Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a681e6a4-9e1c-3e5d-85ba-d602c14a6e46.roa
File: a681e6a4-9e1c-3e5d-85ba-d602c14a6e46.roa (raw, json)
Hash identifier: WitsRycCmULv5jvlwftCYBkQXXu96GKngpaNJAiryts=
Subject key identifier: C5:5A:06:4D:04:F8:D8:21:F8:48:F1:D3:E6:EE:39:93:32:A7:1C:7F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483E1ABF52318195B15E5AE700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a681e6a4-9e1c-3e5d-85ba-d602c14a6e46.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.212.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:bf:52:31:81:95:b1:5e:5a:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=2ce8e916-7ea6-43b4-ba75-8a56b52b498b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:06:d4:80:d3:d0:02:cc:3e:96:9c:5d:00:
ac:14:83:cd:2c:09:c3:aa:0b:ae:b5:a2:55:0c:f4:
d3:14:11:e1:f3:67:c8:ba:3a:8c:4b:67:89:69:42:
82:e3:70:5b:03:02:58:39:8c:6d:12:5b:40:2b:2c:
5d:13:39:31:e7:0b:99:80:0d:08:a9:5d:39:19:1d:
c9:c3:b5:39:80:c2:91:32:14:56:4b:47:7c:10:80:
b6:de:80:34:d0:2d:ac:82:fb:57:51:c3:eb:88:30:
22:3f:38:fd:25:64:42:70:b6:1e:88:6c:25:09:a1:
d8:ee:4a:31:15:66:93:ee:e5:2a:11:81:5f:fa:3f:
eb:ef:96:cb:74:b7:3f:29:25:8c:12:55:5d:8f:4b:
c2:ba:0a:be:d3:e0:cc:2f:78:e9:b4:ba:fd:65:2c:
5b:3d:12:11:4e:81:10:da:e5:6b:f6:1d:3b:31:57:
ee:83:8c:6e:01:55:1a:7b:63:76:b3:32:54:9d:f1:
af:37:ee:a3:0b:18:a6:a5:5c:1e:42:d3:13:51:dd:
56:a4:f0:71:01:de:ce:e1:8b:13:12:c6:ec:0c:b1:
c1:f7:b3:c0:b6:a2:81:7d:28:48:01:ce:4b:60:8a:
ae:27:04:4b:b9:34:09:c1:25:17:ea:96:e4:af:78:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5A:06:4D:04:F8:D8:21:F8:48:F1:D3:E6:EE:39:93:32:A7:1C:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a681e6a4-9e1c-3e5d-85ba-d602c14a6e46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.212.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:66:9c:87:2e:7f:8c:ff:db:3f:60:84:f2:ef:a5:de:2b:fd:
3f:98:fe:29:d1:51:a0:35:95:fa:6d:50:5a:0e:11:09:dc:38:
7d:6a:5a:dd:04:44:13:ec:32:0e:16:ba:2a:eb:b1:e2:6a:7d:
e2:1f:d0:d3:79:80:3e:a0:f7:54:ae:01:15:e3:df:93:2c:a4:
af:d9:0d:1a:0e:77:ad:bc:da:8a:00:72:27:24:15:2d:ee:eb:
f1:82:3a:c6:04:9f:a2:8b:c6:51:0f:ed:5a:8e:24:df:2e:c6:
5b:35:bf:0e:6b:a1:b0:28:7f:f6:d7:0b:b3:c9:52:df:a5:f8:
90:ea:a2:8f:02:46:0d:79:71:41:d7:73:e8:a6:c9:c4:95:4a:
60:0a:35:0c:62:26:d0:73:26:08:4b:1e:28:18:7e:04:e9:4c:
00:36:6e:9c:a2:f0:4b:8f:83:01:54:3a:67:44:ec:29:26:82:
bc:ad:b2:67:c2:35:80:01:64:4d:80:21:a1:a9:42:ad:fe:eb:
67:6f:ea:44:e2:f8:78:46:ba:54:1e:3b:6f:79:e8:32:e5:b1:
f6:a6:3b:68:f1:d8:7b:86:43:65:ad:0b:4a:1a:ad:2b:1c:15:
4a:37:c7:07:6f:9b:a6:40:04:f3:5d:d0:bc:84:8b:d1:c4:fd:
93:6a:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:28:49 2025 by rpki-client