Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed91d3f9-5f71-3790-b2e6-3e9987a42113.roa
File: ed91d3f9-5f71-3790-b2e6-3e9987a42113.roa (raw, json)
Hash identifier: kEPkiGS6pysw3X+hL4bseQyL1v3Kr91xsVGEzpon8MY=
Subject key identifier: 2B:34:F2:F1:F5:F8:2B:68:46:42:DB:4C:A2:67:BC:98:C3:E2:0C:2D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858483F80427C90D9A1C9546C7000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed91d3f9-5f71-3790-b2e6-3e9987a42113.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.72.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:42:7c:90:d9:a1:c9:54:6c:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=51316cb9-a011-4889-8363-fbe38d756750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2a:67:17:3c:d2:0e:e6:89:13:c4:a0:5c:c1:
98:78:dc:e3:1f:6e:10:e6:0c:4d:41:8a:c0:9b:e3:
a5:c4:97:2f:ed:90:05:15:e6:ff:2c:0f:e4:a9:d0:
1a:13:97:10:1b:de:25:eb:aa:5e:15:0b:ac:c1:9a:
db:ca:7e:95:39:64:64:ea:87:29:d0:3d:d6:c8:92:
b5:4e:fe:c4:36:fa:77:e9:77:a1:47:b5:98:bd:38:
1e:86:0e:13:f2:64:e2:35:ca:f2:25:d4:a4:8b:60:
6e:1f:41:38:3a:8c:89:df:14:01:ae:54:e3:0f:09:
ea:de:5d:00:cf:5f:d3:3f:84:ef:48:ac:41:8e:a1:
6e:f2:39:ef:0a:6b:40:e5:74:d5:59:31:3a:d6:4e:
5d:2c:5a:18:14:9e:98:1a:8d:fa:53:1a:46:2f:bf:
80:42:12:4d:37:38:fb:ca:ed:70:6a:0a:48:86:08:
dd:7a:62:40:67:b0:6f:5b:9c:f7:31:9c:3d:79:fb:
26:fe:1e:e4:dd:be:b3:cf:35:2f:3c:b7:48:0d:23:
71:85:2c:fc:c6:c2:70:be:5e:e4:0d:46:07:ad:b8:
ae:30:d3:99:02:86:a6:32:5e:24:e1:f8:34:0b:60:
c4:b3:19:3a:f0:a8:6a:46:aa:80:1d:85:fe:f3:78:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:34:F2:F1:F5:F8:2B:68:46:42:DB:4C:A2:67:BC:98:C3:E2:0C:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed91d3f9-5f71-3790-b2e6-3e9987a42113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.72.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:e8:3a:4d:eb:7c:e4:8e:7a:a2:85:0c:fa:ea:01:8a:aa:79:
91:f4:a1:03:a9:c5:8c:24:68:e4:fb:5c:20:0e:7a:f5:1f:d9:
d3:2e:a0:3c:50:95:ef:2c:ba:82:22:72:1d:cf:25:5a:37:ba:
5f:5b:d6:2b:ea:e3:6e:88:ac:6f:00:c6:ca:48:c4:ab:b9:43:
54:7a:a2:ce:96:8d:e7:7e:fd:e7:e9:14:6c:fe:8f:63:d3:32:
dd:64:a2:0b:0e:16:29:f2:45:2e:b5:8b:03:55:88:e2:f0:d5:
d2:59:91:2b:b6:fd:f2:bf:d4:78:aa:d6:24:e9:92:f7:34:c2:
5f:7a:08:4d:09:c1:cb:76:ad:9c:c1:e4:48:98:6b:03:6e:12:
65:f2:fb:1e:2e:58:63:36:08:b1:0d:7d:09:8e:fc:44:b7:62:
22:31:1b:05:f0:e8:04:b4:28:0d:7a:a0:93:ab:df:16:f8:7f:
65:fa:af:82:51:00:ee:7d:6a:76:5c:05:7a:5c:7f:04:51:c8:
03:d2:a8:cc:80:c7:d4:44:43:9f:25:6c:9d:5b:26:b1:00:1e:
a0:07:26:83:16:b5:b4:c8:24:2a:d9:f2:02:68:69:76:64:b4:
a6:a3:ba:4f:52:6f:a8:33:a8:bd:42:e8:05:31:46:9e:8a:c6:
f8:1d:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:59:19 2025 by rpki-client