Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7554a1a-cad1-32f7-9060-8d16b7feec19.roa
File: a7554a1a-cad1-32f7-9060-8d16b7feec19.roa (raw, json)
Hash identifier: 9Emvdo4/qPQg+Qvz/mTHts3KOm26GPPKLPcP1WlvXS4=
Subject key identifier: 0F:EC:7C:5E:0E:07:3B:09:6F:4E:10:1A:DA:77:83:38:F0:7E:CF:94
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C37383B5CF282F6DCE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7554a1a-cad1-32f7-9060-8d16b7feec19.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.33.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c3:73:83:b5:cf:28:2f:6d:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=0863be44-0ba0-45a1-8f18-af80d65b58ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:a8:22:5a:d9:77:e4:ea:08:16:12:a8:0f:
d6:65:b2:64:99:7d:b3:2f:bb:b2:4d:6a:eb:15:f2:
a6:a6:a5:d3:db:21:ed:fa:a1:74:1b:58:8b:e6:2b:
80:45:27:f1:b2:f6:b8:92:e3:fb:10:8c:f6:2a:0f:
73:c2:d2:ba:69:67:c8:5e:97:e5:b4:23:03:64:5c:
a7:22:b5:7c:f2:75:00:a1:db:42:49:7f:50:04:e7:
68:b9:d1:05:01:85:e3:16:30:34:c4:f8:f4:bf:6e:
f3:fb:f1:33:5f:11:c2:d0:40:ea:db:db:44:7c:c9:
15:75:d9:b4:0f:66:97:31:09:17:61:5c:13:cf:bb:
aa:51:0a:c5:6d:de:2a:a8:5f:31:ee:d6:46:46:d0:
ce:a1:f9:d6:2a:6a:35:bb:39:b9:6d:f0:fd:4d:24:
35:17:14:4c:86:ea:bb:a6:b0:97:7e:50:88:84:b0:
93:d2:c5:84:84:6f:80:8c:f7:8f:91:16:b1:a2:29:
33:03:f5:26:83:67:e2:fa:32:64:99:8f:50:7c:81:
1e:90:cd:be:dc:32:49:f7:b5:a7:6e:70:11:e0:9b:
5b:60:ce:ef:63:bd:7a:00:96:c1:d5:ed:bf:3b:3f:
d4:2b:6a:44:04:e3:71:5e:68:2e:04:5c:15:e3:75:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:7C:5E:0E:07:3B:09:6F:4E:10:1A:DA:77:83:38:F0:7E:CF:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7554a1a-cad1-32f7-9060-8d16b7feec19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:8c:5c:b2:ac:53:06:92:e2:c4:70:3d:34:f8:55:06:60:e2:
bf:ed:c7:c6:c6:69:29:0f:3a:5f:e3:e8:75:9c:7e:56:0a:6d:
bd:aa:a8:81:56:30:55:f2:41:99:6d:c4:72:42:03:07:c7:48:
db:2c:06:26:ac:9a:31:bb:4c:07:6b:b6:ba:6a:80:6d:65:18:
84:ee:be:36:44:98:9c:df:3e:fa:8c:5e:41:42:c1:d7:ea:b2:
3e:14:42:48:b4:f1:f8:44:fc:3b:7f:b6:46:87:26:2e:06:54:
2f:6f:2d:80:24:3f:b4:34:b8:cf:e0:c8:26:75:67:20:7b:e0:
01:1a:2b:35:e8:e0:bc:98:67:fb:01:19:b6:8a:dd:ee:8d:7c:
d3:fc:48:cf:e6:c9:ab:ee:cf:c1:df:a2:b9:5e:0d:ef:66:b5:
21:b1:37:dd:64:7b:c7:ed:17:cc:a9:97:60:b7:a8:da:c6:23:
a9:eb:04:25:30:53:2f:1e:b7:f6:ac:a0:06:b7:3e:53:72:5b:
80:87:dc:fa:06:f6:a5:9b:67:e9:db:7c:9b:52:61:bd:88:2d:
04:db:03:33:40:02:e9:ab:d2:a0:e2:1c:cb:c3:68:4f:4e:28:
44:10:87:db:56:22:8d:c5:3f:8e:07:f0:59:13:b2:e6:47:c8:
14:49:6e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:34:54 2025 by rpki-client