Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef140530-eae9-3d54-b1aa-d775f11a6fad.roa
File: ef140530-eae9-3d54-b1aa-d775f11a6fad.roa (raw, json)
Hash identifier: kzOBoi1u1KBkcv/WMswnexpOq4Yq0HaU9oOTZkSqCNM=
Subject key identifier: C7:DB:BA:23:06:29:7B:C0:74:3A:CE:C8:A4:AA:16:82:10:76:88:E7
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209D53952245DAD6957AA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef140530-eae9-3d54-b1aa-d775f11a6fad.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.40.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9d:53:95:22:45:da:d6:95:7a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=21cdf2cd-e4a4-4884-919a-f9be2aa6ca9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:d6:52:e8:74:27:ea:11:ec:5d:d3:51:7a:
0d:e0:f7:9f:a3:12:fd:8a:48:1d:27:ee:fb:0f:36:
62:30:f7:fb:61:b5:23:ba:96:94:3b:41:bf:18:64:
9c:a2:e4:66:8d:3b:2c:58:dd:80:af:47:9b:b1:12:
87:9d:86:0b:1a:b0:85:9c:2c:ac:dc:0b:f0:5b:2f:
f6:aa:fc:74:a8:6e:90:e7:25:d4:8a:60:7a:aa:aa:
21:ee:29:c6:a8:ce:1d:25:45:ee:c8:ea:78:9e:5f:
c9:3a:bc:70:b2:5a:ca:00:5f:89:c6:a0:03:cd:eb:
1d:9f:c1:6b:b7:f1:c4:ff:91:81:d5:e0:36:cf:7a:
c5:cc:c6:44:25:66:70:13:2c:e3:62:03:61:19:17:
f8:bb:8d:cb:bd:f5:a6:55:cf:ce:57:e1:ac:4d:2a:
00:79:66:0a:aa:58:d3:8a:05:93:75:3e:fb:9f:96:
9a:66:5e:f4:7c:71:3b:8e:74:72:57:d1:06:15:e6:
9f:41:8b:f0:10:bd:b2:4e:0d:55:f1:0b:27:b4:98:
d2:c1:2d:3f:0f:c0:4f:de:49:b7:80:47:66:91:ad:
85:56:ca:44:10:f5:91:31:65:2c:ef:01:1b:72:ed:
66:f0:33:04:9a:59:4f:f9:64:3d:6e:9e:33:a9:3d:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DB:BA:23:06:29:7B:C0:74:3A:CE:C8:A4:AA:16:82:10:76:88:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef140530-eae9-3d54-b1aa-d775f11a6fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:84:f5:df:9b:ec:e3:1f:31:3e:ac:a6:56:22:6e:3c:4d:de:
96:5e:e3:f7:b9:84:60:71:f1:a9:4c:dc:a8:db:53:ce:81:d4:
8b:94:75:ce:59:4b:7a:d8:16:51:83:a6:14:8b:d5:bf:44:38:
49:58:30:42:be:9d:5f:1c:84:68:dd:ae:8a:39:58:d5:bc:e7:
51:69:45:3e:00:8b:6c:33:19:f3:a0:8d:68:07:b0:61:34:d8:
de:1d:18:e7:8a:5f:9b:4b:82:b7:d5:67:78:f7:19:0a:15:0c:
d6:e0:1a:ff:12:20:04:88:64:82:7c:d8:76:9f:1a:e4:2b:ae:
ba:54:8f:c7:e0:5e:b2:52:7e:44:23:32:d2:41:f0:4e:aa:41:
3b:ee:be:19:fc:05:fb:2f:26:c5:24:df:4e:4f:d6:dc:2e:33:
72:4d:af:ec:3b:4f:e7:c8:37:89:a1:90:06:eb:c2:62:46:cf:
f3:6f:53:2b:75:1a:60:4b:20:8f:22:0a:aa:51:8e:99:28:e8:
a4:19:ba:2c:df:9c:e9:a8:bd:46:7e:2a:fb:bd:86:88:47:80:
83:71:ce:fa:74:51:79:10:8f:50:52:48:30:68:13:03:2d:28:
ed:3e:40:b2:40:2f:a6:20:81:dc:27:02:17:e0:56:e6:e1:ac:
86:c5:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:37:08 2025 by rpki-client