Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f633c10b-0621-3618-9b55-85a3ef2ab0b9.roa
File: f633c10b-0621-3618-9b55-85a3ef2ab0b9.roa (raw, json)
Hash identifier: /mfyKE72xSy3N6BKaIa9H57GA+I9yvREGKZgQMRsbWs=
Subject key identifier: 4A:AA:56:F0:79:9D:0C:7C:73:FE:92:31:A4:88:C8:CC:BD:0B:F2:49
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A20991055BC4D5983E45920
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f633c10b-0621-3618-9b55-85a3ef2ab0b9.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 35994
IP address blocks: 23.36.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:99:10:55:bc:4d:59:83:e4:59:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=c9474ad3-5f73-46fa-b551-8af049c00910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:f6:d8:6d:ee:9f:b0:df:78:56:63:d6:88:
3d:ce:91:2d:4d:d2:04:d2:9d:ce:cb:00:94:70:ab:
da:15:da:b3:a0:7b:d8:88:ee:84:fb:77:df:25:94:
b9:61:4b:f3:cd:08:49:81:d6:46:3f:c6:cf:78:a0:
69:92:42:fb:b0:1f:da:24:de:46:2c:5b:a2:ed:00:
5a:89:0e:05:4e:f0:29:d3:9b:8b:bc:74:05:71:b2:
72:e3:11:34:40:97:16:ba:7e:80:15:38:41:22:23:
a2:bf:48:7a:aa:01:b6:c9:bd:57:59:6a:79:c0:e8:
81:18:7e:6f:84:25:a2:eb:8b:cf:af:45:11:ed:64:
bc:4d:a2:e6:2d:1f:3e:82:1f:47:54:71:ef:80:e3:
73:6e:d0:00:4c:86:1a:4f:a3:bf:1c:50:5e:64:3e:
42:fd:e7:5f:46:28:12:23:eb:43:4a:5f:8c:6c:f8:
4e:21:50:55:1c:64:ed:e1:6b:13:84:f1:89:5d:75:
5e:b7:b6:5f:4b:53:96:56:fc:57:e6:47:ab:42:dc:
8b:ce:99:13:3c:dd:94:8a:22:ed:5c:cf:c6:f6:a5:
f8:3d:e4:dc:33:58:a0:cb:01:e9:6c:65:75:7c:4b:
40:db:2c:7e:54:ee:16:05:c5:40:76:f2:da:1c:d6:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AA:56:F0:79:9D:0C:7C:73:FE:92:31:A4:88:C8:CC:BD:0B:F2:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f633c10b-0621-3618-9b55-85a3ef2ab0b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:8b:88:52:5d:73:1d:fa:f5:4a:1d:d4:93:22:e1:33:a3:ab:
ae:e7:5b:82:10:39:9d:31:b9:8e:01:18:ce:af:c9:fd:70:b6:
29:b6:b3:6e:6d:ac:6f:25:7e:30:43:e2:94:a8:d3:e6:ac:67:
e2:a0:7f:c3:43:93:a5:18:a4:5e:a3:8a:d4:8d:44:46:62:af:
2d:65:65:eb:28:e0:56:af:ad:13:97:60:75:d0:e5:5d:61:5b:
ac:bf:57:56:e1:b1:46:12:a2:3c:c7:57:1f:f4:42:13:62:22:
8e:0c:08:cc:f2:2b:ae:44:23:72:df:05:60:22:f7:da:22:c9:
26:d4:66:98:11:e4:50:ea:bf:d2:9e:fc:a9:02:ed:bd:be:f5:
20:a3:a9:08:e7:87:7f:f3:ad:4d:8c:14:06:c1:e0:48:2a:d9:
02:92:f5:50:2f:9c:0f:71:30:0d:63:aa:01:2e:b9:67:5f:7f:
da:2b:38:b8:54:be:36:2a:78:44:dc:f7:91:01:07:ed:1a:95:
ba:0e:76:9a:42:7e:77:24:43:e6:49:6a:64:93:b6:0f:ba:97:
f6:18:33:b9:0c:be:d0:72:45:2e:9d:59:2a:48:8f:82:ae:a1:
15:f5:f0:94:cd:99:74:d6:2f:5f:69:dd:14:b2:46:19:d7:07:
20:1c:2b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:50:11 2025 by rpki-client