Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd51bc2d-5427-392e-a308-9ad7bb78b91f.roa
File: dd51bc2d-5427-392e-a308-9ad7bb78b91f.roa (raw, json)
Hash identifier: MUjXlRthSSVpJyChC4L7QYFgvWNT4j18bLul5B5SEfo=
Subject key identifier: 40:3F:4F:2C:24:C0:F3:86:76:49:ED:F7:B1:5C:C0:1D:87:31:A8:9B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285847F2BA3E51A9CFC2FCEED1C340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd51bc2d-5427-392e-a308-9ad7bb78b91f.roa
Signing time: Thu 21 Nov 2024 02:00:38 +0000
ROA not before: Thu 21 Nov 2024 02:00:38 +0000
ROA not after: Wed 19 Feb 2025 02:00:38 +0000
asID: 16625
IP address blocks: 23.52.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f2:ba:3e:51:a9:cf:c2:fc:ee:d1:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Nov 21 02:00:38 2024 GMT
Not After : Feb 19 02:00:38 2025 GMT
Subject: CN=3f268588-4dd6-4bcf-a0d5-8e18f09af009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:72:15:32:df:ec:a9:e9:92:7f:a6:ea:2d:
54:ce:d7:47:22:95:c6:85:73:cd:84:29:c7:b5:f6:
97:4f:08:ee:67:59:11:00:8c:f8:e2:70:16:e5:ec:
1e:33:c0:42:4d:0c:7e:2a:17:1c:13:26:b8:f9:d2:
48:04:3a:0b:fa:b4:76:f9:fc:fb:62:0c:9b:7d:d4:
3f:3b:4d:5d:d3:a9:e8:46:e0:9c:ca:9c:29:77:76:
ed:76:ce:a2:fc:3b:9a:5e:1a:f9:d2:9a:f9:e1:4e:
96:d3:69:b7:23:cb:ad:ab:8c:6a:2c:9b:a5:65:f4:
1a:54:fc:eb:53:f2:7b:58:32:89:a5:32:6d:cf:d7:
a3:87:72:1e:f2:d7:ef:48:fc:cc:80:7e:7a:e6:11:
53:57:6a:4e:76:9e:47:35:16:81:22:d0:87:54:85:
39:5f:02:33:38:ad:a9:32:7a:47:e7:27:8c:68:b1:
0f:7c:d7:e5:1a:89:56:1a:60:f6:8c:4f:1d:b9:e8:
38:95:53:76:ba:a5:34:f9:54:0d:a4:e4:51:c3:a3:
11:52:47:55:38:85:ed:eb:78:e9:54:bf:07:1e:bb:
8c:0b:5e:a6:5c:7e:90:16:bd:60:f4:d4:36:9c:8e:
56:82:f3:f2:5b:66:5e:75:af:20:fa:73:3b:eb:94:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3F:4F:2C:24:C0:F3:86:76:49:ED:F7:B1:5C:C0:1D:87:31:A8:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd51bc2d-5427-392e-a308-9ad7bb78b91f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.52.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:51:d2:d5:c4:b7:0a:be:3a:15:d2:84:eb:04:e2:a5:ea:bc:
06:ae:03:0c:ce:56:68:94:83:7b:fb:e0:47:63:4d:47:76:aa:
9d:9f:50:b7:bd:0a:c8:50:00:83:14:ea:29:b1:23:44:01:92:
ab:90:62:f0:1b:4f:23:21:27:7a:19:3e:a4:84:87:1b:c6:78:
57:41:28:5f:81:d7:02:95:67:78:07:cf:17:90:b2:16:1c:a3:
30:cf:6d:fb:09:cf:c0:4c:14:ea:6f:8a:1e:e3:e5:dc:d8:da:
bf:35:39:75:90:d8:35:7d:d2:b1:14:6e:2a:72:c5:00:50:c6:
ea:1d:fb:61:71:33:62:cd:09:70:b8:7b:76:9d:b5:6e:67:06:
d4:0e:ce:bf:d1:32:96:cd:22:0b:2b:48:ae:66:2b:77:60:35:
69:33:68:86:fc:b5:87:bc:4a:3b:05:47:49:9f:91:3a:98:46:
1b:cb:35:c5:31:f6:38:ca:25:25:5e:3f:6d:2a:0e:f3:48:48:
e8:7f:7c:93:2a:e2:76:29:b0:5b:5e:0f:db:f6:59:8a:16:eb:
c6:62:69:0d:73:37:32:0b:6a:e9:50:cc:17:fb:8d:83:3a:41:
b1:16:47:0f:3f:b9:fe:bd:15:20:21:c4:71:9e:68:0f:d7:9d:
36:9f:3d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:50 2025 by rpki-client