Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ecd9f70-c510-3af8-9e3b-cb9895806b2c.roa
File: 0ecd9f70-c510-3af8-9e3b-cb9895806b2c.roa (raw, json)
Hash identifier: uQ+musjOB/zmu9hZ3zHV93AfGQltZ5tVk+sHnz02CZ4=
Subject key identifier: 4B:67:47:4B:B8:38:D6:03:FB:82:AF:49:8E:8A:81:F9:AF:3D:F1:0F
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494E2EB8AEC9BCFA9701DD7880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ecd9f70-c510-3af8-9e3b-cb9895806b2c.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.34.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:b8:ae:c9:bc:fa:97:01:dd:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=25aec88c-0f53-4a2c-9b7e-68cd3085c2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:02:44:67:1d:32:db:e1:3f:5a:f7:c8:e9:
9f:e1:a0:64:96:de:20:e3:41:6e:66:e8:f9:4f:3e:
14:e5:05:7c:9d:2d:3c:9a:12:80:4f:8f:99:8e:88:
76:2b:0a:4d:21:28:49:b4:37:1c:41:d1:da:c9:b9:
44:ec:4e:04:dc:b9:54:cc:8b:dc:6a:df:52:1d:4f:
a4:88:04:39:64:4c:62:2b:4c:7f:07:49:d5:6d:31:
b2:02:28:e7:9f:3d:fa:e5:36:0c:bb:8c:0b:34:e8:
ec:04:e1:6f:46:39:3c:59:0e:1c:5e:c7:b1:71:ae:
da:27:87:fc:0d:6a:67:f0:af:bc:89:08:cb:d6:21:
22:ae:09:67:c1:68:8e:46:db:f0:6b:5b:f2:dc:c7:
dd:17:ee:82:b0:7d:6e:c9:85:4b:03:ef:f8:be:d5:
9f:f7:47:65:38:e7:30:7b:72:10:da:35:f2:16:95:
1a:70:08:bf:3b:9e:91:f1:38:6a:1a:89:14:b3:fd:
8a:7b:e5:15:67:88:3d:4d:e1:3d:d0:17:c9:cf:2a:
34:dd:fe:c3:da:06:32:da:93:89:76:2f:14:60:32:
b5:7b:57:b6:7a:87:64:97:f8:10:6d:b0:f0:51:f8:
da:9e:c0:41:e4:63:56:09:a6:21:2c:a1:d2:1c:e6:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:47:4B:B8:38:D6:03:FB:82:AF:49:8E:8A:81:F9:AF:3D:F1:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ecd9f70-c510-3af8-9e3b-cb9895806b2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.34.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:bf:18:c1:d2:64:52:60:35:7f:db:c3:36:5a:5a:8b:42:9c:
96:9a:95:8f:bc:35:56:15:85:7e:a9:04:83:df:d8:e4:fe:9f:
ce:46:cb:f0:c1:7a:61:9c:05:f0:12:d3:15:c1:00:b3:d8:72:
fa:cd:08:51:5f:a5:ae:6e:e3:45:82:ec:1a:ec:0d:b1:50:cb:
0b:76:12:4f:55:df:6e:2f:28:c0:41:ce:ca:ba:e8:fd:5d:ee:
b9:81:da:1e:0c:95:c1:d4:54:a7:b6:ab:0a:f3:1b:ff:8a:72:
de:93:ad:0a:8e:97:03:dc:38:f8:aa:13:e6:e0:57:86:5b:79:
78:ef:d0:28:e5:21:94:27:5c:56:7d:8c:03:ac:d9:ac:b0:49:
70:af:21:14:b5:7e:93:28:a3:13:81:7e:de:9f:42:7c:da:64:
91:e1:28:eb:09:5d:c1:00:13:72:cc:dc:7f:4c:78:44:73:23:
3e:b5:fc:c6:36:b4:5c:27:18:92:78:d1:f2:6a:c8:f1:55:8d:
a2:b8:1c:1e:c2:d7:b7:47:04:60:64:3a:a3:1d:8e:ce:56:4d:
ba:b8:c2:d1:0b:d0:f6:d7:e3:f5:6d:93:00:69:6b:89:a7:69:
a5:50:d7:26:7d:0d:e3:c3:fc:ca:b6:53:4f:65:03:b3:07:df:
3d:05:6e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:55 2025 by rpki-client