Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bae7286c-55a4-3a0e-9e06-91eba33207b9.roa
File: bae7286c-55a4-3a0e-9e06-91eba33207b9.roa (raw, json)
Hash identifier: xMwtedCDo6uK7+f7ZYz66li/6Q9XY8EkAqNQxe3LSGQ=
Subject key identifier: E1:D8:E0:02:93:37:93:FF:5E:12:31:EA:F6:90:AA:63:89:3C:CE:78
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A2096302888432C8A8FEB20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bae7286c-55a4-3a0e-9e06-91eba33207b9.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.40.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:96:30:28:88:43:2c:8a:8f:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=9065cf53-0713-4cb6-a0ac-82c22e1c4e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:80:12:3d:29:8a:4f:8a:5c:87:82:81:8e:
82:f0:d1:7d:b2:ff:9d:d5:ac:e2:7f:01:4c:c4:aa:
f9:a6:11:33:ba:cc:34:21:ff:cf:29:a5:2f:97:08:
64:c2:40:0f:9d:41:81:ad:8d:f9:ba:86:a6:7f:0c:
90:cb:3f:a8:81:20:f9:7c:6e:5a:85:c5:7d:3f:7e:
2c:3b:10:2f:ac:23:78:67:62:0a:b4:9e:6c:67:16:
79:4f:9b:3e:b1:6b:46:37:c5:4c:43:f6:7f:39:4c:
d5:a5:29:42:02:73:4b:ea:65:59:65:c5:55:00:db:
86:18:d8:27:e5:00:01:36:32:c6:ae:5f:b8:14:4f:
42:df:94:1b:03:ec:df:4c:27:77:13:8e:df:f7:fb:
d7:73:96:69:31:6c:8b:ea:8b:ad:ca:72:f8:27:d3:
86:1d:6e:ad:de:2f:58:28:52:39:81:4c:ce:ab:fb:
d8:bc:c5:95:6a:35:c1:fb:be:0a:ee:7b:58:f4:64:
58:97:18:ab:fb:14:ad:7b:50:5a:f4:30:a5:8a:19:
a0:4f:16:17:09:e9:e6:f2:b2:4b:54:e0:a8:18:ce:
05:37:e5:fc:cf:f9:13:99:42:35:95:bc:54:2d:22:
ea:89:cd:65:2f:76:97:eb:b4:02:2f:e9:8f:44:62:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D8:E0:02:93:37:93:FF:5E:12:31:EA:F6:90:AA:63:89:3C:CE:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bae7286c-55a4-3a0e-9e06-91eba33207b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:ea:ac:84:6d:eb:9d:35:a6:6c:d3:de:6b:62:64:3e:ac:ad:
99:0e:df:77:99:2f:3c:51:27:75:dd:70:7e:91:76:10:44:48:
aa:bb:2f:bb:36:5e:d8:76:23:4b:19:92:e9:a6:f4:b6:50:b0:
43:a4:2a:d1:cc:db:5a:83:81:f5:08:78:bb:41:bc:d5:9d:90:
a4:e8:74:b7:de:a7:0e:cc:9f:85:90:c1:69:9b:1a:cf:7a:92:
0e:e4:95:cc:50:9a:d5:c4:86:f2:71:33:46:39:f4:92:5f:1c:
72:3d:95:38:57:2a:04:50:ba:77:ed:a6:aa:de:62:ff:be:59:
bc:54:6b:a8:bf:ed:b3:2f:1b:1e:49:5e:65:0c:0a:b1:e5:65:
60:7a:9e:09:24:59:ee:f5:5a:4f:26:57:a6:5d:41:f6:c5:c9:
2c:21:8c:b6:bc:e4:18:e2:cd:d8:c8:d8:ca:d4:b1:3a:95:9b:
c0:3d:1d:10:59:01:38:1f:02:28:22:63:45:d3:34:c3:74:e1:
c2:a3:31:f6:63:70:aa:e2:56:ca:75:fd:bc:40:d0:27:4a:0e:
17:7d:cf:23:52:ba:d2:81:be:c1:d9:f5:7d:1a:b0:4f:41:79:
be:5e:27:5c:54:10:7a:98:cf:b0:5d:5e:d5:eb:f7:58:c0:5a:
3f:fb:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:31:06 2025 by rpki-client