Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51a240-8131-3703-947d-48e02f0ce40d.roa
File: ab51a240-8131-3703-947d-48e02f0ce40d.roa (raw, json)
Hash identifier: iVoD1NUBel/p3NBTGhIqALZ+qDGER9aZHgqsfZIEo6I=
Subject key identifier: 80:B4:17:A9:F0:8B:E9:0D:5E:2F:D5:59:78:6E:B5:6E:3C:F5:4A:84
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487FB5EE8848988D9737680740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51a240-8131-3703-947d-48e02f0ce40d.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.47.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:ee:88:48:98:8d:97:37:68:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=2aabdd87-7253-44c7-88f1-2c67fc857b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:93:e6:09:46:a6:e9:a9:45:3c:74:0d:f9:
5c:19:aa:e9:2c:be:55:1e:85:a9:1e:7c:85:80:ff:
ed:6d:83:bf:61:0d:82:b8:dc:d7:6c:49:05:b7:00:
00:ee:94:49:9d:26:20:e9:22:45:e0:c3:fe:07:3c:
f7:97:d7:18:fc:89:2b:99:5b:95:3b:80:d4:29:02:
75:c0:05:55:d4:66:fb:0a:a9:0a:d1:5b:ae:80:5e:
a9:7b:dd:52:87:ab:ed:c5:e8:4b:26:bb:37:fe:57:
1e:2b:a2:ce:af:2b:97:52:b3:be:27:9c:aa:51:79:
b4:84:40:ea:40:2c:a6:c0:4c:3d:bb:6d:94:86:5e:
0b:9c:f1:e2:ef:4f:39:1c:bd:11:d9:80:06:9d:d5:
3e:41:61:d2:62:25:e6:80:c9:3f:31:36:3f:68:cb:
b4:79:a3:1a:6f:ee:41:6a:e7:10:01:4b:c7:93:de:
ae:75:ea:69:1a:2d:93:88:cc:6b:7c:53:98:29:89:
31:45:0f:79:6d:77:4d:ec:1d:47:d9:c5:fb:25:f0:
6d:24:84:97:37:69:85:8d:d5:e7:2b:82:d3:1c:9d:
ac:ca:63:f4:e3:b0:60:f2:5a:82:99:de:0b:02:da:
26:03:71:e2:1c:58:1d:0e:bb:9a:be:f8:2f:a0:56:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B4:17:A9:F0:8B:E9:0D:5E:2F:D5:59:78:6E:B5:6E:3C:F5:4A:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ab51a240-8131-3703-947d-48e02f0ce40d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.47.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:82:7b:c4:31:15:14:ff:53:ae:cc:86:62:ed:8b:21:1b:87:
7f:05:7b:98:81:fd:24:dd:16:4a:20:98:fa:e9:01:87:4a:e1:
bb:f4:20:d4:12:3b:7b:5d:63:fa:7e:68:48:9f:3e:d4:17:e8:
e7:8b:bc:8e:6a:66:db:8d:47:c0:f5:85:af:e3:f5:91:ae:04:
70:2a:e8:60:d8:94:86:bd:9f:6f:77:f8:fb:f7:da:0c:d6:a8:
c3:bb:ca:0e:f9:38:d1:cd:88:80:f8:7b:0e:33:8c:2f:d6:54:
ec:83:96:58:13:61:f1:17:79:b4:36:67:fb:8c:19:df:b4:d6:
97:af:e2:8b:4c:83:87:51:ac:b2:8c:2a:e7:d6:c7:27:72:95:
a5:6d:f4:c6:49:a1:2a:88:db:32:c4:a5:f2:3d:51:a4:96:a2:
9f:77:7c:90:81:6c:ee:ea:f5:71:d8:cc:67:ae:90:71:52:ed:
d1:88:06:76:ad:9b:1b:f0:43:45:3f:fe:84:80:a5:52:35:20:
7d:8d:94:2a:ed:06:82:6b:25:99:39:53:3a:e9:c5:a6:09:84:
a5:91:64:0f:fa:76:5b:c5:79:bf:43:42:04:50:94:a8:8b:7d:
d9:f4:5a:80:ef:22:c7:cc:92:b2:f2:30:85:64:76:b6:23:13:
c2:57:63:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:26 2025 by rpki-client