Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4e563f-67aa-33c4-b7c7-2151a9d645e5.roa
File: ea4e563f-67aa-33c4-b7c7-2151a9d645e5.roa (raw, json)
Hash identifier: ItiNzIKIoGUmfsju/Io5bMTuyMkKrz52vwdwdL8UWOA=
Subject key identifier: 33:D3:DD:1B:DF:D1:F2:DB:8A:BB:1B:32:36:2E:FD:FA:E8:13:6D:6E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB763D6F0342ACBE6BE2C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4e563f-67aa-33c4-b7c7-2151a9d645e5.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.44.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:76:3d:6f:03:42:ac:be:6b:e2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=bccf3d47-9165-4e6c-a012-299d04296872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:5f:ec:63:fb:d6:85:af:1c:d5:bc:4c:e6:
38:8f:15:1b:27:f8:72:cf:8f:65:90:e3:49:41:64:
2c:4b:3d:81:24:de:34:45:b4:2f:2a:1f:6b:a5:ed:
fd:5e:37:60:ea:15:54:4c:a6:0a:99:d5:5f:95:93:
1c:6e:25:a4:03:69:21:d3:4f:76:72:08:ec:dd:f4:
97:02:31:d7:9a:14:4e:5c:5f:99:8c:6b:df:77:da:
39:55:b8:0d:d1:72:21:94:c0:3f:da:f8:79:80:66:
44:56:87:b5:d0:1b:5f:35:0a:1b:73:9d:be:53:06:
9d:4f:79:d3:58:58:8e:e6:02:89:92:13:d1:00:ab:
ea:40:81:5d:9c:40:25:98:4e:2d:44:0e:ab:90:b9:
d2:95:b2:41:58:8d:c3:1d:98:88:90:03:38:b3:8a:
49:98:3a:12:33:18:d6:9d:28:aa:ea:fa:fa:36:a4:
fa:a7:1a:17:e6:23:ab:dc:8f:5c:7d:bb:ab:8f:45:
37:2e:ce:48:f6:94:be:bd:5e:9a:10:a9:39:6a:66:
5e:82:c1:47:2e:d2:85:96:36:29:ea:55:9b:28:25:
39:f4:59:52:37:7f:6f:d5:4e:cf:23:ea:d9:24:79:
c7:36:77:a3:6c:d9:45:9b:13:66:38:04:9d:62:b0:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:DD:1B:DF:D1:F2:DB:8A:BB:1B:32:36:2E:FD:FA:E8:13:6D:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea4e563f-67aa-33c4-b7c7-2151a9d645e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:12:c5:aa:e2:d8:58:7e:f5:07:05:43:34:8a:6c:9c:4c:5a:
b8:eb:d6:d6:83:79:fd:a3:9b:69:67:e7:2d:9c:54:06:5e:dd:
3b:aa:24:73:e1:c4:21:d2:7d:b4:8f:13:32:70:ab:66:cd:cd:
72:bd:85:e0:1c:89:51:2c:f2:15:63:37:42:fc:1b:5d:c3:9d:
16:11:7a:38:71:04:b2:a3:ce:2c:e2:0b:3b:77:40:5b:a7:89:
76:8f:7d:eb:47:28:1f:39:d7:3c:42:25:ef:ba:38:d5:84:56:
5c:ae:cb:59:7e:5d:48:6b:54:ec:b1:af:4d:67:83:e2:67:d8:
73:c9:dd:80:e0:04:c4:f2:e4:3e:97:df:0e:a5:80:c0:41:ce:
c9:b5:13:5c:b2:7b:ef:0a:6f:59:6b:98:aa:c8:e7:97:6c:b7:
2f:0f:87:ee:70:ef:75:57:4c:58:85:e9:c4:cd:63:53:24:3a:
ad:97:67:88:bb:a6:60:b6:25:90:e5:c2:d1:43:b2:14:cc:ea:
06:e5:45:39:62:6c:58:11:2e:c2:18:d0:a4:4e:10:3c:5f:a7:
e8:bf:79:1d:c1:81:c0:a8:d4:b1:38:fe:35:c3:d4:60:10:d5:
fc:f8:37:fc:02:6e:62:06:97:5b:1d:d0:73:2f:8a:c1:28:47:
3e:3c:2c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:47:23 2025 by rpki-client