Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ef7dfc-71d0-3e2c-9046-d1a04f766f52.roa
File: e4ef7dfc-71d0-3e2c-9046-d1a04f766f52.roa (raw, json)
Hash identifier: AxoYR91Eq5UFgw0HhEdfMEzEBQutydI2MmRmFAKkTKk=
Subject key identifier: CB:F6:E1:F7:7A:95:AF:DC:23:A7:78:64:26:B5:D5:F1:91:73:E0:60
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483F8042A42607841AF0B43D60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ef7dfc-71d0-3e2c-9046-d1a04f766f52.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.72.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:42:a4:26:07:84:1a:f0:b4:3d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=20a709b4-b387-4109-a4ed-7b5c70c24017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:52:01:71:44:a6:71:3a:c0:c9:43:04:9c:
53:6f:73:e5:0b:10:39:a3:5a:21:5f:7c:a4:02:66:
82:90:de:09:c4:46:49:f3:a3:11:41:ad:9a:af:8f:
ac:61:5a:02:ee:4b:c1:19:ad:16:00:2c:75:14:5b:
b9:85:4a:5b:e0:cc:0d:59:20:54:50:3e:75:65:70:
06:50:7e:61:86:28:dc:97:aa:68:f8:47:6a:eb:ab:
d6:c7:a7:22:f5:80:92:cf:1d:9b:ff:de:9c:6c:44:
aa:e1:27:67:e4:59:9d:db:69:11:78:60:6a:bb:c6:
48:d5:bd:dc:c9:90:ca:4c:7a:e4:ef:5b:17:13:20:
56:13:a0:8d:f5:af:b2:0d:46:c9:ac:22:fd:33:6e:
07:74:58:44:3c:27:d0:6d:e6:08:c0:0b:53:98:63:
10:7c:dc:bd:16:3b:78:cd:7d:00:98:44:20:e5:53:
86:88:49:07:0f:f7:d6:91:59:c7:f0:b6:e1:ed:15:
e0:29:bc:7f:3c:ba:b4:f3:0f:d9:b7:9b:f5:86:e0:
42:eb:44:f6:41:7c:72:e3:af:e3:92:6b:4c:61:0d:
98:b9:d6:27:41:b5:69:f2:14:44:56:97:ac:3f:67:
20:0b:41:c4:9b:0a:e4:7b:2c:1f:14:c9:90:ec:9c:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F6:E1:F7:7A:95:AF:DC:23:A7:78:64:26:B5:D5:F1:91:73:E0:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4ef7dfc-71d0-3e2c-9046-d1a04f766f52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.72.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:2a:b5:e0:52:4c:cd:8d:66:1c:31:4a:05:93:4b:80:e8:3c:
79:1c:21:78:2b:79:9a:03:ca:68:2d:80:a1:98:74:b3:97:3c:
23:90:2d:eb:1c:09:31:3d:03:31:6a:21:9b:55:e6:95:0a:32:
88:5c:d3:34:17:08:61:c5:a4:15:12:1c:a2:32:21:b9:2d:c2:
0f:cf:fb:b9:df:43:a6:03:eb:84:7c:ef:62:d9:74:19:3f:0c:
48:a3:06:cd:80:58:14:c7:9d:29:0e:0b:69:6c:b1:ee:bf:d9:
6a:a5:07:fc:bd:65:9c:40:b7:2a:13:30:3e:0f:d5:9e:db:01:
34:91:6d:2f:74:bb:c3:ea:5b:54:eb:a6:0b:82:41:87:a7:cc:
8c:c1:11:7f:bf:02:c5:e7:18:fa:f2:75:a0:6f:6d:62:4b:5b:
0c:94:f4:54:59:93:30:c3:03:00:e1:88:b6:bd:ae:e8:65:f2:
ac:01:0f:5b:4c:28:38:12:75:1b:1c:90:f8:b8:99:83:b9:41:
96:81:8b:ef:7f:44:fd:bb:4f:9a:60:36:ad:18:3b:fe:df:e3:
98:89:7b:c8:0f:4d:d1:fc:55:01:75:ba:45:44:74:8b:db:86:
3d:77:95:1e:bd:1c:68:80:f5:5b:ae:7b:8f:65:c1:7e:c2:f2:
6c:3c:4a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:28:59 2025 by rpki-client