:
6b:79:13:f1:ff:7f:4c:44:eb:5e:c1:97:aa:7f:7d:
47:cb:48:70:63:07:03:d0:a0:d9:65:f8:a3:69:e2:
51:1d:0c:8a:1e:02:d1:f9:48:e3:78:27:bc:f4:bd:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:10:A9:D5:7F:A6:F0:07:EB:B2:EB:D2:7C:90:5C:86:EC:DB:CD:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5d737ea-6630-3722-85dc-5d144ef4e777.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:27:f6:36:3b:1f:ca:1c:3c:7d:e5:82:05:19:24:9f:55:25:
b9:7b:8e:3b:e8:93:21:c8:eb:fb:38:6d:8b:fb:e4:07:1a:8e:
21:3f:06:c7:63:e4:52:b2:52:6e:1a:95:40:15:fa:72:e4:35:
e4:26:64:ff:55:ba:5a:d6:f7:b0:f7:dd:ff:47:7e:54:46:51:
a4:a1:be:5d:66:79:c5:d0:ea:b3:0f:11:53:3c:93:25:5f:57:
6e:f8:2a:51:66:bd:e6:bd:aa:17:ea:29:1c:62:bf:ab:fd:aa:
0a:9d:44:5e:2e:ae:97:7b:5d:aa:c2:85:fc:9b:0d:11:6b:14:
33:7d:63:a5:62:ba:2a:7b:2c:62:11:42:ce:09:70:1a:fb:94:
e0:4f:d1:3e:77:de:ab:3e:30:76:44:23:b1:ae:81:60:e4:28:
d9:9c:2e:65:e0:bf:72:b1:48:f7:79:ae:d9:76:14:af:05:59:
84:c1:a6:61:3d:b1:6c:a2:71:73:4f:57:7d:8f:a5:d8:c9:65:
82:c0:bf:03:dd:aa:96:83:b2:17:7d:cf:16:e2:43:57:18:db:
d6:82:73:b9:20:53:cd:a7:61:8c:b5:08:14:07:e2:16:de:f1:
20:70:3d:f3:00:d0:2a:26:b6:61:25:35:32:79:bf:dc:6a:cf:
82:ab:e6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:31:37 2025 by rpki-client