Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de9e6bcb-9214-3164-a65a-2e8be92db2f1.roa
File: de9e6bcb-9214-3164-a65a-2e8be92db2f1.roa (raw, json)
Hash identifier: Ys4B38NPURKZ/SnzNBon1DaUgulzvd8+4cN0Eqng3wg=
Subject key identifier: F9:80:C9:B1:AA:1B:D3:3C:72:F6:47:62:92:92:77:01:03:96:F5:E0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CE1E932B73B3A47B92C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de9e6bcb-9214-3164-a65a-2e8be92db2f1.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.35.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:ce:1e:93:2b:73:b3:a4:7b:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=8e39b8fd-22f5-4643-823a-d24e905496f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0e:4f:d8:b7:8a:cd:d7:12:63:0d:b3:29:f1:
dd:8b:57:f6:4c:98:a6:c0:62:66:77:fe:22:39:f8:
cf:8a:d9:a2:3d:f4:d3:76:58:a6:bb:a3:80:2b:a6:
2b:bf:d6:e0:2a:19:7e:d3:fc:59:52:66:3b:a4:eb:
e1:7e:2d:1c:30:58:d7:f1:39:2b:dc:28:39:2e:0d:
dc:b6:ef:bb:1f:fc:e2:69:7d:2e:13:d8:fb:74:e5:
8b:5d:38:f1:89:dc:44:72:02:ed:d8:be:a6:fd:b2:
1e:d0:6e:f3:73:ee:65:08:b3:bc:f4:89:8b:5c:14:
c6:9c:de:ec:de:97:cd:db:20:74:26:36:5b:ba:81:
a8:6a:9c:51:45:be:99:de:37:39:59:b6:4b:58:34:
5c:b5:3e:41:94:3f:7b:da:13:f6:45:6b:7b:c5:fc:
21:12:f4:ea:f2:b7:8c:d5:08:ad:3e:74:2f:db:eb:
16:0d:dd:c0:5a:4c:2a:41:d9:7f:fe:d6:e8:a9:25:
db:8a:b1:c3:17:79:df:eb:32:0a:c8:45:1b:a9:28:
e4:d1:39:c7:f2:63:15:60:29:20:4f:23:94:8d:b0:
8e:f2:b9:1a:6e:c4:d2:0a:c2:35:ec:8a:1e:3f:79:
79:4e:48:f3:e1:c2:78:95:18:b8:0b:a0:91:8c:06:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:80:C9:B1:AA:1B:D3:3C:72:F6:47:62:92:92:77:01:03:96:F5:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de9e6bcb-9214-3164-a65a-2e8be92db2f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:87:7c:e6:a3:fe:3b:38:18:de:e6:b8:ea:59:39:5d:24:c3:
f4:5c:cc:20:b7:ed:24:d7:c2:01:cb:89:79:ab:df:0d:31:85:
b3:e9:37:7a:9b:46:db:89:32:9d:e4:3e:66:9e:02:a1:2d:e9:
e1:9e:02:98:33:4a:b5:3c:0d:2a:58:e1:98:d7:88:f8:74:0b:
96:6f:e4:d5:4b:31:34:11:13:2f:f2:1d:a2:32:c3:db:ec:70:
48:9b:1d:b5:dd:32:99:cf:ec:25:75:dd:f2:50:f4:8d:fa:4f:
b7:c3:07:45:e7:b3:f5:7e:c3:e0:90:c8:fa:8c:1a:5e:b0:b3:
1d:5d:da:cf:c2:38:61:75:4e:f7:33:c8:1c:4f:b1:ab:ae:e7:
fc:3c:5b:b2:cb:8d:26:ab:a1:20:74:9b:8c:92:5b:3b:f9:34:
79:26:fe:c6:29:9a:b9:c5:67:e7:b7:88:28:cb:c5:38:f9:74:
2f:a3:59:fa:6d:fe:8f:60:92:63:e7:d0:b0:e1:8d:65:94:77:
82:ff:64:ee:4a:17:eb:2e:9e:84:29:ac:79:ad:dd:c3:78:22:
73:27:38:ab:b4:3a:c4:9c:89:2c:6f:e2:08:b6:bd:b6:b2:94:
90:9f:83:4f:73:d8:17:dd:d2:2b:a1:a2:6c:79:dd:09:d0:55:
92:a4:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:45 2025 by rpki-client