Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f372d951-2414-37fb-9ae9-8c3a335f5548.roa
File: f372d951-2414-37fb-9ae9-8c3a335f5548.roa (raw, json)
Hash identifier: dp2ArWoFDH2cy9RIBk/kgbXbdvWv+fP4IQd+Z3t2Y6c=
Subject key identifier: 03:07:93:2B:18:14:FC:9B:84:4C:53:22:D1:C7:94:E5:1E:7F:6E:94
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BE3E724AF5BD380B2580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f372d951-2414-37fb-9ae9-8c3a335f5548.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 35994
IP address blocks: 23.213.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:be:3e:72:4a:f5:bd:38:0b:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=b1739ec2-e3a0-4bb4-89b7-c7de5ef321a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:58:b9:ad:83:b2:0e:6c:6f:a5:cc:90:d6:
10:95:f8:42:93:b9:d7:b2:bf:23:ba:5d:92:10:f3:
f9:28:45:bd:75:cf:2e:41:42:39:1a:08:28:10:fb:
63:2a:b2:1d:ed:f0:3c:31:b7:3c:f0:71:52:2b:b1:
74:1b:7e:d5:b0:cd:71:2d:05:f7:37:70:8b:46:59:
67:cb:fb:45:c4:5c:18:b0:d3:d7:8d:b9:25:82:9b:
de:ea:34:79:9a:d7:a2:45:47:d2:74:14:fd:8c:f3:
7e:17:20:63:10:ee:18:a2:00:bb:6d:76:2d:15:e6:
31:15:6b:98:a0:13:14:a2:88:da:97:0e:05:e6:f2:
13:e3:aa:cb:1d:ee:0a:f8:38:e8:d0:73:8b:da:b7:
66:0f:66:7e:5c:ea:d0:50:06:1e:88:83:9c:c6:b0:
5b:8f:eb:97:3d:71:96:4f:39:55:1f:1d:02:81:82:
e9:60:7e:4f:19:d7:1c:89:68:fe:f6:ed:8a:bd:6f:
99:3d:46:f4:53:77:b5:ac:7d:9d:6b:cc:f2:54:5e:
7b:b9:70:6a:a2:36:36:ce:0e:2b:72:66:0f:df:59:
a1:c2:79:2f:9a:f2:78:4e:d4:bc:ba:47:9b:47:bd:
12:bb:69:a3:42:e8:fa:ad:ed:e1:d0:64:36:79:de:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:07:93:2B:18:14:FC:9B:84:4C:53:22:D1:C7:94:E5:1E:7F:6E:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f372d951-2414-37fb-9ae9-8c3a335f5548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:e9:21:a7:69:3e:b3:34:7e:95:d3:59:7c:46:a2:03:ea:48:
c1:c3:aa:d9:d0:a1:61:1c:2a:43:08:b9:4e:e7:72:84:e7:16:
0e:ec:aa:35:a2:64:b2:9f:30:ed:4c:94:d1:80:9b:d6:8f:dd:
1d:97:92:33:76:11:06:5e:18:40:fd:e1:e5:9f:69:4c:cd:42:
1d:f4:00:e2:d1:5e:07:74:dd:4c:ac:17:ce:53:4b:f5:2e:2d:
df:35:c8:8f:99:74:02:c3:bc:a9:82:b6:37:d2:e4:3e:d1:e8:
cc:0f:31:fd:3d:c4:b2:a4:73:28:96:06:a6:06:36:67:c3:9f:
f9:91:56:7c:c6:84:ed:c4:c5:01:87:30:e5:25:c4:57:3f:a4:
e4:e5:0d:9a:eb:33:5b:4c:86:9d:58:f8:77:68:73:44:f9:80:
0e:97:e7:c6:d7:0b:6c:0a:12:e8:bf:88:b1:49:ca:35:f7:55:
1c:dd:13:91:63:cd:9d:55:bc:b7:3c:4a:05:0b:65:b8:7c:4b:
a2:70:dc:8f:f0:74:19:05:e4:ee:8f:cf:f1:1b:99:d1:0b:30:
99:68:c1:a8:ae:67:d7:fd:30:c8:97:1a:01:74:8a:f6:a6:c0:
23:6a:c4:c0:44:c9:df:43:9c:3f:5d:b2:0a:73:ab:49:a6:39:
a9:d8:e7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:33:39 2025 by rpki-client