Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d89f3bd-b515-3914-94d5-108957c7f1bb.roa
File: 0d89f3bd-b515-3914-94d5-108957c7f1bb.roa (raw, json)
Hash identifier: yIjsfhNHzjSLiXzzekP7AOUp3Rb0FSdBUDYzvO6n/ZE=
Subject key identifier: 7F:27:AA:65:06:96:BE:94:E7:FC:65:00:60:EB:B1:93:9C:A4:A6:F3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209E31DF80B6855DD14880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d89f3bd-b515-3914-94d5-108957c7f1bb.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.40.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9e:31:df:80:b6:85:5d:d1:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=62b51b51-0198-4f79-aaf2-f6de049b5dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:3a:78:d7:7f:a7:05:38:95:cc:7c:81:3d:
70:42:cc:e1:ec:67:83:69:3f:45:78:ab:68:b5:23:
6a:ce:c0:55:b7:5d:db:cb:df:91:f8:c8:03:49:a2:
be:3d:5a:95:61:4e:82:d0:81:75:9c:39:60:40:d9:
cb:70:55:7b:49:6d:77:8e:40:73:18:cd:cb:a4:3d:
c9:c0:3b:9f:89:0c:fb:b1:2e:9c:7e:5d:39:d5:4c:
f6:e4:2d:1c:da:a2:67:5a:f0:21:87:05:21:dd:15:
36:68:68:ed:30:41:21:b5:e0:4a:14:c4:6d:2b:d3:
7d:9d:74:c9:0c:95:e5:02:2d:a1:70:b2:c5:02:06:
ee:d2:63:90:10:51:22:22:53:03:11:48:36:80:67:
ba:ae:e7:ab:a5:be:b4:38:27:8d:8e:02:bf:28:1b:
9e:0c:76:89:bd:db:3c:e0:d6:12:ae:7d:4c:67:e4:
aa:c5:58:37:5f:29:1e:e8:c1:9f:eb:92:70:ef:54:
19:e5:b9:c6:56:6e:c2:28:66:b6:21:4c:1b:95:9b:
4e:d0:19:62:f4:f2:05:3c:b0:73:0a:00:1d:7e:97:
bd:37:0a:01:48:27:f4:fa:4d:69:40:62:3c:8c:48:
9c:9e:06:01:e4:e2:70:12:c4:b4:81:f7:70:57:c8:
22:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:27:AA:65:06:96:BE:94:E7:FC:65:00:60:EB:B1:93:9C:A4:A6:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d89f3bd-b515-3914-94d5-108957c7f1bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:61:b4:3d:9f:fd:c7:59:c8:08:f8:74:c3:3c:43:12:a9:56:
c7:40:22:06:f8:c3:e1:40:9f:2b:cd:2f:99:cb:67:0b:e5:18:
0a:9c:4a:44:c4:1e:53:2c:94:aa:68:19:24:ec:7d:13:f0:20:
7f:71:b6:a3:9b:ca:47:32:f3:4a:7b:b9:aa:2d:ac:1b:d6:5a:
ba:62:60:6f:e1:14:ff:46:c8:b6:fd:dd:5c:0b:d6:07:c4:5b:
6f:1e:3f:17:27:4d:77:d0:47:34:4d:42:bf:2b:73:de:a4:79:
d3:93:71:f2:ee:fa:38:69:59:f3:d5:50:4a:d4:92:1c:4b:61:
d2:39:47:23:11:c0:63:40:b0:4d:35:86:80:8f:2a:53:eb:2f:
66:22:2f:d0:db:aa:4e:f8:70:8f:0a:22:25:5b:01:e6:ad:8a:
0e:d5:cf:7a:85:53:d6:b2:43:c2:05:ee:c4:fe:3f:6f:16:b5:
02:ac:2f:77:be:0b:ac:a9:19:13:d1:89:aa:be:aa:b2:4d:76:
46:8e:c0:aa:1a:b5:79:81:82:9d:54:9d:54:bb:52:97:d8:45:
f8:8b:70:63:a5:e9:91:43:bc:f7:fb:fe:dd:3c:c3:c6:a4:ca:
82:eb:f3:42:cf:22:bb:ac:d5:7a:53:b0:9a:6a:8a:b1:e4:77:
65:25:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:55 2025 by rpki-client