Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4a3844f-ab07-3723-bb98-7d3f169214d4.roa
File: c4a3844f-ab07-3723-bb98-7d3f169214d4.roa (raw, json)
Hash identifier: PgonDUmBvVvDUJKuAV9iYrYSbSkaVOGcPgZITSY92s0=
Subject key identifier: A5:0B:E6:D2:6E:ED:E6:C4:0B:D0:EF:62:11:C7:EE:49:8D:07:48:0F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CBA19DDBDD94FC6F0C60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4a3844f-ab07-3723-bb98-7d3f169214d4.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.34.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:cb:a1:9d:db:dd:94:fc:6f:0c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=ecb183ca-fba9-4689-87c0-d2f7e5adc771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:73:2f:20:0f:ff:3a:fe:9d:62:11:e6:12:
71:85:ca:90:c5:13:d4:92:ce:13:c7:e4:dc:55:cb:
04:d5:51:80:6e:eb:a3:bb:6a:1b:cb:d0:da:59:65:
fb:b3:36:87:a8:c6:33:36:79:80:b4:cb:59:1e:5e:
f4:6d:60:11:ba:30:44:18:82:39:08:d3:a9:3c:3b:
5a:d2:af:77:0b:ec:1c:79:18:ed:12:81:1d:9b:d2:
81:60:92:fc:a9:e5:e6:02:ed:ca:55:b0:a8:11:22:
2e:fb:87:c2:8b:2c:4e:97:3b:f1:92:ed:ba:db:da:
82:93:14:5d:c2:f8:5f:85:3a:b4:0d:d6:44:ee:d3:
a4:d3:0b:c2:69:81:ca:fc:de:a8:85:32:3b:a9:e9:
7f:f5:90:2c:e3:31:cb:ff:52:dd:16:13:2e:a5:48:
db:94:00:8b:8c:a5:12:11:e0:bd:ca:55:df:fe:5c:
d7:f1:0e:60:c0:ea:cc:b8:dc:b0:a3:fd:46:f0:e0:
97:f4:1c:7f:d8:7f:40:9b:57:7c:f1:13:5e:f0:e7:
14:56:19:97:e8:b3:8d:52:ba:22:69:e3:64:37:24:
b5:30:f0:6f:f3:fe:11:44:0f:4d:11:72:e9:14:29:
bb:d0:51:c3:ce:a9:46:90:b9:b6:e9:94:6a:e0:d3:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0B:E6:D2:6E:ED:E6:C4:0B:D0:EF:62:11:C7:EE:49:8D:07:48:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4a3844f-ab07-3723-bb98-7d3f169214d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.34.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:8f:58:2b:45:59:4a:ed:c4:d8:92:de:f7:b3:2c:18:9e:38:
e2:68:3e:7f:e4:98:67:fd:10:9d:a9:58:b6:b8:4c:fd:97:ed:
d0:b7:a6:cd:af:b5:37:75:bf:80:ee:37:09:a4:78:83:ad:84:
b0:fe:cf:9c:26:84:5d:15:55:c5:aa:8a:5c:65:d9:d4:51:4f:
e2:b4:8e:d1:b9:f8:d7:da:f4:1a:69:77:e7:14:01:f4:2f:ae:
9c:17:61:7c:f3:02:6c:a4:46:dd:86:c6:ca:da:2a:eb:04:ee:
0c:95:5e:33:32:aa:81:ac:65:ea:66:20:21:00:07:7d:30:08:
b3:30:cd:06:8f:07:00:c8:81:92:2e:fa:5a:0d:d0:ee:5a:ca:
27:dd:ca:39:83:f1:50:49:08:e6:f0:76:9c:f9:aa:7e:d7:9e:
83:e3:28:ec:51:0f:29:10:dc:d9:4c:f7:02:4c:e3:fe:03:40:
14:3d:7c:03:db:67:b3:ee:00:78:3d:98:7f:87:c1:6a:42:dd:
1c:c9:fa:41:ee:07:7c:11:ad:62:9a:2d:1d:76:c0:48:20:cc:
f4:5d:52:ba:9c:8b:e6:75:f6:3a:3a:bc:a6:44:96:73:d5:a7:
4d:73:66:a2:41:4e:3a:f8:2a:df:39:b0:d1:f8:a2:86:c4:27:
0e:ee:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:43:37 2025 by rpki-client