Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc901ba5-410d-33b3-9b66-56e6243af3c7.roa
File: dc901ba5-410d-33b3-9b66-56e6243af3c7.roa (raw, json)
Hash identifier: Ep+lRHNBTkeOpxZtZ/VmXw3l5nlvqi9PX1ODvFRLOh8=
Subject key identifier: C6:E6:09:AD:6C:4D:CB:08:AE:61:E9:A2:7B:90:DD:BD:DA:D1:70:3B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485E35C3A50CBF978C8935DD00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc901ba5-410d-33b3-9b66-56e6243af3c7.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.53.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:c3:a5:0c:bf:97:8c:89:35:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=eb188755-9516-4d51-8e2b-bbfb7c820e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:14:c4:72:5f:ca:a5:b5:61:f3:9f:e3:d5:d5:
c1:07:b7:fe:39:ab:8d:2a:43:6a:da:08:5c:00:d0:
9b:a5:75:e1:9b:a9:b8:db:11:e7:db:f9:97:66:20:
da:3d:a8:38:b4:f0:b5:69:70:24:68:95:17:fb:ac:
bc:d8:6c:d4:b9:7a:1a:ed:08:9c:3e:88:73:66:a8:
38:b3:37:87:eb:2f:4e:1a:97:2f:fb:0f:46:e0:a8:
53:5d:e3:f6:3d:9d:2a:38:01:cc:8d:54:df:be:83:
de:3c:20:65:17:eb:f9:31:41:9a:79:21:2f:7f:6c:
07:8f:1c:c1:cc:b2:9f:f0:01:f9:3a:f2:4c:7a:65:
90:5f:7c:69:1f:0a:fc:36:6a:b3:ce:cf:41:a8:97:
e7:0a:c3:2c:29:4d:f3:0b:e9:07:84:c1:c3:28:6c:
67:02:42:f2:8c:16:0d:f6:dd:cb:01:31:6e:a8:ca:
07:c7:70:25:4b:25:cf:96:6f:20:4f:12:b4:92:99:
c4:a4:a2:59:51:cc:24:91:0c:62:2b:32:55:d2:fd:
9f:e9:86:49:b6:b9:e3:a2:7f:7e:63:f5:1c:c7:83:
54:4d:5b:b0:b5:82:57:bb:51:a5:56:20:af:d6:d9:
6d:01:d3:85:c8:e0:8f:a0:98:fc:8b:ee:8c:0d:20:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E6:09:AD:6C:4D:CB:08:AE:61:E9:A2:7B:90:DD:BD:DA:D1:70:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc901ba5-410d-33b3-9b66-56e6243af3c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.53.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:5b:6e:0e:31:bb:a2:6c:86:34:47:84:d0:5a:ad:78:62:35:
3f:22:27:a8:35:10:89:97:16:94:dc:b8:ba:e1:fc:fa:25:64:
69:e7:f2:25:8b:56:d9:53:34:37:40:11:7e:15:63:d4:a8:b6:
6f:79:a8:68:1e:e9:30:59:db:2d:4f:dd:7f:fb:cb:50:bd:ef:
98:76:25:67:81:7a:3f:ab:59:8a:d9:d9:ac:5e:d5:25:30:19:
0a:eb:07:b3:b4:e2:f9:d9:01:dc:da:fc:d1:fc:67:5b:7c:da:
31:cb:11:65:1d:a6:a4:3d:40:b2:f2:53:c2:21:07:c7:ae:57:
bc:9f:66:4b:ee:a1:56:6b:6a:5e:4f:02:fc:73:e1:dd:a0:d1:
77:2e:92:14:30:96:fa:db:c8:31:08:23:3b:49:d4:e2:99:5d:
42:3f:b4:03:b8:ba:6d:f6:56:9c:09:00:2f:13:c8:9b:2c:d4:
82:3c:7a:97:1a:60:31:72:19:c4:6d:eb:7e:35:03:b8:2a:c3:
5f:f7:b0:b2:2e:34:a5:6c:91:51:c4:33:a1:5f:2f:1b:73:2a:
2a:d7:ae:51:ca:68:93:8f:f1:a8:47:a5:df:1a:5b:fd:a2:7d:
0f:99:66:82:fd:34:03:4f:37:5d:45:88:1a:67:6a:51:16:a9:
9b:06:05:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:55:26 2025 by rpki-client