Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d444f008-3949-3abf-a9ff-a2f1c5b78bd2.roa
File: d444f008-3949-3abf-a9ff-a2f1c5b78bd2.roa (raw, json)
Hash identifier: SJuDVKm6CVh51OjiAg4iajgfuUSPw4hj/yE3LYi0HVA=
Subject key identifier: 80:8B:34:E5:D5:7A:F5:BD:F6:82:89:54:E5:9B:00:66:40:0E:FC:F0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584819CFC8EC95B8A99CEF7F1570
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d444f008-3949-3abf-a9ff-a2f1c5b78bd2.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 33905
IP address blocks: 23.40.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:c8:ec:95:b8:a9:9c:ef:7f:15:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=c98bce96-34b4-4d1a-b612-f82635a948fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:9f:23:a7:29:43:68:c5:6a:2e:42:d4:67:
b3:de:19:6b:39:77:6b:dd:83:ca:a0:ad:9b:36:69:
25:84:fe:68:8e:fa:d3:76:a0:ca:6b:2f:22:c1:f0:
79:28:ed:d1:b6:ae:7a:de:e0:2a:63:46:a9:e9:62:
ca:de:b3:1d:ed:e8:fd:33:02:d9:18:20:10:2b:30:
dc:b4:5e:5e:74:df:dc:8f:fe:22:d4:78:62:52:a6:
11:93:91:50:f2:60:64:df:cc:29:0f:d3:19:90:69:
2e:6f:92:ca:03:09:09:a8:56:44:c2:23:6f:42:d8:
dd:c1:5b:80:3e:76:8a:f5:52:93:23:55:56:8c:e6:
90:81:c5:23:a9:fe:7c:18:03:c0:71:18:1b:00:d7:
95:87:c6:f5:2b:97:23:9a:c6:3c:ae:e6:a5:b1:bd:
55:0f:54:5d:1b:c5:3c:ef:ff:10:a1:80:b3:14:0d:
4b:b1:12:95:36:e4:f9:98:73:a1:ba:84:42:ac:75:
c6:eb:84:04:bf:10:84:02:5e:f5:c1:2f:b8:27:6b:
10:9b:27:de:7f:36:39:64:4d:f2:96:b2:38:4e:c1:
e8:e9:2d:15:19:41:40:6d:ea:61:43:96:92:fb:76:
42:1e:4e:1d:bf:c3:eb:be:01:e7:57:8d:94:68:51:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8B:34:E5:D5:7A:F5:BD:F6:82:89:54:E5:9B:00:66:40:0E:FC:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d444f008-3949-3abf-a9ff-a2f1c5b78bd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:32:c2:38:50:b1:0f:d9:d0:04:41:13:c5:26:b1:a9:dc:1e:
34:a2:3f:23:f1:24:33:65:dc:9e:6a:85:2b:a3:ee:02:de:fc:
6e:99:bf:52:21:fe:0d:ad:bb:b6:20:0c:0d:3b:4a:80:4c:66:
de:f4:f3:41:4f:e4:59:84:7d:25:74:8e:6d:d0:49:1a:c9:de:
d7:3f:d9:cb:fe:c5:26:59:21:88:4e:9f:e3:d4:13:60:22:d6:
af:b1:b5:72:e8:74:7e:c7:98:05:77:18:ab:28:59:a2:71:87:
d8:c3:06:0f:e1:13:f1:a9:7a:3e:50:28:e0:d1:15:a4:12:fb:
d0:ea:18:94:49:5b:ee:aa:56:c3:e9:42:b9:d8:03:30:58:2a:
bf:6a:7e:c9:fb:0b:4b:dc:e6:86:38:47:78:e2:03:05:7c:29:
83:66:2d:4d:ba:83:aa:7d:bf:06:a1:43:51:0a:71:38:11:1b:
cd:fd:66:50:be:59:18:b0:f7:13:2b:40:eb:a1:fd:91:a7:52:
a8:39:b7:45:eb:ff:78:3e:52:96:3a:be:1f:e7:06:da:0b:72:
ef:53:7f:e4:39:1d:00:75:87:28:24:88:88:00:2f:d3:d9:29:
ad:35:a5:26:1e:48:70:28:44:fd:d7:52:19:2e:f8:92:6e:17:
01:f3:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:28:43 2025 by rpki-client