Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0793209-d074-3107-a65b-bc6c0f3ea9ed.roa
File: d0793209-d074-3107-a65b-bc6c0f3ea9ed.roa (raw, json)
Hash identifier: atKCffVv+SLIQgxDPhZVyB94lvfqiXUUKxoUJX80IGY=
Subject key identifier: 23:37:54:56:9C:92:9E:F8:FF:D4:93:3C:03:A6:63:9D:9E:45:51:DF
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485B6B04EA4DB505AD74F3BA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0793209-d074-3107-a65b-bc6c0f3ea9ed.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.34.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6b:04:ea:4d:b5:05:ad:74:f3:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=1352d735-b590-4642-b3de-402b7f4061c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:42:fb:bc:aa:48:87:4c:e0:45:e3:1c:ff:35:
ac:5e:79:07:1b:e3:10:9d:1e:c6:22:ff:eb:96:79:
58:7a:8d:b7:52:85:92:33:06:79:31:d6:6e:65:79:
62:f2:d9:38:5f:c1:41:31:97:84:a3:65:ef:6f:1e:
29:14:74:9b:85:7e:14:26:45:54:91:e0:77:f5:3a:
38:e6:c0:6b:a1:4d:0e:88:ec:1c:d5:f9:3f:56:f0:
78:d0:53:4f:ea:00:d1:94:32:50:97:26:62:08:6b:
16:29:63:fa:12:3a:f4:20:8f:5a:5c:7b:b7:88:80:
67:57:1d:06:de:f4:cc:45:72:70:7a:92:25:88:2a:
01:3a:a9:54:46:77:3b:80:0e:f7:36:1d:78:dc:2c:
1b:e6:4b:70:37:13:6f:95:f8:60:17:f5:b6:b3:ce:
ff:3d:57:78:5a:24:bd:8c:47:dd:f6:0d:68:b7:2d:
21:55:73:9d:bd:be:cd:1a:12:74:5e:87:38:01:13:
cb:f8:9c:9f:aa:93:1a:8e:a5:7e:bf:1c:70:5c:7e:
e9:9b:dc:a3:27:93:ba:b0:b9:79:07:7c:de:fa:7f:
16:6f:c1:52:ce:47:65:5c:6b:1d:c5:8d:6a:98:4d:
7c:02:65:65:09:18:83:43:51:cf:1b:53:75:db:58:
08:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:37:54:56:9C:92:9E:F8:FF:D4:93:3C:03:A6:63:9D:9E:45:51:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0793209-d074-3107-a65b-bc6c0f3ea9ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.34.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:1c:46:44:cb:73:98:31:77:b4:c3:69:57:4d:19:81:03:48:
66:8e:c6:86:61:41:be:5d:a4:aa:43:2f:a0:51:60:c5:9b:4e:
d0:9e:2d:40:be:e1:47:d2:66:f3:e8:c1:1a:61:b7:c7:e4:a3:
15:cb:2f:df:03:16:d5:43:31:69:79:11:b2:bc:6d:80:8f:2e:
e4:a1:6b:3e:c8:0e:d6:75:04:49:c9:ea:53:2c:e6:80:c8:72:
23:eb:ff:aa:da:b9:88:a3:e3:75:c4:83:4c:db:d1:48:96:22:
1f:f3:eb:29:34:45:70:f3:8f:f8:99:0f:69:89:1f:d1:30:04:
32:00:22:2d:d5:90:be:9a:4f:4e:98:9b:78:41:b0:49:2f:37:
32:41:52:0f:e2:e4:fb:9d:27:09:ca:f8:c0:45:9b:e6:9d:95:
1f:17:94:82:34:bd:6a:79:99:86:a5:49:41:fa:90:a3:c2:00:
e6:b6:4a:47:35:13:49:58:9a:f6:ad:3c:97:0a:5d:ae:5c:57:
de:72:03:01:57:7e:f4:15:2d:0b:87:77:63:ee:be:1f:76:85:
0d:48:40:a5:4b:c1:a6:e4:62:88:e1:72:43:4c:12:58:74:06:
d3:4c:dd:4f:1a:1b:1a:d0:5a:e5:b4:da:03:9a:05:99:8b:99:
24:04:20:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:21:00 2025 by rpki-client