Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4ac9d44-7524-36d5-9a6f-f0942085f6f4.roa
File: f4ac9d44-7524-36d5-9a6f-f0942085f6f4.roa (raw, json)
Hash identifier: kz3v2AW+ovT/xSP5oAlqlfHqmy3PPrmVx42S6GUEhE8=
Subject key identifier: F9:7C:A6:FB:EB:21:D0:CB:F0:61:7B:26:6D:A9:F1:C4:47:87:75:92
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858486EF5CAEB7BAF8A4CB18BC780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4ac9d44-7524-36d5-9a6f-f0942085f6f4.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.33.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:ca:eb:7b:af:8a:4c:b1:8b:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=34ad7e6e-1be9-4c24-826e-0a75ffd17947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:77:69:bd:ec:e3:63:26:03:19:78:dd:6b:
a0:ea:27:69:4b:6b:be:ec:c3:8f:34:65:df:0f:6c:
15:8d:fd:32:4e:59:70:ae:ad:99:ce:f1:6f:e6:8d:
14:61:75:19:bf:5b:d7:bf:c0:06:83:ac:2c:44:36:
f3:3b:0d:02:f7:0a:ef:45:39:97:e7:d8:98:52:90:
22:b5:59:5e:8e:f9:8f:c5:11:71:78:91:d9:d6:7c:
35:98:06:28:22:3a:8d:d9:e9:05:17:d8:35:0c:2c:
85:11:2c:8e:3d:b1:a0:1a:95:fd:f8:f7:a1:2e:ec:
cd:3c:ae:63:d8:56:5c:bb:39:d9:81:b9:75:8e:d0:
f4:8c:a0:40:ac:06:39:b2:99:d5:ec:e9:da:d8:e0:
75:4f:e1:f3:51:9c:aa:5f:17:07:a3:ac:0a:88:26:
4f:fa:3f:28:ec:2a:cb:98:d8:cd:61:46:39:6f:0a:
22:2c:93:83:41:60:0d:ee:84:39:f6:40:78:89:f0:
29:70:e8:35:f6:16:f8:c0:4d:a3:3d:55:02:8a:28:
28:f1:51:30:11:87:40:8b:40:62:87:0d:97:84:aa:
09:0f:72:58:3f:47:cf:1d:1d:08:d9:90:b2:a9:ce:
a6:69:15:2c:3f:d0:a3:41:e0:ce:0b:6c:da:f0:d1:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:A6:FB:EB:21:D0:CB:F0:61:7B:26:6D:A9:F1:C4:47:87:75:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f4ac9d44-7524-36d5-9a6f-f0942085f6f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.33.212.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:0d:66:b6:f6:f6:19:8f:40:0d:36:fe:b1:fb:fb:79:48:48:
d4:a6:7d:ed:8b:f8:8b:9d:ca:26:90:87:b3:ea:af:67:9d:68:
fc:64:bd:bc:31:65:ff:6a:dc:98:49:92:3d:36:d9:e8:e6:5b:
6f:48:79:0a:68:b8:ff:3a:bd:fb:0a:8e:b1:e5:a6:46:cf:6c:
10:ca:cf:3a:f1:c6:7c:9c:5d:08:69:45:38:11:51:cd:a3:6c:
c3:46:45:75:6d:55:6d:73:7b:b0:6f:8a:08:b7:77:ab:8f:c7:
e8:74:a0:1e:66:ff:41:31:f0:1d:9b:a2:bc:2e:e4:77:f7:fc:
9b:58:7c:41:9d:8b:16:1a:58:14:46:c6:c8:9f:1d:a2:65:b6:
2e:6e:af:24:a9:0e:47:dc:56:db:27:b4:6a:4a:66:27:e8:67:
a3:83:a9:ca:18:2e:ed:0c:f1:c6:be:35:d7:60:fc:03:68:1b:
59:83:19:6f:c2:9b:12:f2:fd:25:05:08:49:83:f5:a9:f4:e3:
88:61:04:f1:c5:d6:ba:2f:bb:76:9e:30:84:c9:41:6d:e7:5d:
5a:85:f5:86:ac:fc:18:36:49:10:c7:74:03:7f:88:0d:c5:d7:
5b:ca:e1:02:fa:eb:42:df:2e:ac:8b:50:f4:c1:fd:fc:67:10:
94:3c:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:34:07 2025 by rpki-client