Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef0740c2-3eeb-3256-9793-9badbf728d19.roa
File: ef0740c2-3eeb-3256-9793-9badbf728d19.roa (raw, json)
Hash identifier: jFwhDv8b0ZCgc8GJ3v1SZIAgi9zxKdWyr+wuM616+jE=
Subject key identifier: D0:B3:9D:D9:5F:87:0F:A3:12:B7:E6:1F:7D:80:E6:01:05:64:68:59
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5C71D52A2AF6959C71680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef0740c2-3eeb-3256-9793-9badbf728d19.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.34.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c7:1d:52:a2:af:69:59:c7:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=6980721e-0f30-4552-87a7-65cb9a08f484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:df:69:7c:df:be:14:a1:7a:a5:66:aa:10:
21:8b:4e:7d:37:41:f1:e5:4d:cb:0e:74:65:c8:84:
70:25:ef:8a:bd:6b:2c:a9:47:99:14:46:e5:e4:61:
fb:42:25:94:43:6e:2a:09:a9:07:6f:89:1a:20:7d:
a4:87:32:4f:6b:73:12:e8:4b:28:10:c0:6e:04:1a:
77:be:89:a3:40:c7:d4:f3:ea:73:e8:26:ab:31:2a:
db:44:42:fd:f3:d3:ce:a6:41:ac:80:55:a7:33:38:
5b:74:8c:a0:53:d9:20:96:21:00:5d:6f:08:e6:79:
8c:e8:15:93:47:ff:2c:a6:4f:49:3f:44:50:8d:b2:
ba:bd:01:07:2e:af:94:89:51:d1:f5:1c:d4:6b:96:
99:58:52:87:38:b5:9b:d3:e1:92:bf:30:c0:a9:77:
a5:a5:bf:fd:31:d3:7c:4d:bc:3a:10:db:38:b6:78:
92:b7:87:24:14:07:48:f7:80:f7:1d:30:05:6a:8c:
c0:8d:55:9b:fa:9e:64:56:9f:f6:2d:a6:45:e1:ae:
ec:c1:d1:f6:83:4f:7e:66:4d:64:b7:23:84:c6:17:
ad:df:01:03:4a:24:56:61:86:9d:15:56:b5:6d:ac:
ab:74:16:de:2e:63:b6:12:38:f0:c7:a4:ac:19:0a:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B3:9D:D9:5F:87:0F:A3:12:B7:E6:1F:7D:80:E6:01:05:64:68:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef0740c2-3eeb-3256-9793-9badbf728d19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.34.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:71:00:cb:4e:05:1f:7b:eb:6d:f1:c1:b7:a5:3c:b8:59:5b:
97:44:dc:fa:51:d2:fc:b0:48:b5:be:68:e7:00:4e:29:39:04:
60:ee:af:75:e3:9d:8b:02:e9:23:4b:06:4c:18:ff:65:ea:81:
7b:f4:9c:49:25:85:b9:5b:d5:35:b7:84:82:91:c4:81:eb:34:
bb:a7:fe:e0:2c:4c:08:9d:c6:63:fe:a2:23:f6:51:c8:cb:31:
4e:2a:48:b9:f4:8c:5a:6e:c5:e9:08:2b:a1:7d:3f:7f:fc:ae:
dc:d5:ed:ce:16:0b:d0:2a:30:35:c5:66:67:f8:fe:f0:fe:8a:
de:08:40:bd:84:15:68:30:f4:32:4e:df:fc:4c:d4:70:28:81:
1a:0d:0d:52:1a:26:b1:e3:89:b0:17:4e:7c:ee:af:e7:c7:c3:
be:e2:ac:63:bf:46:22:2b:60:a1:a2:9b:20:4f:54:9a:ad:a9:
24:b2:af:ed:64:1f:29:63:72:e8:9c:bb:b7:b8:d8:20:6d:1f:
19:f9:da:e4:b6:80:31:a5:8d:c6:e0:b0:53:b0:92:31:c9:30:
d7:1e:dc:d1:6b:32:7d:4f:d2:d9:c3:56:3b:f4:86:dd:c3:38:
05:19:01:b2:42:28:18:ce:61:7f:15:31:75:e2:ea:44:a7:1b:
5e:66:17:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:49:49 2025 by rpki-client