Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6f0b01c-7671-39b4-bfd9-acc7305297ca.roa
File: b6f0b01c-7671-39b4-bfd9-acc7305297ca.roa (raw, json)
Hash identifier: zHbcgl7Tk4LIuIGwx2sMdEgabf+SCIZpb6Td9IVhsjE=
Subject key identifier: A9:0D:E3:64:B3:81:94:AB:55:8B:33:8E:2E:11:37:B2:8E:A8:E9:DA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486D905D3D3E1DDCD3E724A300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6f0b01c-7671-39b4-bfd9-acc7305297ca.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.32.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:5d:3d:3e:1d:dc:d3:e7:24:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=7518d7f7-8edf-4c42-8a65-e5a243cd633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:5d:4f:04:49:70:52:1e:1c:b6:93:f2:7d:
81:68:25:a0:18:db:4c:08:44:11:3e:5f:da:31:64:
47:97:03:ff:52:ab:ca:1e:3e:df:70:c8:f5:73:d4:
2d:76:2b:ae:1d:dd:af:9b:ad:1c:32:3e:fe:4a:6a:
2e:f3:fd:6a:cf:12:b5:dd:3a:a4:c9:e3:d4:cb:f1:
a1:59:cb:fe:9c:5a:bb:b8:63:c2:52:6e:db:36:3f:
8b:59:e9:34:fa:d7:c5:41:02:21:80:f9:a7:f1:ae:
17:31:ea:6b:12:2f:db:7f:b8:78:7d:84:03:59:26:
a9:59:6f:49:25:53:7a:a7:28:38:0f:14:41:84:89:
76:85:0e:30:8a:90:2b:8e:f9:67:65:37:a2:80:1b:
f1:28:29:fe:4c:a0:75:ed:88:12:f5:9b:7a:b7:a5:
20:38:1a:5c:55:99:62:c5:d0:8e:b3:66:3c:b3:c0:
05:9a:50:b0:54:c8:ad:02:2c:33:f5:b1:a2:77:ef:
39:73:eb:f8:e9:f7:04:bc:d5:78:59:be:31:dc:8c:
bf:3b:70:79:ec:58:7f:32:2a:ef:c7:50:f1:d6:af:
39:b7:1d:69:48:9c:26:0f:f4:3c:fe:7d:cc:4b:c9:
16:ef:26:1b:89:3f:d0:55:97:a1:6f:69:7a:f7:e7:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0D:E3:64:B3:81:94:AB:55:8B:33:8E:2E:11:37:B2:8E:A8:E9:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b6f0b01c-7671-39b4-bfd9-acc7305297ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:55:f0:63:d6:21:c9:d8:f4:3a:7d:84:a9:0f:9b:0e:eb:5e:
3e:d2:6c:99:37:8d:98:cc:09:14:95:3e:fa:55:78:68:48:26:
8b:9e:b5:8a:c6:7d:7f:93:b9:7f:df:84:8a:b5:05:82:26:dd:
65:55:b3:99:24:83:84:11:78:e7:90:2f:f2:8c:d8:2a:6f:0a:
84:dc:99:69:2f:8e:b6:f5:7c:09:6b:e5:08:46:af:69:f0:9c:
06:e9:50:9c:3e:a4:70:8d:31:ad:df:a8:c6:ae:4c:43:d9:f2:
f3:3e:9b:06:c1:3a:e2:43:7d:67:30:bd:47:e3:31:92:08:f0:
aa:f4:58:ef:55:db:58:7a:0d:2d:1a:00:ad:d1:3c:67:eb:80:
31:55:a3:92:fb:e5:2a:2e:2b:84:94:22:3d:48:15:3c:23:47:
7b:df:57:02:c8:3e:6c:6d:8a:0a:c4:e7:dc:15:92:e5:5e:55:
e7:8e:49:fe:36:9b:2e:57:c0:6c:4d:fa:47:71:88:5f:53:6c:
c1:f8:9d:43:12:41:a0:a6:a8:7d:99:59:f5:9e:3d:0e:05:7a:
61:0e:a8:7e:cd:e6:7c:25:33:a4:db:90:08:d4:e5:15:8b:f9:
20:42:3e:c3:a7:38:f3:df:85:87:4f:53:11:02:df:65:8c:82:
70:ec:fb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:47:56 2025 by rpki-client