Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e15dd4a-3b2e-395d-937b-5a8af6c26ff4.roa
File: 0e15dd4a-3b2e-395d-937b-5a8af6c26ff4.roa (raw, json)
Hash identifier: wC686APryPG5s0pJAhrhsMdzEzCFd8FbPjkWNpt3TwE=
Subject key identifier: 35:33:3B:34:03:D2:DD:0C:0E:0B:7C:A2:50:0D:62:9C:AE:78:F5:54
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584883E5CBBFD205CA9704AD0880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e15dd4a-3b2e-395d-937b-5a8af6c26ff4.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 20940
IP address blocks: 23.51.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:cb:bf:d2:05:ca:97:04:ad:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=9f41aaa7-60a9-40f4-a456-5b8c2e96021f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:17:c5:bb:24:5e:d4:b0:db:8d:97:0f:b2:
2f:04:f1:74:ac:4b:67:7b:ae:f6:cd:d8:e1:7a:8c:
f8:80:db:b2:c4:d5:e0:d8:75:30:81:84:30:16:c6:
e2:82:05:36:67:d0:4f:84:b1:7a:4d:e5:29:c7:3a:
b2:7e:11:ff:34:1d:92:b9:9e:97:ec:21:52:1e:d8:
ab:41:3c:2e:9b:ba:7b:40:03:b6:f6:34:be:e1:57:
37:ad:1f:9d:54:79:02:4d:c6:38:1e:25:c1:57:14:
81:35:62:34:8b:46:16:c6:0f:f9:43:36:bd:45:57:
b8:f2:5e:5a:c4:83:b2:b0:f5:52:17:34:d6:b2:79:
2c:d8:eb:36:e6:00:a5:47:7f:e6:37:93:0f:86:cf:
31:9a:65:27:ca:a7:fc:26:96:71:9a:23:b4:a7:d0:
cf:70:b1:7f:6b:8f:b7:cf:23:8e:ad:03:68:09:a9:
10:8e:56:45:b8:1b:07:bd:87:a3:b1:01:5c:99:6e:
49:71:71:f6:22:d2:12:99:4e:8d:a6:dd:c9:52:05:
00:46:01:fd:c3:b7:c7:68:f5:40:9e:5c:00:0c:c5:
19:2a:b6:71:14:21:b8:d3:2d:c0:11:45:07:c0:c2:
4c:86:9b:e2:7f:05:36:7c:e6:e5:8b:bb:5e:ea:a1:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:33:3B:34:03:D2:DD:0C:0E:0B:7C:A2:50:0D:62:9C:AE:78:F5:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e15dd4a-3b2e-395d-937b-5a8af6c26ff4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.51.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:75:df:d1:6f:d6:d7:77:94:e9:80:08:a9:82:5e:73:23:a9:
51:5b:e0:47:fa:6c:da:85:15:8f:7b:b1:86:41:28:af:36:5b:
6e:da:8f:e8:01:96:85:d6:30:91:cc:8f:b1:c8:e1:db:ad:db:
8a:58:4f:63:1a:57:f9:8d:09:1c:92:fb:12:6d:2f:48:c2:f9:
8c:c5:16:e5:d2:e8:f1:76:97:d5:ad:1c:d3:2e:65:43:45:3d:
8b:a4:24:0e:d5:14:de:6a:e8:57:00:72:80:d2:95:9c:4b:e9:
34:66:94:ff:30:cc:36:f3:46:03:c9:98:91:30:a1:6a:e3:d1:
9d:80:0c:e6:d1:8f:f9:0b:ca:d1:aa:72:cd:4f:69:e6:6c:21:
bf:49:a2:82:78:f9:69:55:bc:b5:ac:9a:a8:a9:2d:6a:13:92:
90:53:56:2f:33:a3:c9:6a:0c:1b:b2:a1:4e:fc:c5:0d:e3:e7:
f7:71:d3:a5:68:6d:5f:02:6f:9e:54:62:db:3e:cc:6c:14:97:
d9:a7:34:45:ff:63:fb:98:53:bf:3c:f4:75:ea:a5:91:c6:94:
99:c8:8c:59:d3:a6:79:77:91:1a:07:1b:2b:86:63:e1:1c:68:
9b:65:33:02:95:03:58:0d:ea:44:20:61:d1:d1:74:ef:f4:12:
6f:66:6a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:57 2025 by rpki-client