Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec7cf623-8608-3308-aed9-15c7038a2a6a.roa
File: ec7cf623-8608-3308-aed9-15c7038a2a6a.roa (raw, json)
Hash identifier: 44Dni5cK/Wo1A+l1yy0sAli8TMkflKXQNMm8/v04bTc=
Subject key identifier: 85:6A:BF:E7:3B:CC:61:F3:2B:BB:31:05:5F:64:67:62:8E:0D:85:D4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209B675E8E907B3DE1A5C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec7cf623-8608-3308-aed9-15c7038a2a6a.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.38.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9b:67:5e:8e:90:7b:3d:e1:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=0c50bdf3-3ed6-4c08-8aa7-8c0ce5e02117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ff:52:de:7b:9f:3b:1e:49:e6:f2:ea:21:82:
64:ae:76:1f:0b:e0:07:43:f6:95:a2:6f:29:27:c4:
d5:ff:74:2c:a1:08:cf:6d:57:e0:b0:43:17:16:f0:
d8:ea:d0:21:ee:ed:f8:92:c4:61:86:1f:d9:d6:c2:
43:ec:72:ee:ca:84:a3:50:50:aa:d2:0a:35:39:8d:
da:c2:ed:33:38:4a:de:16:e2:a6:3f:26:21:f0:0b:
55:b4:dc:37:cd:c0:97:4e:b5:86:7b:8d:77:15:d5:
aa:70:e7:54:e0:7b:06:29:5e:fd:32:46:80:3a:aa:
5e:02:3a:6e:6a:d0:10:0e:95:62:2c:f1:ee:df:26:
6c:e6:56:b8:9e:99:c7:c5:69:8a:45:b4:1f:d7:b9:
b3:95:f5:2d:31:92:4c:cc:1d:71:05:96:0d:56:3a:
c5:a5:53:33:6b:50:37:ca:72:4e:d6:ac:8a:78:ea:
c3:cf:74:bf:4d:95:95:c8:cd:af:fc:86:3d:58:87:
b0:a7:85:3f:e7:00:da:e0:85:72:93:34:04:ad:11:
e1:e8:13:36:64:7f:07:b5:ed:be:08:ef:03:da:02:
58:2f:25:c9:85:c1:a9:ff:29:85:eb:be:ff:3e:07:
c7:64:37:4c:2c:25:12:f7:d9:75:c8:8a:3c:e7:07:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:BF:E7:3B:CC:61:F3:2B:BB:31:05:5F:64:67:62:8E:0D:85:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec7cf623-8608-3308-aed9-15c7038a2a6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.38.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:02:c2:91:fd:da:72:c5:02:65:c2:36:ea:f0:98:22:15:8c:
3e:fb:f6:86:66:b7:8b:47:b9:4b:7d:2a:85:4e:2a:0c:ae:9d:
b7:be:27:ec:d0:af:c5:81:49:09:d2:05:ea:ab:e1:7c:8a:46:
2b:98:40:08:d5:f2:b6:b0:a6:77:0a:43:d4:ba:8e:d7:20:80:
c6:f4:2f:d7:89:fa:a4:bd:be:3f:31:c2:35:3c:a1:80:6a:48:
4d:09:26:0b:51:6c:12:54:ee:ea:74:ea:cc:f8:7e:d8:0c:11:
03:ce:9f:ae:7c:96:02:3b:17:4c:53:07:c6:cd:cf:27:08:a4:
a3:f4:df:4f:4c:8c:90:d0:bc:ab:e9:3f:ec:a4:59:e5:c5:e0:
ef:43:ee:e4:89:6d:c6:e2:99:1a:08:08:e9:22:fb:2a:c0:c0:
07:9b:83:49:1e:83:b2:b5:10:9e:c8:65:f8:89:b7:de:f3:c0:
ae:8e:b8:34:5b:02:0d:54:14:b7:e7:be:71:bf:46:a6:1f:f3:
6d:0c:3e:98:81:68:35:05:ac:58:97:3d:c0:17:9a:f0:9b:37:
0e:3c:96:c9:57:e1:c6:76:de:e5:d5:02:3f:55:ad:3b:d4:08:
ee:ae:3c:ed:e6:ba:a0:4d:c9:5b:f3:0a:49:45:23:82:83:91:
4b:e0:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:10 2025 by rpki-client