Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa
File: aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa (raw, json)
Hash identifier: IrmIEpAaWpkoyB76430NQ2OgRZza4ZxZu+71GIJq0Cs=
Subject key identifier: DB:6E:A7:C5:4C:03:24:71:9F:85:68:31:F7:D2:B5:53:D6:1F:98:19
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485B6B057E4DB6077A37F55200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 35994
IP address blocks: 23.39.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:05:7e:4d:b6:07:7a:37:f5:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=dc4b5499-97db-40f8-95dc-f290ceda89e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:b8:36:6b:db:64:70:c7:d0:a4:2a:65:29:
db:ac:d0:b3:30:88:6c:6b:62:db:45:2f:1e:7e:07:
74:ef:9a:93:49:e7:c4:70:93:7e:c8:4c:2c:2a:ec:
69:d3:25:4b:cb:28:46:01:7e:75:3c:1d:e7:77:09:
d6:ee:6e:81:c2:0e:55:a3:82:6c:09:60:b0:d3:f5:
82:7a:db:35:d9:37:4e:f3:fb:ad:b6:3e:dc:d8:a9:
a7:3d:2f:b7:13:87:2b:7c:5c:5a:9c:84:e2:44:ed:
7c:0b:ac:d4:c5:8b:07:bf:96:2c:0d:66:3c:d3:6b:
e8:eb:ee:f9:2c:d2:41:a1:c0:bb:71:da:89:b4:52:
39:b3:f6:bb:8e:97:32:bb:6b:1b:60:58:f8:a2:ed:
28:83:e2:5c:c4:c4:a2:ab:d5:29:98:89:1f:45:80:
7e:87:21:e4:8e:d2:25:8f:bd:31:06:6d:2a:e1:c1:
77:3b:80:2e:e6:63:6b:9f:0a:04:f2:6c:4a:04:31:
41:4a:4a:eb:55:b0:54:8d:19:17:9c:cd:9f:3e:0f:
49:0b:97:92:c6:07:1c:18:2b:ee:e9:0a:ae:5c:31:
cd:dc:1e:d4:1c:9b:be:b3:7c:f7:93:23:0a:87:67:
c0:3b:e7:c5:9e:9b:31:fb:50:07:16:4e:d5:04:7d:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6E:A7:C5:4C:03:24:71:9F:85:68:31:F7:D2:B5:53:D6:1F:98:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aac812fe-3655-39bd-86ff-2c85a1cb9ce7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:fa:75:b8:03:78:b2:25:63:de:d2:c4:71:15:31:c7:9a:98:
f8:1c:65:f9:f5:ae:71:55:8e:c8:34:5a:5b:e2:f2:c5:ad:cb:
a4:da:5b:ea:dc:30:6e:3a:ac:1f:c3:fa:76:6a:c7:22:9c:c7:
5c:b5:d4:dc:7f:d9:f8:d5:07:d4:c6:77:6b:8d:7e:12:56:e5:
80:94:7d:04:5e:61:7b:bd:a8:18:ff:93:81:8c:f3:5e:5c:20:
4f:29:aa:9f:e3:52:71:e7:13:92:bf:71:5d:45:1c:0c:f9:1e:
34:ff:5d:86:79:21:85:27:78:6e:f1:5c:21:e1:14:85:1b:e4:
e8:13:b2:7f:b4:80:91:f1:fa:52:4a:65:d2:a0:a2:91:b0:68:
0e:1f:36:0e:58:ad:a7:d5:27:23:d6:97:28:03:70:30:f9:cf:
65:38:1f:2f:9a:ce:19:25:68:c2:8c:bc:9a:d7:e3:66:5f:37:
2d:fe:5c:3a:f2:3f:d2:ea:8d:ea:c4:a5:86:3c:1d:aa:0d:32:
d3:29:cd:6b:db:24:32:0b:5f:a8:10:8a:d0:bc:ab:cf:0a:58:
91:71:e3:4d:87:0b:b1:e1:b3:3d:0b:8a:f8:70:0a:21:46:2c:
98:68:83:c5:de:c3:a1:d8:17:d3:da:d2:c3:95:81:93:81:60:
51:fc:c8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:51:05 2025 by rpki-client