Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/edd34391-fb03-3248-b05e-a1cb77efb974.roa
File: edd34391-fb03-3248-b05e-a1cb77efb974.roa (raw, json)
Hash identifier: cLRz3BV6Cxdx5QVFZ6WdysrJ8YrAW8W9Xz4b4dXYoh0=
Subject key identifier: F3:B0:13:F9:20:9E:81:61:5E:FF:FA:EC:4E:7E:0C:E4:D2:F4:BB:3E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485CD0397B8AAA5925FF5710C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/edd34391-fb03-3248-b05e-a1cb77efb974.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.43.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:39:7b:8a:aa:59:25:ff:57:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=43862c78-ef9d-461a-a81c-beacca5a5fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:21:e1:3b:76:27:65:08:85:12:85:0d:07:
74:79:e9:40:f2:40:d1:a3:1f:a1:31:f5:b5:19:03:
8d:e2:9d:85:e5:ce:1f:4f:d8:26:a3:9c:6e:0c:cc:
db:54:11:2a:ac:89:87:d1:74:48:70:d9:eb:67:8b:
e5:d1:e0:fd:29:cf:2c:bb:24:65:2c:e3:93:1d:e7:
92:4b:4a:17:9b:98:75:ec:92:b8:a8:5c:e7:33:26:
fb:30:c5:20:57:18:7d:a2:c2:cb:a1:ee:f7:2f:49:
dd:77:3c:27:38:e4:db:76:08:e9:ee:b2:10:b4:38:
83:7c:d7:5d:01:23:fc:f9:9b:6e:8b:1b:e7:c9:e1:
2a:9f:d5:09:d5:3b:cb:2d:81:1b:c2:75:c2:08:f8:
10:5e:d1:b2:c3:da:73:f8:6d:fe:88:e3:2d:65:cf:
cd:1a:8a:37:14:08:b3:1c:46:d6:0d:c9:45:37:0f:
ab:94:28:6e:21:c6:4b:7d:83:d2:8e:38:75:53:a0:
25:32:3b:76:f4:c3:c7:b1:d9:a9:23:31:d9:a4:f6:
90:02:d9:4b:6f:c0:ab:70:6e:1b:dc:a9:53:93:61:
91:f7:89:47:2d:66:5d:10:d9:11:ea:5d:2a:5c:45:
72:ea:1c:11:ee:98:3f:c5:2f:66:37:b4:25:3c:48:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:13:F9:20:9E:81:61:5E:FF:FA:EC:4E:7E:0C:E4:D2:F4:BB:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/edd34391-fb03-3248-b05e-a1cb77efb974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.92.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:36:b9:ec:9f:b6:69:22:ac:9c:60:20:89:7f:c0:f9:90:df:
1b:43:1e:43:b7:62:01:f2:78:e5:c7:c9:65:63:29:a9:2c:76:
79:36:68:bc:19:01:1f:1f:f4:4c:c6:6a:da:8e:df:7c:e5:54:
d5:99:96:1c:79:79:44:90:14:8d:78:81:a2:ce:53:39:02:29:
97:c7:29:8c:3a:39:ca:7c:64:32:31:49:31:e1:93:36:43:5e:
d0:ec:1d:7a:b2:8a:5c:5a:e5:f5:b6:b7:0a:86:1a:98:bb:2e:
f8:37:94:f2:cd:83:e3:d1:6a:33:d7:08:c6:77:06:62:d4:94:
4b:c5:c6:d6:ca:87:42:ee:b9:e5:71:e9:6b:28:25:db:e6:62:
f0:8c:0b:42:07:77:aa:e1:01:95:78:75:61:c2:ca:a9:3f:29:
2e:47:3b:92:ba:85:9d:44:b3:7a:22:9f:d2:b5:3f:a2:51:99:
07:0d:c2:0e:fe:a8:9e:c8:73:02:a7:d0:75:0b:70:e2:7f:85:
43:af:ce:8c:b3:23:71:1a:49:b1:90:dc:00:f9:21:a6:b6:9f:
f5:d2:25:80:eb:bc:70:a9:ee:f1:a4:b2:66:56:90:11:3d:cb:
4c:cb:36:35:3c:a0:44:3f:30:1d:76:a0:f5:f9:95:31:de:dc:
e0:35:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:37:31 2025 by rpki-client