Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7970adb-f2e6-3d71-a861-10b4ed3e28a3.roa
File: d7970adb-f2e6-3d71-a861-10b4ed3e28a3.roa (raw, json)
Hash identifier: YKe8LhSCmyLi48GUuPSQD3n4b9VOxmLq17abocSLsv4=
Subject key identifier: C2:1F:43:D3:07:FB:C7:2C:9B:CC:98:70:53:A0:C5:36:E0:AA:B6:65
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487FB5EBC2B2691D47EB06EB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7970adb-f2e6-3d71-a861-10b4ed3e28a3.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.47.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:eb:c2:b2:69:1d:47:eb:06:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=24b21a9b-7cd0-4178-81a0-d4ff36df2888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:05:bc:56:58:27:fb:09:2d:99:59:5e:c8:
77:af:b4:b7:81:90:a3:ba:95:d2:9d:83:88:26:66:
c9:7e:5c:1b:d7:1a:e6:6d:fa:37:ee:74:0f:59:41:
14:9d:58:65:31:57:a6:3e:e6:62:9f:0d:8f:17:07:
72:19:ad:9b:30:94:53:05:6c:58:d5:46:b1:f6:4b:
2d:75:69:8a:ee:70:e1:09:01:10:07:1e:6d:22:0b:
fc:74:40:bf:f6:00:60:29:03:06:47:09:d1:3d:3b:
e6:87:bb:a9:e3:b7:5a:08:48:5d:0d:9d:a0:1d:51:
71:2c:aa:a0:49:15:08:46:aa:21:ac:1b:78:ae:bb:
ed:07:46:54:07:d4:7d:ba:fc:f1:32:db:8a:76:89:
58:e7:2e:a6:0d:28:2f:22:7b:67:ed:7c:5c:6c:f7:
20:99:c0:8b:db:ac:f9:d9:15:97:c1:d2:89:89:6d:
5c:79:67:47:9e:53:36:22:08:b7:a5:ae:64:95:b2:
a8:72:16:e6:90:f3:f4:8e:0d:ec:f6:e1:17:33:08:
86:21:35:96:7a:00:4f:05:9b:1a:a5:34:5e:b4:26:
3a:49:f0:5e:6d:cc:7a:7b:1b:eb:ec:dc:bd:9a:59:
00:be:7b:96:c5:01:39:f5:9a:e0:f0:58:67:80:8e:
b3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1F:43:D3:07:FB:C7:2C:9B:CC:98:70:53:A0:C5:36:E0:AA:B6:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7970adb-f2e6-3d71-a861-10b4ed3e28a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.47.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:d3:77:2c:05:d1:2f:54:85:ab:b1:5c:f3:48:83:83:18:48:
a3:b2:7d:58:e5:f6:e0:34:67:65:ed:75:03:1c:85:1b:46:e0:
5e:bd:44:31:c0:f9:cd:3a:5e:2e:2f:3c:d1:71:14:3b:7c:df:
0a:bf:da:22:86:46:8e:88:95:b8:ea:c1:0b:62:59:0d:1a:3e:
5f:5d:ca:09:91:df:a4:ae:1e:ed:92:a6:5f:23:45:5b:a0:78:
65:e7:ac:d3:bc:a4:c0:81:b5:15:57:d5:ce:e8:cf:e3:d2:57:
18:07:0b:3d:cf:e6:85:36:b2:00:0d:a9:98:6b:a9:82:c6:46:
0f:ab:eb:74:9e:2f:00:38:df:46:11:c1:1f:fd:ef:77:9a:74:
1e:ad:ef:cf:ba:6d:45:37:50:5e:39:e6:56:ea:4b:b3:e7:28:
09:af:13:b4:60:e3:10:df:3e:d4:bb:db:1b:ee:6e:b3:0e:0c:
7d:07:55:a4:4f:e1:1d:40:fd:96:2b:bd:16:f5:ff:ec:1f:ff:
d9:6e:33:28:b7:98:0d:db:cc:23:11:2b:bb:b8:a7:e6:bc:e3:
56:4f:69:f0:a1:77:98:6e:fa:36:59:d3:46:af:54:d5:23:5d:
88:f6:4e:ac:e3:69:a8:33:85:66:83:40:25:2e:ac:03:db:c5:
b0:25:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:31:07 2025 by rpki-client