Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03277df5-d8a7-3d04-a82d-a1014fe0940c.roa
File: 03277df5-d8a7-3d04-a82d-a1014fe0940c.roa (raw, json)
Hash identifier: UmTTKoO6bW9mw54rgZWlqEUgjBZpOxTvcDOJ/RuHWJ4=
Subject key identifier: EB:BA:B0:CC:ED:53:D8:85:49:7B:73:91:A9:68:74:77:E9:F6:6D:79
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340B5613F123FFDC4432780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03277df5-d8a7-3d04-a82d-a1014fe0940c.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.203.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b5:61:3f:12:3f:fd:c4:43:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=4d9ef2c0-4dce-4134-89b1-779158e4bc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:7d:c1:38:04:30:c8:ec:cd:56:a8:7e:fa:
19:fa:0e:1f:e3:ab:44:c9:ef:0b:c1:03:c8:54:d4:
f6:d7:be:7e:f4:ee:1a:f0:b7:60:6e:00:7d:62:0e:
f4:d1:9c:df:e4:64:13:75:c8:81:22:31:be:a5:94:
24:d7:dc:19:4f:12:1e:41:e7:77:e9:8f:28:3b:d5:
b2:a4:a5:d6:b6:cf:38:08:5f:4f:72:84:fc:cf:00:
42:75:59:ec:be:5c:5a:5b:dd:ef:f5:0b:6a:8a:75:
bf:d8:a4:ce:25:93:00:23:4f:fc:f0:b3:d8:ed:d6:
c9:e1:b6:a0:6c:44:7e:22:08:d4:fa:44:73:50:19:
7b:87:5e:31:d7:68:e0:7a:cb:35:05:8d:46:43:f9:
06:dd:f1:5c:10:96:06:a3:af:02:33:34:d8:9c:2b:
fa:b6:c3:e7:32:73:cd:b0:09:b7:72:91:64:0c:bf:
c2:00:d6:b7:41:90:c6:ce:28:fc:42:c9:61:e9:2b:
37:5d:2a:3f:fd:dd:0f:8b:8b:e6:43:98:92:3f:1d:
1e:08:7e:b4:aa:74:4a:6b:37:20:bf:fa:6d:8e:6a:
1a:7a:38:82:c0:03:95:fa:59:64:27:a2:12:89:c6:
74:1e:d3:39:a8:3a:bc:f2:a7:a4:dc:2c:1c:67:cc:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BA:B0:CC:ED:53:D8:85:49:7B:73:91:A9:68:74:77:E9:F6:6D:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03277df5-d8a7-3d04-a82d-a1014fe0940c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:19:1e:1c:ba:78:60:3b:f9:c0:7c:de:f8:f7:7d:4e:7e:df:
fa:c5:1a:df:c4:fb:24:16:91:38:57:a7:95:80:99:f5:49:c7:
1c:78:4f:b5:9f:bb:bd:46:75:4c:9a:51:e0:b3:f0:90:a7:56:
68:2b:ca:22:a6:7f:67:99:a8:81:ad:e6:c7:4c:4d:f2:5a:99:
69:c3:85:6b:6b:ca:f7:00:6a:94:a1:b9:73:33:66:98:65:11:
99:e1:85:79:68:59:60:ce:17:52:3a:2c:88:fc:20:b5:f4:7c:
8a:92:77:2e:2f:29:c0:ec:c1:89:d6:25:e3:18:40:98:41:55:
a4:4d:9e:d1:05:ce:0d:8c:c6:c3:1c:6a:6a:07:3e:58:a9:e7:
1f:23:36:d8:de:d0:9f:8b:28:40:3b:a6:ac:38:55:d7:00:73:
4c:09:cc:c5:d2:ca:99:1f:be:dd:a2:03:9e:9d:7b:48:45:86:
cb:71:49:59:59:c4:ae:22:66:48:9f:c7:bf:d2:11:35:67:36:
7e:a8:9a:57:ea:c2:c4:6e:95:26:26:78:8f:b9:fd:5e:45:d9:
66:f0:2c:45:56:b9:c5:73:19:a2:2d:bf:83:fc:05:0e:05:7b:
c3:86:bf:2d:f1:a6:1c:58:80:f9:e3:09:bf:f2:26:dd:48:2e:
3a:bf:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:10:07 2025 by rpki-client