Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a41d18-4fe7-3120-bbdd-e69202900cb2.roa
File: b1a41d18-4fe7-3120-bbdd-e69202900cb2.roa (raw, json)
Hash identifier: xL3D1jYBXD6vgoSF7lBXa+qayBBX9vHgQQrUHtn7n2E=
Subject key identifier: 6C:73:6E:F5:D2:74:C5:36:76:3C:A4:A9:5E:7C:7A:42:9A:E2:33:11
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CD1A66C3D0576637D180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a41d18-4fe7-3120-bbdd-e69202900cb2.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.35.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:cd:1a:66:c3:d0:57:66:37:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=9acaf01b-cee3-4c07-ab60-8f5568948308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:6a:ec:e6:f9:fe:52:36:71:80:5b:54:c7:
e8:9c:8f:56:0e:99:9e:c9:43:ca:f4:fc:21:d9:7e:
f6:27:c7:8c:e5:cb:50:51:dc:d8:4f:3e:a3:27:9e:
b2:ea:41:2a:3d:b9:8a:ba:c4:91:35:ec:7d:a3:3c:
3f:06:c0:80:0c:cb:6a:47:d4:de:42:65:f8:2f:f6:
3d:b2:ed:5a:2f:95:aa:cd:19:92:25:96:f8:2c:0c:
5b:6a:9b:d3:cb:14:df:8e:7e:2d:cc:54:90:7c:f6:
2a:ec:31:b6:86:6a:d6:46:86:22:e3:c0:6f:60:3f:
3f:8f:c3:c4:6b:cd:45:6e:2d:ee:cc:a9:30:3c:29:
ce:f2:dc:32:f3:6b:98:68:22:97:0d:f3:c8:86:44:
8b:3a:b3:08:2e:76:5e:7d:3b:2f:d7:44:a2:1a:67:
c0:41:6f:fa:fe:c8:69:18:ca:43:88:4d:5d:be:df:
23:07:29:ef:d5:92:72:a9:49:23:37:c6:d7:b0:b1:
b7:2d:9f:0a:e1:94:8a:36:07:3b:6b:7b:aa:89:48:
e1:c2:1f:46:e9:1d:5e:1e:84:f3:7d:73:85:b4:35:
44:6f:6f:13:23:60:23:35:b8:fe:77:8e:50:fc:ec:
68:dd:da:ac:40:44:c1:6b:d2:03:30:ff:48:b1:0e:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:6E:F5:D2:74:C5:36:76:3C:A4:A9:5E:7C:7A:42:9A:E2:33:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1a41d18-4fe7-3120-bbdd-e69202900cb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:16:57:40:b1:e8:12:e8:50:ce:09:e5:9c:ae:98:06:1f:ca:
96:a6:ae:3f:be:95:f9:ee:d6:e6:11:74:71:ac:ec:ff:ce:94:
4b:94:47:3a:45:ff:a5:60:20:9a:5d:eb:d5:6e:e7:03:72:2c:
8c:10:af:ac:65:99:e6:18:30:b4:4e:31:17:df:a7:25:39:ad:
0d:10:da:d5:04:16:f8:c1:e1:75:fe:07:4f:50:de:5b:75:f7:
17:d3:8e:8a:ee:1d:88:f0:7e:b3:26:4d:66:09:e3:79:e0:c6:
ad:c1:f8:22:97:98:b4:8c:ac:00:f8:65:75:81:89:3e:cc:75:
13:84:c1:01:37:a8:40:9b:c3:80:2b:ce:46:5b:fb:9c:71:c2:
4b:71:54:03:99:41:fa:d3:eb:5e:e4:bd:c3:ca:63:7a:2b:58:
0d:76:ce:9c:2f:10:b9:03:c7:b2:05:23:20:7c:de:3f:8d:df:
96:4f:f2:fc:01:fa:69:db:88:b5:c0:4a:7b:4b:ec:5b:ab:33:
c3:05:f6:dc:0a:7f:87:44:ff:80:18:29:5d:e5:7f:8e:dd:41:
91:31:88:59:c6:24:05:30:5f:a1:63:4f:91:5b:fb:58:7b:ef:
01:52:a5:80:a0:48:b5:aa:23:48:9d:61:b2:6b:4c:ee:f8:17:
ca:87:93:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:35:12 2025 by rpki-client