Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa
File: 4098e103-d04a-3465-a7e1-f3debf7a9e61.roa (raw, json)
Hash identifier: frCu1L7jyvxYZp51sCEt5nA9av+NcmdJV2G2zHL+e8M=
Subject key identifier: 88:E0:A9:0A:D4:02:4B:42:B6:E4:CC:50:B2:48:72:D7:57:B9:89:73
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F432858487FB5D864A4ECA98EC6FD7D00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 23.239.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d8:64:a4:ec:a9:8e:c6:fd:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=5c5f8b77-8b74-43e2-9a4d-6fe1f6118dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:02:c0:a2:22:68:5d:b7:e7:17:35:90:2a:
c6:13:48:33:48:c9:f7:c3:7a:02:ab:be:15:a5:1f:
cb:59:09:10:18:84:8c:76:16:0c:e8:3e:07:7e:4e:
37:c7:da:2a:88:07:1b:62:36:56:28:84:c7:96:20:
7b:fd:de:c6:00:9b:c1:99:0b:f3:6d:31:3a:ca:32:
fd:fb:e3:e2:50:20:94:a5:10:43:5f:88:49:6b:39:
0f:44:21:5b:85:dc:5b:f2:35:30:88:ee:d0:21:61:
53:80:d5:aa:85:25:fb:14:98:56:48:f4:a0:00:0d:
62:52:88:bb:e2:31:d8:a1:89:da:34:4e:1c:d6:77:
86:3e:3d:a8:5a:06:a7:f7:09:7b:68:e0:f6:5e:41:
e1:46:ec:1d:73:63:b1:27:3f:07:6c:3d:2c:55:c2:
a8:fb:6b:22:60:03:6e:8d:3a:5f:d9:96:32:4a:45:
21:bf:bf:48:89:53:ef:0e:03:ec:ec:52:e7:85:99:
38:2a:64:47:b1:34:e4:eb:93:d8:23:8e:03:2f:81:
b7:59:f0:6b:b9:75:bf:35:34:af:b0:bd:a9:b5:6b:
91:63:04:ec:11:2f:ae:67:0b:28:44:c7:bf:72:ce:
56:0c:ce:f5:11:7a:f8:d5:5e:9a:40:3a:f0:98:ec:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E0:A9:0A:D4:02:4B:42:B6:E4:CC:50:B2:48:72:D7:57:B9:89:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.239.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:76:95:b2:06:10:67:a9:9e:23:54:1a:12:e4:74:c1:53:f6:
d5:22:34:f4:35:ec:31:b3:1e:7d:51:cd:1a:61:d1:9c:87:88:
f0:b1:28:39:c1:0f:b7:6d:4e:69:e2:ad:3c:12:c4:21:8f:ff:
2c:3d:f2:e4:b3:d4:bb:d1:98:47:ea:ac:02:60:40:79:7f:e2:
35:c8:9f:c4:f0:da:37:eb:f0:ec:ee:64:71:e4:c7:7c:8a:c4:
08:3c:7a:63:ad:60:2d:d6:65:38:b6:ee:2c:3e:ef:b2:51:da:
3a:d4:8b:f5:b0:00:58:73:6c:b0:68:71:59:6e:f9:ed:ad:e7:
84:17:7f:3a:fe:43:f2:7f:da:45:3d:dc:be:fc:b5:fc:15:22:
54:fe:ba:fa:98:03:c2:a7:f5:a9:ef:6e:7a:14:d2:8c:4d:d1:
c4:d5:40:84:80:ba:0b:cd:79:1f:f7:9a:4e:96:6e:12:59:75:
c5:f6:25:35:b9:e7:b8:ea:5d:1e:79:3e:68:66:8a:3e:bc:77:
a0:fc:15:13:3b:d7:9f:14:dc:94:d9:51:2e:f1:f4:c2:5c:d0:
ca:2f:55:9c:96:2e:62:b7:df:8d:ca:5a:49:72:d8:97:02:24:
96:20:cf:c8:4d:0a:f5:36:53:ee:f6:ae:63:fb:4c:54:16:73:
67:b3:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:51 2025 by rpki-client