Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02f156f0-6caa-3a22-849a-a7a24be697ef.roa
File: 02f156f0-6caa-3a22-849a-a7a24be697ef.roa (raw, json)
Hash identifier: HYSvXcmdipeiveDFbsV6ChKPp0lcRDPtDov6UKDBVVI=
Subject key identifier: 79:0A:8D:40:1A:DE:0F:D7:BF:C9:C8:35:67:43:14:D3:4F:FC:FA:66
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB49B373E3ACAA55780980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02f156f0-6caa-3a22-849a-a7a24be697ef.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.43.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:49:b3:73:e3:ac:aa:55:78:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=df5a00c6-1a63-492a-a16c-5d16bcca6262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:b4:9b:2a:ca:4b:7d:0e:33:f4:b2:62:bd:
f8:8e:12:5e:9d:2b:f0:16:6a:d0:d7:37:ba:7d:19:
95:99:15:72:04:3f:67:9d:fc:f5:f6:61:1f:b5:7e:
c1:db:ad:39:da:f6:f2:99:6e:b4:16:f2:45:57:cd:
3b:b7:1b:b8:a9:39:d4:29:64:eb:e9:f9:8c:bc:a8:
05:11:2d:6c:72:67:6d:4e:52:87:af:99:1b:5e:46:
15:7f:a7:dd:1a:2e:1e:68:57:89:25:c4:6d:dd:61:
28:4f:31:a2:5c:8e:f5:9e:16:9c:e3:ac:3e:1a:a4:
81:3e:e0:f2:b1:40:3f:02:00:8d:12:9d:21:48:3a:
db:fa:43:7c:14:f5:49:b0:6f:43:f4:ae:61:4c:f9:
8b:bc:45:ef:9b:9b:06:4f:a9:92:10:30:04:8c:6c:
a6:88:78:7a:6c:98:30:b8:c8:f9:14:a5:63:2f:47:
68:a9:73:e4:c9:2f:6a:9f:dc:8d:aa:c9:ce:cf:e7:
82:5f:af:34:63:11:9e:b7:21:eb:42:a4:76:de:da:
43:de:59:ec:55:6b:1e:39:1e:91:4c:20:78:a3:9f:
81:a5:87:42:c1:c9:8b:a4:55:8e:7f:97:d5:6c:31:
a6:a8:19:8b:87:0d:54:99:9e:ed:69:2d:a8:5c:c3:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0A:8D:40:1A:DE:0F:D7:BF:C9:C8:35:67:43:14:D3:4F:FC:FA:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/02f156f0-6caa-3a22-849a-a7a24be697ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.43.250.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:b4:3c:d1:4a:73:e8:3d:d8:cc:10:5a:8f:aa:ae:3e:44:ba:
a6:cd:d5:57:39:9a:2e:b2:8c:3d:a7:33:82:e7:54:25:44:fb:
7e:99:ee:03:d4:4a:37:9c:4b:1f:4c:3e:51:38:6c:f6:b2:84:
ce:f6:5c:ef:e5:81:80:be:05:b6:2b:5b:1a:48:ac:ef:d8:35:
8d:70:dd:36:ce:85:36:94:d8:bc:59:01:15:f9:3f:18:20:0f:
38:2a:bc:6a:b8:2b:ed:fb:8c:df:d1:9d:ef:71:fb:ee:e1:cf:
a7:64:db:e3:bb:06:54:06:03:ed:78:b8:a7:b0:ea:12:7f:9e:
3d:37:68:81:ea:ce:d9:e8:5b:8e:bb:6e:9e:65:38:9a:21:ec:
60:51:d2:bb:21:77:f9:3b:0b:46:3d:83:42:6e:9d:0b:a3:c6:
3b:67:04:ab:de:9a:f4:da:eb:0d:62:0d:c9:b0:c5:d3:fc:2a:
ab:75:64:48:8f:ef:20:eb:e9:16:58:67:dc:52:b6:44:ee:44:
b2:5a:40:11:7b:90:d5:51:01:71:df:da:d4:33:ee:96:43:c5:
ea:35:c3:eb:92:9c:f5:88:e3:ef:e2:18:36:aa:05:b2:7e:4a:
69:51:42:87:ed:b2:1f:a9:17:c6:8d:d4:58:54:0f:92:6a:21:
83:85:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:56 2025 by rpki-client