Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa
File: a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa (raw, json)
Hash identifier: MG4nGWtc7Ppw6qmZubLNePbqsF4jWXubyIjUKUDYaAQ=
Subject key identifier: 4E:73:C0:B8:44:36:60:40:8D:6C:5F:80:47:67:D2:89:E9:3B:41:88
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584824FA85285B409E6432BB8EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 24319
IP address blocks: 23.67.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:85:28:5b:40:9e:64:32:bb:8e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=afdeb820-e578-4c59-be10-094fd323713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:11:fa:e6:dc:90:76:7c:66:53:68:08:78:
56:6c:29:dc:4d:fa:02:fc:31:95:3a:d3:43:af:7e:
d9:dc:d6:68:30:d7:07:ce:b8:8a:d0:58:f6:b2:73:
bf:50:40:00:07:63:b4:83:95:5a:e7:8c:2a:1b:3d:
26:d8:dc:9e:b5:47:e9:cd:c4:3a:81:25:b6:84:32:
ca:b5:bd:c2:24:75:68:2d:05:65:e9:60:ef:13:c1:
39:3f:29:b8:97:44:2a:19:fe:b0:b5:b5:a7:f0:b0:
5f:3a:37:73:d1:0b:4d:da:33:9b:6b:9c:a7:03:a0:
1c:13:3f:6f:83:a2:84:78:34:d8:96:c6:d2:b3:0e:
a2:7e:3b:e1:44:ed:bd:07:9a:e0:89:25:31:af:8d:
6f:ce:48:de:5e:57:85:16:4d:8f:d9:18:ee:95:01:
42:09:a2:45:38:cb:10:bd:ea:7f:fa:94:14:17:2f:
0e:d0:cd:5b:d5:04:3c:2f:32:c0:2a:a8:7a:01:d1:
47:e9:ee:8c:cb:e2:f7:f1:02:66:b3:21:e5:a0:b2:
0f:a7:d8:39:8f:5d:ed:17:d8:ab:1b:49:9c:09:a0:
9e:f6:91:f5:d9:55:82:4b:37:e6:0a:c5:e9:2b:aa:
ea:b4:ad:b4:3b:ad:55:40:35:c8:0b:3b:3b:b1:55:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:73:C0:B8:44:36:60:40:8D:6C:5F:80:47:67:D2:89:E9:3B:41:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a88d7f06-3ff5-3495-8bb7-5e329ed81d48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.67.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:ae:c3:b8:5a:cd:e3:66:ec:28:7e:cd:ab:0b:22:15:29:eb:
c1:ee:3f:03:31:24:62:fc:27:3b:5a:f3:78:3b:6a:74:18:48:
40:b8:9b:6f:34:82:ed:0d:b7:60:7c:e7:da:75:23:5d:2f:2c:
d6:84:eb:c6:40:d4:ef:bb:f1:0c:10:d3:0c:f3:82:0c:16:c4:
df:e6:d4:48:76:b5:1e:d2:85:d9:b6:02:8f:b7:bf:57:a1:23:
4d:da:df:f6:9c:94:03:28:ec:01:08:22:fa:88:7f:40:7a:9a:
76:b4:d8:62:de:3f:5b:ea:3f:49:90:cf:cd:b7:cd:51:96:eb:
24:be:21:a3:43:d0:63:23:b7:f6:00:b8:32:b7:d7:01:4f:32:
6d:f5:04:e4:fa:a8:6a:0c:c8:09:77:bc:ad:0f:fd:51:04:cb:
85:7c:67:64:06:f3:44:c5:6b:50:72:24:fc:78:d1:a5:cf:8d:
7c:94:05:31:a0:20:73:de:39:00:5d:7a:9b:8c:71:47:4d:7b:
21:45:74:74:de:06:6a:c9:d1:7b:f9:67:43:be:7a:57:49:15:
a1:d2:82:8a:93:fd:64:61:61:10:78:5f:2b:0a:52:1c:3e:5e:
98:5a:e7:4f:36:c2:12:19:3a:d7:35:9f:aa:ce:e1:98:1b:af:
18:8b:f3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:47:44 2025 by rpki-client