Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1ecbbf8-c964-385c-bc7c-0fdac9ccd349.roa
File: b1ecbbf8-c964-385c-bc7c-0fdac9ccd349.roa (raw, json)
Hash identifier: ASg36PQOSHiPudUkqzt9IhAsXQWCY6vVJPD4nLX0mJI=
Subject key identifier: 20:7F:95:D9:70:0B:24:54:AD:27:96:46:B2:68:01:9F:5F:93:8E:55
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483F8044DAA88F3186AADC5E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1ecbbf8-c964-385c-bc7c-0fdac9ccd349.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.77.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:44:da:a8:8f:31:86:aa:dc:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=c24bbbe2-6c0e-4adb-a105-60607c56a2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:8b:1f:71:a9:56:b3:5e:a3:14:09:c7:94:
fb:25:16:9b:57:6b:30:7a:81:82:f0:55:9a:76:90:
9a:d8:c6:0c:f6:76:26:29:bc:80:c7:f2:da:db:7d:
6e:90:b2:97:c3:17:6a:a2:bf:7f:22:08:74:77:d7:
30:02:d5:3f:d8:26:7e:83:e5:c1:6b:cc:6d:92:ff:
46:76:98:ff:0b:39:4e:bb:cf:e6:73:30:32:94:8c:
11:94:8d:39:26:c2:35:c4:66:9e:4a:30:b6:43:d5:
db:fa:94:c7:58:5d:9a:b3:00:1b:aa:68:00:a7:51:
c4:3d:c5:4b:be:2f:89:11:a5:5a:8f:de:78:ec:86:
7a:77:ca:67:2e:d2:64:99:b4:84:61:91:ad:17:86:
0d:4e:ca:59:c8:6c:ca:11:cb:ed:26:e1:b7:33:0d:
ae:4f:bf:1d:bf:67:46:3f:49:70:18:47:44:ab:28:
95:df:8d:17:14:de:d3:32:01:d1:61:63:40:a9:c2:
02:42:10:f6:a3:2a:a3:60:63:bf:2f:88:e5:a0:b5:
9d:ef:48:9d:39:00:81:ce:cb:21:af:23:a9:cd:f1:
02:83:9e:53:9f:a9:51:42:d0:f5:01:dc:d1:1c:14:
f2:ea:81:27:1e:48:6e:2d:c7:08:c7:ab:34:63:70:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:95:D9:70:0B:24:54:AD:27:96:46:B2:68:01:9F:5F:93:8E:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b1ecbbf8-c964-385c-bc7c-0fdac9ccd349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.77.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:3e:a6:6e:eb:73:b1:5a:1c:40:17:d5:d1:79:f8:1a:83:11:
3d:fd:c6:f6:c7:f5:d9:d8:e4:08:ba:ba:3a:45:39:4e:65:78:
39:c5:ab:af:3b:b0:9f:c9:c3:ad:12:c2:3e:ef:11:6c:3f:81:
0e:b7:67:ec:70:23:56:93:7c:7d:9b:53:e6:21:91:ae:2f:e4:
ff:7c:d5:c7:67:86:4c:ed:48:ab:1b:96:cc:10:9a:dc:37:5c:
1e:10:37:c2:6e:cb:03:76:9a:f1:2c:cc:2e:59:c0:66:25:4a:
ce:21:4b:8b:fa:47:2c:8a:42:a8:7a:6e:7b:10:72:25:62:bb:
62:ea:2f:94:a8:ba:80:08:32:c7:c4:0f:04:d2:77:a7:7a:eb:
a5:82:f4:87:e3:8e:69:39:97:4b:2c:d0:a4:80:ee:ba:dc:de:
29:4b:58:21:07:fb:fa:70:d7:36:65:80:fe:43:32:e1:87:21:
c1:7a:f9:e9:cb:5d:22:6e:2a:0d:7f:ed:0b:2e:4a:06:65:a2:
68:77:5b:0c:41:0f:46:d0:69:61:38:80:07:e3:6f:4c:c1:77:
86:9a:7c:08:ec:1f:54:bc:b7:55:34:5a:fb:f7:1d:58:37:66:
2c:3e:dd:9a:53:89:04:c9:e3:a0:97:db:b2:8f:a2:68:d0:33:
da:dd:35:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:49:38 2025 by rpki-client