Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0bd62f9-e48d-3ba7-abdd-e9428750323d.roa
File: f0bd62f9-e48d-3ba7-abdd-e9428750323d.roa (raw, json)
Hash identifier: 0lpgxs8gznK7w3i1O513aSjtQNvmTdT4ow3+NoD6Hkg=
Subject key identifier: D3:6A:86:32:93:1C:A5:2E:9F:B5:39:F7:BC:F6:24:15:20:54:32:C6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CA28DBDE1842FC070E40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0bd62f9-e48d-3ba7-abdd-e9428750323d.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.33.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:ca:28:db:de:18:42:fc:07:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=aee756d1-9cac-426d-852a-ff673433ec82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:6f:ef:33:07:97:b6:dc:3b:f9:f2:c9:f8:
79:ee:55:c7:86:ad:a0:da:c0:5f:14:a0:a6:9d:09:
53:93:35:05:df:9c:1a:8e:e8:0c:00:8f:1e:1e:a6:
42:3a:93:7c:4f:0f:fa:b2:57:32:20:2c:82:20:ec:
62:0e:52:9e:52:a8:a2:72:dc:90:36:04:98:77:4b:
1c:5c:59:05:4a:c0:44:08:1b:d0:87:47:e8:ee:21:
f5:9f:d2:cc:90:97:9d:7c:3d:db:dc:2c:f7:03:6a:
f9:60:ae:c8:df:26:07:06:6a:58:60:56:f2:41:b0:
1d:7f:57:31:55:e6:01:28:a0:fb:d4:09:72:c1:57:
41:25:d5:a8:b2:be:8c:2b:54:a1:91:1d:2f:57:5d:
c4:b3:05:68:09:65:d1:ec:ac:5f:9d:1b:c8:42:43:
48:71:2d:03:34:97:45:82:43:2e:ec:c9:3b:99:6c:
e9:1f:46:8a:8b:85:1c:3d:fe:e6:7a:10:81:e3:f9:
66:ea:dd:c0:c6:f1:37:8c:2f:54:af:2d:19:ec:32:
c6:49:d2:39:c8:2c:96:6a:9c:e9:19:f4:7e:88:8c:
da:06:1d:e1:87:22:3d:0f:51:c3:e6:5d:f6:e0:9a:
29:6e:4a:b4:31:bc:f1:3c:ce:71:ee:99:43:2e:88:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6A:86:32:93:1C:A5:2E:9F:B5:39:F7:BC:F6:24:15:20:54:32:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0bd62f9-e48d-3ba7-abdd-e9428750323d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:ef:f5:08:be:fa:ff:96:bd:0f:4c:fb:d6:76:3d:97:2c:01:
4b:58:23:1c:44:96:28:10:52:8c:ff:39:f9:d8:09:32:47:ba:
98:65:a4:32:91:df:22:de:c2:54:e7:e1:61:0c:6b:66:d4:db:
b4:c8:d8:0c:e4:78:4c:63:f4:ad:2f:21:44:a9:50:f0:fa:fc:
15:e5:49:cb:78:72:32:ff:79:f4:39:04:56:39:68:85:44:1c:
fa:ca:e2:b0:3f:61:e5:cd:be:52:7b:01:94:ac:8b:72:08:c1:
4d:40:b1:cd:0a:3c:6e:a2:8c:4e:24:bc:01:07:c7:dd:99:c7:
6a:c4:d9:c7:5e:cf:b8:53:c0:7c:72:bc:c2:75:f2:d3:ce:60:
e6:4d:b6:a8:71:42:aa:de:59:e5:20:9e:b2:22:7c:14:63:0e:
56:e9:c1:d2:86:20:47:16:9d:eb:9f:86:94:af:f2:19:98:29:
ab:32:2d:ec:be:96:7b:4b:18:2b:2f:55:32:df:e8:76:77:d9:
93:92:25:d8:e0:9c:b7:73:93:d3:68:0d:b9:2a:4e:8c:4a:ad:
b9:ff:18:5d:45:49:29:12:f9:8a:ed:8f:57:76:66:21:c6:50:
1d:af:f7:39:66:68:ce:94:d5:c9:a2:67:e6:61:85:56:d1:46:
21:e8:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 17:47:51 2025 by rpki-client