Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d908316d-0bdd-329e-a3e1-cc1fe57cc50e.roa
File: d908316d-0bdd-329e-a3e1-cc1fe57cc50e.roa (raw, json)
Hash identifier: XLuhuqxwZbsc4CHKableo1GCT+Y1N7+J6tZQyjdhSBA=
Subject key identifier: B8:8B:19:57:62:65:C8:EB:94:15:C9:B0:61:1F:6D:DE:AD:0E:26:36
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BA5643073088A35B5CF71800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d908316d-0bdd-329e-a3e1-cc1fe57cc50e.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.208.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:43:07:30:88:a3:5b:5c:f7:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=1e62774e-a9f6-447e-8fea-40cf7cdcfbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e6:ce:20:62:40:fa:85:24:dd:79:04:af:75:
1d:a7:9a:57:f5:0c:81:ee:0b:47:30:6d:8d:68:83:
16:a2:d2:46:89:06:72:ec:e7:7c:6b:97:cf:8c:51:
da:9e:4e:b3:d5:59:11:86:d0:67:ea:c7:f0:77:23:
65:9f:6a:62:4f:e2:7f:dc:eb:89:80:25:39:21:46:
6e:9f:09:34:fe:8c:39:e5:b7:5a:1b:d6:0e:0a:7a:
d8:e9:1e:6d:2c:00:ba:5e:d1:8f:54:df:2f:ec:37:
f6:c4:69:b9:c7:79:f7:91:c3:24:98:ed:48:2c:0f:
f5:ce:12:bc:02:35:05:1e:6e:5d:93:7f:a7:ca:98:
17:dc:c0:99:73:bf:b6:cf:15:94:14:f0:37:89:0c:
f5:d8:8b:49:2e:5d:12:62:fa:8d:4b:aa:8a:1d:3c:
fe:e2:34:87:2e:a5:f9:95:1b:03:32:a5:0a:29:ba:
ec:8f:4f:86:e7:23:2c:c1:de:17:a3:9e:05:5f:60:
7c:d2:ae:f5:ae:16:53:ef:0b:38:f1:4e:4f:cb:35:
0f:cb:f3:04:bc:e1:74:37:63:ac:da:07:8d:06:cd:
df:b7:23:d5:44:fb:e4:ed:1a:be:26:ff:7b:52:27:
80:33:76:26:d6:bd:38:43:03:0e:72:14:d4:5d:de:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8B:19:57:62:65:C8:EB:94:15:C9:B0:61:1F:6D:DE:AD:0E:26:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d908316d-0bdd-329e-a3e1-cc1fe57cc50e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.208.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:81:51:e3:35:7f:db:3f:b4:73:83:a3:a5:1c:a9:3b:a9:2c:
b0:11:58:3c:06:ab:d5:8a:15:a0:72:03:5b:d6:79:c4:61:fb:
15:80:f9:e9:e3:5e:23:79:23:74:00:ca:a2:7f:01:b8:5a:f6:
57:83:ca:b6:68:df:2b:f1:b8:48:b7:fa:04:2e:cb:85:1a:87:
64:e1:a0:a9:65:dd:fb:14:f7:6b:98:58:82:25:63:93:38:2c:
70:18:4c:34:a1:f8:72:96:f0:e3:9e:c0:45:4a:5a:ae:e0:b7:
9e:d8:c8:d9:07:df:6b:b9:b4:73:d3:9b:c5:4e:61:73:8c:44:
f6:87:c1:84:e5:c7:5c:74:71:08:f3:89:6b:2d:ac:ec:8a:94:
dc:58:e2:48:d5:ab:4b:dd:51:a6:f7:5e:a5:9e:cf:11:21:eb:
27:7e:36:86:87:3f:5e:07:f1:ac:c6:66:19:89:89:e6:35:22:
75:ab:8d:d2:b9:91:a4:80:fa:11:c7:fa:38:04:c2:a6:e7:0f:
85:aa:cb:18:13:73:1c:fb:db:87:7f:4b:56:c8:8d:fe:f7:a9:
38:1a:ef:f7:e9:4c:46:ba:7d:2e:88:67:8e:90:22:6e:73:ac:
e5:c8:9a:aa:3b:6d:de:06:02:18:3b:42:90:9e:1b:f9:17:82:
7d:67:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:23:57 2025 by rpki-client