Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d785afa-2eb2-3c38-a376-7d262609e184.roa
File: 0d785afa-2eb2-3c38-a376-7d262609e184.roa (raw, json)
Hash identifier: LV6UfbsrBz8itdHqhnyS61QVivXuUAthbFLr2d5y+ao=
Subject key identifier: 28:2A:95:46:D5:51:65:CC:BE:71:76:92:5C:F8:73:B6:27:39:69:31
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BA56431A23EDA0943B857500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d785afa-2eb2-3c38-a376-7d262609e184.roa
Signing time: Fri 31 Jan 2025 14:00:51 +0000
ROA not before: Fri 31 Jan 2025 14:00:51 +0000
ROA not after: Thu 01 May 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.208.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ba:56:43:1a:23:ed:a0:94:3b:85:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=ae1a3188-0b9e-46da-8bcd-90bfec0d5888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e2:57:50:ee:89:a4:46:1f:c5:d3:62:ae:0f:
af:4e:90:73:9d:e1:6b:27:33:43:0a:b8:80:9f:86:
34:99:74:8e:72:b5:44:d5:e5:34:a4:e8:fd:f6:42:
aa:19:10:27:44:42:2c:3e:7e:37:e9:a6:b4:f1:01:
10:8d:9f:d6:e1:a0:e3:6d:d0:87:50:ad:8c:e8:23:
9f:aa:44:a4:96:8e:08:f4:ce:74:ad:09:02:f6:5b:
0c:af:b8:05:cd:fe:b0:2a:bf:9f:e9:c7:1f:bd:2c:
1f:c8:2b:8d:50:3c:c8:c4:8d:d0:47:07:d7:c8:dd:
a0:b6:40:62:ce:92:63:c7:8f:d7:18:7e:cd:28:59:
85:61:69:59:4e:f1:32:92:c3:1c:d5:24:96:2a:61:
46:47:b8:81:cc:55:cf:aa:50:17:af:f3:e7:e0:92:
1a:7d:79:2a:1c:47:91:ee:b7:65:d3:d0:d7:59:1d:
a1:2c:f2:93:3b:58:20:4e:a8:4a:3c:e2:f2:01:db:
a5:9a:88:db:d4:90:39:df:55:9c:09:37:8e:d7:c8:
48:d3:6f:e6:1c:0e:74:80:4c:5f:ba:61:25:57:6c:
4e:45:3b:98:47:c4:08:e7:34:3d:40:81:1f:c6:f7:
9a:44:32:12:16:dd:d2:e4:ee:07:8f:bd:95:09:c1:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:95:46:D5:51:65:CC:BE:71:76:92:5C:F8:73:B6:27:39:69:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d785afa-2eb2-3c38-a376-7d262609e184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.208.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:4b:1f:a2:4b:4c:bf:b1:a6:1e:b4:06:f4:08:ac:fc:0a:c9:
35:c7:99:75:d4:e1:e2:b3:86:43:8f:a4:df:cf:6c:f1:03:48:
a1:b8:6c:e4:02:5b:af:42:be:f5:27:01:e7:78:a1:f1:94:44:
11:10:79:4c:cf:68:f7:ad:3f:a4:de:98:c9:e8:b2:64:4a:75:
fd:b6:c3:9e:d4:4e:38:f0:8a:4e:b3:31:b9:cc:98:81:97:7a:
32:06:ab:90:9f:76:42:af:34:d2:5b:49:66:59:8b:d8:8c:0b:
96:e2:e3:08:ca:73:ef:d2:e7:86:1f:ae:e5:52:bc:8c:65:de:
db:82:d9:7f:50:44:c1:b7:b4:5a:17:58:25:f3:cc:0b:69:39:
4d:55:1d:48:d0:7c:47:96:59:1f:f0:5c:50:22:bc:f2:ff:dd:
d9:7a:30:36:17:fc:42:59:94:3c:03:77:d8:25:b2:bc:0f:c5:
aa:e5:1d:1d:2b:5c:24:3d:83:fb:6b:b2:89:4a:dc:31:b9:d3:
d7:97:1e:ad:3e:09:78:a7:cf:10:e8:44:f0:23:7c:60:0d:e3:
06:9f:aa:72:c9:d7:2d:40:6e:67:c0:cc:15:99:34:98:8b:17:
45:8e:91:d9:81:91:7d:94:a8:f3:4e:65:1b:02:81:85:ea:9e:
df:c2:ad:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:03 2025 by rpki-client