Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d00e9330-b4ef-35d7-8351-babfa62227c0.roa
File: d00e9330-b4ef-35d7-8351-babfa62227c0.roa (raw, json)
Hash identifier: S5OJHomfk0CXoLrTypu85FvlTM4z/F3Tp0yl8lvm9wo=
Subject key identifier: 57:EA:67:84:5D:65:39:8A:70:FA:1E:8D:01:8D:95:2E:7A:17:34:4F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C9F78B67CC981603B380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d00e9330-b4ef-35d7-8351-babfa62227c0.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 35994
IP address blocks: 23.33.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c9:f7:8b:67:cc:98:16:03:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=3266adc6-9295-4f57-8fdc-4472fb3b0f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:84:9f:88:07:68:cf:5f:e0:28:96:4c:48:
00:46:f4:4e:8a:b4:d5:99:93:c5:fc:c1:ab:fe:cd:
13:e8:6a:3b:c1:0a:78:87:af:17:bc:ea:24:4c:4c:
9e:d5:fe:3e:18:e3:4c:b8:9d:01:82:61:0a:21:b3:
38:83:e5:5d:2a:35:69:7d:6c:a2:5d:f9:06:15:07:
49:a8:5d:a7:52:ea:db:e0:26:31:14:6d:c1:11:79:
8f:17:a1:d4:64:10:5d:28:6c:f3:22:c2:6b:c1:32:
a0:ad:85:bc:5d:aa:0b:17:83:10:50:8b:83:14:da:
18:47:2e:d2:be:92:07:9e:a8:ba:35:a3:28:b6:d1:
19:d1:93:0f:a1:f2:17:2a:eb:a7:a0:61:bb:b2:45:
47:64:8e:2b:f4:18:1c:cd:74:27:a3:a3:23:ed:aa:
ef:2b:c0:4b:43:fe:53:f7:ac:e0:64:50:8f:4c:9f:
8d:de:62:6d:cf:9f:cf:68:56:07:e2:d8:ff:fc:18:
1c:e1:0a:a2:18:66:95:87:08:7a:c2:df:58:e2:79:
44:dd:f2:d5:4c:b5:b2:fc:46:1e:ad:9a:d0:99:17:
b2:b3:eb:fe:5b:33:f9:d2:da:18:a2:54:17:73:64:
c8:72:68:38:21:1b:ea:fe:13:da:0a:8e:87:85:94:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EA:67:84:5D:65:39:8A:70:FA:1E:8D:01:8D:95:2E:7A:17:34:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d00e9330-b4ef-35d7-8351-babfa62227c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:8c:f8:24:c7:f8:80:d9:e0:4c:27:42:d6:ab:a2:9a:e0:1a:
67:8f:d0:c5:05:6f:b2:c2:77:2a:cb:38:35:7d:7f:45:67:42:
1f:ae:24:36:08:ec:23:87:29:ca:e2:55:49:47:c1:ee:a1:56:
72:09:11:6d:41:37:f6:c6:0c:71:12:fd:ff:f1:e8:79:75:a9:
87:25:df:a3:2d:69:32:27:e2:c0:87:fa:9e:61:e1:02:f7:5b:
dd:f8:06:4a:42:33:c9:63:f3:99:c8:b0:be:12:01:9f:65:17:
60:22:70:f4:3e:dd:5f:38:8b:fb:07:42:3c:ff:99:08:c1:6a:
98:47:2e:8c:44:7e:75:33:c1:9b:39:0d:8b:14:46:c8:e6:10:
35:a7:0b:62:c3:9f:58:1d:09:7c:1d:d3:56:65:4a:cd:a5:52:
f1:e6:a0:2e:33:35:ea:1c:81:4b:85:92:9f:ac:1c:63:3d:ad:
8f:64:67:bc:e7:a7:4d:3f:64:20:93:0e:f6:e0:55:dd:3b:9d:
b3:9b:2e:f6:5e:7b:ac:84:a0:6d:e7:7b:6e:03:98:ff:dd:4f:
ab:cf:d3:73:20:b7:15:e9:c1:de:5c:01:dd:71:83:ae:1b:db:
c8:37:f9:71:ce:b9:67:b1:a4:6b:6a:5d:6a:77:bd:6c:f2:bf:
bf:28:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:48 2025 by rpki-client