Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a41375-a83a-33b8-9935-9f5804eb373d.roa
File: 07a41375-a83a-33b8-9935-9f5804eb373d.roa (raw, json)
Hash identifier: yMMf8rJdfLxI4EXPXaLGZt8x8E0XbksnYMqAvUSDi9s=
Subject key identifier: F4:E4:75:FA:3D:B5:F8:8D:7E:5E:6C:70:75:E7:7A:0B:AA:8D:67:72
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BA5645F1A91F0A94E9C7D800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a41375-a83a-33b8-9935-9f5804eb373d.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.208.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:45:f1:a9:1f:0a:94:e9:c7:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=8ea1eedd-4f93-4371-b820-1cec3e1405e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:56:dd:45:c1:22:a2:84:aa:fd:1d:3e:f2:
eb:8c:d6:59:42:ec:37:70:39:50:49:3b:31:23:04:
9e:12:9c:fd:00:cd:3a:c4:64:a5:60:bc:3a:27:df:
61:36:91:b1:75:1c:c5:de:1f:27:78:c7:c4:1f:00:
c1:71:f5:4e:59:af:ff:57:84:45:e3:fb:e0:65:6a:
d6:f0:58:d5:d3:75:9b:31:28:77:02:68:55:0e:bf:
2a:bd:d3:88:7d:b9:4f:5d:f8:e6:bc:48:d1:8e:75:
b3:9a:50:b9:0f:b8:49:17:ce:64:8d:b2:c4:c3:4c:
ca:91:a6:28:90:f4:be:37:30:70:c5:bc:b1:4d:92:
9e:04:f4:52:c6:db:c7:6a:63:fd:3c:75:a6:42:51:
05:81:dd:94:b5:77:f4:42:ba:67:62:3f:11:0f:12:
55:ca:f0:ac:c2:7b:96:3a:b3:e1:86:61:92:ab:01:
01:e8:a9:a5:1e:73:9c:94:a5:1e:dc:a5:df:c7:1f:
a7:87:f4:e1:8e:87:34:3a:77:3b:fd:62:7b:2b:60:
8c:68:42:c6:6e:72:d4:2c:ed:aa:7b:41:97:64:02:
6c:7f:93:f0:be:36:fe:f5:4c:a4:68:3d:12:bb:51:
ff:43:2a:78:4b:dd:af:e0:86:57:cd:b5:9d:c9:44:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E4:75:FA:3D:B5:F8:8D:7E:5E:6C:70:75:E7:7A:0B:AA:8D:67:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07a41375-a83a-33b8-9935-9f5804eb373d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.208.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:c8:83:ad:be:e8:fa:c8:29:97:03:1f:37:97:9b:0f:9b:91:
fd:eb:a0:42:6f:fe:3a:55:68:55:c4:72:cb:3f:bb:7d:d8:7a:
7d:92:58:2d:3f:c3:10:b2:8b:06:44:f8:0e:dc:94:9b:cd:d7:
b5:fb:8a:c0:bc:fc:90:7c:59:74:d0:4d:92:ad:99:15:c5:e9:
50:29:05:66:8e:7e:d9:56:b7:aa:b4:4f:ec:99:44:b4:a8:d6:
32:b4:45:7b:aa:22:43:18:4d:80:8f:dd:2a:f1:e3:2d:46:f2:
74:10:5e:df:f0:b5:9b:70:2b:6a:f8:8a:a1:bc:8e:0b:a2:8e:
ee:cc:50:e9:a0:f5:66:36:ed:57:a8:cf:ea:c6:b1:d9:f9:5a:
17:48:66:d5:27:6c:b7:35:2a:58:9c:c0:6e:e0:05:24:e3:1f:
fb:36:24:be:72:81:63:04:60:e7:9e:9e:c1:8e:cd:7f:f0:3d:
5c:2e:45:b9:53:69:76:30:49:92:b4:d0:38:dc:2f:db:3a:9c:
6f:05:fb:c4:3f:a8:ee:5b:28:9f:09:2d:78:65:83:25:34:a2:
f9:8e:6a:9f:f5:5c:e2:a0:bd:59:e0:27:7d:ab:66:50:ca:50:
c9:35:6b:90:5d:cc:20:6e:b5:b6:b6:41:59:84:db:1a:35:df:
2a:48:30:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:20 2025 by rpki-client