Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e1acb8-3f24-3bae-9933-6b37980c702b.roa
File: a5e1acb8-3f24-3bae-9933-6b37980c702b.roa (raw, json)
Hash identifier: ZUMKK+AkdyCxjWX2/xzvn/1fmvfYf4SnKHZzuhEIuZY=
Subject key identifier: B2:DD:C4:48:DA:96:09:08:80:80:81:32:B6:D0:76:10:6B:62:D8:28
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847DF2F659CA0FDF6BEB8ED26C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e1acb8-3f24-3bae-9933-6b37980c702b.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 20940
IP address blocks: 23.216.154.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:65:9c:a0:fd:f6:be:b8:ed:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=065ffab5-46fe-4428-97e6-5821088aae39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:fd:3d:c9:cc:e1:54:8c:5c:94:3a:e6:82:
27:bf:db:13:b5:4b:bb:eb:e6:6c:c3:5c:f9:be:28:
cb:8d:fb:03:e9:2f:04:bd:21:48:ed:7b:d5:ca:f4:
e6:41:a4:3d:58:2a:e8:e2:c1:6e:5e:72:fc:c9:9d:
93:7a:cd:2a:46:04:1d:62:89:47:a0:60:ff:1c:e0:
e4:95:6e:82:4f:c3:c4:74:b5:cf:1c:eb:6f:6b:10:
07:33:ae:fd:35:59:eb:37:f4:8e:d0:5e:8c:55:51:
36:1f:27:93:8e:94:27:18:c4:8c:2b:3b:68:38:89:
39:cf:e2:20:22:8b:dd:46:88:0a:8f:42:6b:05:72:
9f:53:41:5c:c6:63:c1:c6:d8:82:3b:43:b3:fd:90:
4b:20:a9:bd:27:41:69:7f:71:06:35:b7:4c:fe:88:
17:ca:4f:20:08:eb:bc:33:da:6b:0d:c4:07:ca:d6:
56:59:5e:9f:04:c5:fc:9b:ca:d4:1e:e7:3b:90:4a:
c9:e8:94:a7:fa:96:06:ae:60:99:2a:e9:79:18:86:
ea:62:79:8d:2a:eb:b3:6a:f3:78:5f:dd:22:2c:1a:
b3:96:f4:c2:db:a7:4d:ba:4e:7b:ba:3f:6f:71:67:
7a:a4:7f:a5:db:79:6b:a9:19:9c:55:4a:71:a8:29:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DD:C4:48:DA:96:09:08:80:80:81:32:B6:D0:76:10:6B:62:D8:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a5e1acb8-3f24-3bae-9933-6b37980c702b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.216.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:a3:6f:4e:81:f3:83:1e:86:d1:1b:96:2d:d3:93:6c:e6:fc:
de:b7:60:9a:af:87:bb:3e:a2:6d:fb:51:3b:4e:70:03:74:ed:
be:9a:27:79:63:58:29:82:cf:c2:87:4e:c4:e2:f2:37:9d:f8:
9b:69:89:1f:7b:7f:9e:1a:a6:65:7f:9e:95:1e:66:1d:a1:0d:
71:53:0e:1c:dd:05:b3:39:4a:96:66:4a:e3:5e:da:f2:83:89:
41:56:03:6c:79:31:15:15:ba:dc:a2:6e:1e:59:45:55:fe:b4:
5c:b2:39:e9:22:80:1d:b4:53:8d:5f:69:c5:c3:b4:83:7b:7f:
78:b3:28:0b:66:87:39:a1:9a:28:2e:df:4c:0c:7b:70:ef:96:
6c:12:a3:e5:fb:4b:b0:2b:90:e4:f4:68:35:98:e2:70:68:c7:
61:c4:23:6f:92:9c:4f:c6:6e:62:73:4b:24:65:54:e5:0d:0e:
dd:54:1b:8b:d7:b2:b1:16:8e:b3:7d:9f:16:fc:4e:05:0b:6e:
bf:49:2f:c9:4b:3c:53:40:8a:de:cc:c5:3d:01:d4:40:d0:b9:
db:ed:56:d5:fe:d1:f8:b2:78:5b:b6:aa:d1:d3:64:d8:55:2e:
21:ff:9d:d7:07:03:5b:ce:f4:ab:eb:a9:86:b8:fa:a6:7c:81:
39:48:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:34:52 2025 by rpki-client