Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afbe5d86-6ca3-3d94-a742-4b582c552ccf.roa
File: afbe5d86-6ca3-3d94-a742-4b582c552ccf.roa (raw, json)
Hash identifier: fTVBopo2wkSx1SBrIyKDuNnzESXzH2dKw+xBzGt+cL8=
Subject key identifier: F1:67:2D:97:56:73:B8:6E:B6:F9:DB:60:64:5E:1D:B4:0C:53:FE:D8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485B6B0479015F7F2783FE7E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afbe5d86-6ca3-3d94-a742-4b582c552ccf.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.32.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:04:79:01:5f:7f:27:83:fe:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=f4f7b097-be70-4137-a530-73b1aa297d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:36:23:dc:aa:8e:03:55:fe:db:a5:01:54:7c:
04:3b:69:4c:73:82:d3:29:fa:8c:91:8f:d6:f9:75:
fd:b3:7d:a1:94:04:90:1d:ff:17:5b:18:ad:92:44:
10:1b:80:a1:14:37:9e:9d:06:93:bf:64:ea:6f:73:
dc:8c:08:b8:c0:55:2b:87:68:db:3b:86:1e:a8:05:
0f:7a:55:f8:bf:a3:35:f9:4f:90:8c:da:4f:47:16:
ac:f5:c7:c8:93:20:9e:26:08:02:00:50:95:6e:66:
02:0d:8e:1c:33:6f:44:31:66:e5:49:3c:b8:d0:2e:
f8:fe:23:da:ce:45:5b:21:a7:b6:05:08:d8:08:df:
ce:02:4f:6b:a8:cb:dd:1d:c0:a9:09:b8:ef:48:bb:
4a:18:72:73:02:56:67:49:31:27:fa:f4:80:09:b1:
6c:42:ff:46:02:55:94:d3:6b:77:43:28:eb:aa:11:
55:6c:f2:60:4a:ca:cb:e3:35:dd:85:70:c3:fd:52:
91:74:81:e1:20:e9:7c:3c:1b:d2:dc:ed:20:65:a0:
69:8c:b6:4b:ae:c7:06:76:7a:3f:81:7f:1d:5e:e8:
49:c0:0f:b1:c6:11:b3:97:fb:1d:d9:fe:51:f4:10:
d9:e7:d0:02:7a:ce:85:7d:fd:46:4c:c0:2f:3d:68:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:67:2D:97:56:73:B8:6E:B6:F9:DB:60:64:5E:1D:B4:0C:53:FE:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/afbe5d86-6ca3-3d94-a742-4b582c552ccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:1e:df:8f:75:40:74:9d:d7:07:eb:f7:68:a4:55:48:ba:ce:
09:ec:28:41:1b:08:7a:e8:e7:b4:66:88:b0:4a:96:2e:06:2a:
7a:3a:66:74:fb:3a:52:06:37:50:9a:d7:d5:d1:78:ca:18:c5:
66:a3:f4:ac:af:1b:e8:0b:ab:74:27:88:97:18:db:cb:7e:aa:
79:f8:a9:b1:9c:2f:0c:e0:ad:b2:a1:02:94:06:f4:86:72:5f:
c7:15:b2:10:dd:be:f6:04:1d:73:2b:5a:01:56:61:84:21:bf:
7b:6f:e9:22:b0:e5:99:04:18:fe:6c:66:3e:df:ad:fb:47:0e:
29:53:f6:4f:3f:b7:52:7c:b5:c9:73:7a:fb:18:da:a0:7b:20:
d6:17:9e:2b:5b:5e:57:6b:fa:5c:b1:27:51:61:5d:69:2c:df:
fb:97:3e:08:98:70:48:cc:0e:7a:eb:ec:2c:60:5e:c4:b5:8a:
75:8d:26:38:14:d1:5f:9b:46:76:0b:74:f6:d9:bf:aa:af:d1:
f7:70:d2:04:86:35:cc:f4:25:a5:f6:16:42:cb:82:15:0f:f2:
79:7c:a4:d5:9a:bf:eb:c6:d5:4f:71:d1:e7:71:16:9a:3b:9f:
0b:0b:e6:e3:5e:36:2a:ec:99:c4:d6:49:e8:d3:24:74:43:77:
f7:0b:33:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:42:32 2025 by rpki-client