Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa
File: b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa (raw, json)
Hash identifier: gqIXGnSuRDpoxs/HVtaWqM8SM1zK21T+TtWOsPNXk+Q=
Subject key identifier: 61:68:B0:A2:7B:B0:BA:6A:19:AB:1E:05:BE:E4:DE:A7:73:9E:60:EA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BA56446E0BEAEC8011B76200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 24319
IP address blocks: 23.208.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:44:6e:0b:ea:ec:80:11:b7:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=5f537d63-5ffd-481f-a0ad-48d8078c07d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:ba:f3:90:a5:d0:07:45:72:17:e5:75:5e:
07:77:4a:cf:d1:88:2e:22:d4:50:d8:80:95:16:60:
f4:23:e5:0b:81:69:44:d0:52:61:e6:3c:27:16:41:
81:99:22:0f:df:49:c0:44:8c:45:92:f0:41:78:0f:
88:7f:71:43:56:9a:ef:21:e7:cd:c7:08:be:b5:ff:
15:a1:4d:76:8c:81:8a:3f:92:93:b4:14:b6:c6:26:
b0:44:65:e3:d7:01:c8:c7:bd:f6:ca:39:35:bf:90:
e1:37:2b:4a:55:1f:9d:dd:8b:e4:4d:a3:d2:58:de:
92:af:a8:9a:53:15:42:59:90:aa:ce:cb:02:60:59:
c0:76:4d:5c:2a:4f:72:20:5b:64:31:67:3a:17:42:
cb:ec:06:bd:55:34:90:fb:1b:49:d8:2b:17:bb:3f:
68:d9:ff:5c:63:79:6b:da:84:b6:52:af:0f:4f:14:
a9:2a:cf:47:cd:c3:f5:fe:11:f7:54:9c:dc:2a:87:
76:29:90:1a:90:b9:05:07:fd:68:a0:ba:73:a8:33:
d7:9a:b8:39:a2:8d:5e:fd:29:6d:9f:af:26:51:fa:
e4:58:ad:15:28:ea:59:f8:f9:a4:00:a3:74:14:07:
c4:5a:3d:e7:85:4e:47:05:1a:4f:11:3c:9a:45:20:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:68:B0:A2:7B:B0:BA:6A:19:AB:1E:05:BE:E4:DE:A7:73:9E:60:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b281f31a-f6d1-31bb-a78f-3908a5e2384b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.208.30.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:43:3f:1d:2d:85:d8:14:58:ec:44:de:d3:5c:e3:c7:d5:c1:
07:3b:fb:2d:c2:2d:36:03:a1:cb:fb:b6:8c:cf:8f:02:4f:16:
48:69:7a:88:ca:32:8a:6c:4c:35:e4:38:ff:62:8c:1d:b3:af:
5d:d4:39:3e:49:10:c1:cc:fc:db:3e:bb:31:97:45:90:57:47:
dc:32:f0:20:52:70:d6:f9:44:2d:b5:cf:43:0b:6a:5e:53:22:
7c:ef:32:c4:69:ce:5a:7b:3d:c7:34:34:ea:e6:d9:01:b9:fb:
25:e4:21:af:40:47:e1:92:b1:c0:b5:23:8c:69:97:09:c7:cc:
91:0c:3b:e3:58:97:05:93:37:04:4d:e8:3f:d8:64:90:06:d7:
88:3f:76:24:53:13:90:66:71:a5:e2:6a:db:ef:a6:07:43:86:
3e:ac:fd:a5:f5:ad:b1:ae:c6:30:8f:fc:5a:c6:5c:2d:1f:19:
66:9e:8a:43:08:b3:c2:d1:3d:97:55:a2:de:41:94:c1:87:5a:
2b:8f:10:b8:e6:9c:d6:81:98:c7:01:b8:ac:36:5b:e2:c8:70:
13:08:94:44:ab:7c:ab:4a:62:76:1d:00:be:48:a5:64:7b:65:
02:57:b3:25:4d:24:b8:cd:56:c0:ed:66:fa:ff:1f:97:d0:11:
d0:18:5c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:38:48 2025 by rpki-client