Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df74e604-2892-3fc7-9328-290e2d8e5d85.roa
File: df74e604-2892-3fc7-9328-290e2d8e5d85.roa (raw, json)
Hash identifier: bKovLVvBIXlLIVlOY9DoYzGlBrn8WZy+J+zh0gFre9Y=
Subject key identifier: ED:9C:55:12:0E:BA:CF:CB:11:CF:7E:2B:2E:A7:4A:ED:29:24:9B:09
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584827C53688A893F9340F8A3C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df74e604-2892-3fc7-9328-290e2d8e5d85.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 24319
IP address blocks: 173.223.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:36:88:a8:93:f9:34:0f:8a:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=6c7e510a-3be5-46c9-9748-408f82f526f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4a:af:40:28:23:da:4e:f3:03:2b:27:ad:5f:
51:76:18:70:53:8a:c1:d1:bc:b2:9c:eb:60:56:1d:
02:c7:d7:df:39:85:12:2b:e3:88:38:26:54:19:fc:
bd:74:c0:dd:3d:74:c4:d2:82:66:85:bc:f1:fb:0e:
0d:2d:71:12:62:68:6e:95:93:f7:1c:d1:9e:13:3e:
0d:3e:a4:bf:23:4a:06:b3:b0:ee:1c:39:f1:1f:e6:
88:64:ed:db:35:87:cd:68:74:d1:7d:37:15:c9:e1:
45:a6:4f:46:dd:e8:9d:3c:ff:32:31:06:8e:a8:80:
ce:21:48:ad:20:1a:2c:d6:c8:e1:a5:8b:ea:b1:95:
62:18:c7:0d:7b:cf:5f:66:3c:35:08:12:2d:02:01:
6d:29:d9:5e:f8:cc:01:5d:95:13:1c:58:6f:38:f5:
be:a5:6b:ae:29:77:8a:94:06:f7:25:f8:20:57:19:
5a:43:42:0f:8b:df:e2:9d:82:29:90:84:c3:8f:1b:
ae:d1:5e:f9:dc:71:f3:14:9b:43:6b:83:1f:25:90:
10:c8:f0:43:b3:6d:d0:18:ec:26:f9:5e:44:aa:6e:
ca:d2:4d:59:f8:81:cb:ec:bc:20:cd:a9:d2:75:3e:
3b:a1:f7:d4:31:6f:be:3d:83:7c:62:bc:a8:6f:c5:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9C:55:12:0E:BA:CF:CB:11:CF:7E:2B:2E:A7:4A:ED:29:24:9B:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df74e604-2892-3fc7-9328-290e2d8e5d85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.223.53.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:ec:a5:64:b1:30:69:4e:f7:b8:5d:10:86:63:80:0b:57:47:
c3:d9:15:d3:3b:aa:2d:88:05:a5:85:d9:21:b7:f1:8e:0f:f2:
ce:28:0f:1a:4e:a7:7c:11:4c:3f:6c:32:d8:b7:c5:ba:08:1b:
6c:5b:ba:67:ae:5a:35:a0:9e:07:de:45:3d:99:b8:b9:ea:db:
37:8d:0f:7b:5a:79:60:28:78:26:01:f1:89:c1:c6:a3:b2:d2:
ac:da:92:d9:6a:ee:de:d5:2a:d2:21:7b:00:a5:6d:05:84:25:
93:62:cf:97:8c:cf:45:f9:1f:3c:55:53:8a:ab:55:7d:18:02:
f0:39:03:a8:d5:67:5c:e3:4b:b0:75:60:b7:29:05:ba:38:dd:
ef:5b:ab:fb:f9:84:1f:5c:56:a7:53:f9:41:39:4c:23:54:61:
f9:e0:52:d3:80:44:b7:b0:8c:fa:74:23:a0:d6:12:04:b0:84:
23:fe:a2:b1:db:03:50:37:fd:09:d9:49:c6:d9:55:4a:e9:19:
67:db:b8:f6:3e:d7:5f:b6:8d:09:4a:13:6a:c1:9d:39:c4:4e:
75:23:17:d9:16:10:2f:34:32:af:32:ec:fb:58:bf:8f:11:9a:
14:44:00:55:6d:06:7a:aa:02:0c:95:69:4f:79:22:6b:e8:29:
a6:5a:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:17:29 2025 by rpki-client