Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b0298bb-fd5f-35df-97af-6bd44d88fccf.roa
File: 1b0298bb-fd5f-35df-97af-6bd44d88fccf.roa (raw, json)
Hash identifier: eiv5d8pjln7l7ZEJVeC+NCH9nVcYrIgYEy7lgBYiabU=
Subject key identifier: A8:68:24:48:45:06:0B:41:36:F9:89:6C:86:A4:6A:D7:98:60:B6:1C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494CC951E5A5E3D42314C59080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b0298bb-fd5f-35df-97af-6bd44d88fccf.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.32.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:51:e5:a5:e3:d4:23:14:c5:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=41112510-8f6e-4b4f-85e9-56c902cb895d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:74:dc:7c:19:41:6e:8b:bc:24:71:3e:bf:
aa:c0:ed:df:d2:ca:4b:d8:11:c7:1f:ee:e8:5a:83:
dc:9e:9a:26:53:ee:dd:ad:9a:eb:81:aa:72:ec:09:
24:dc:83:54:b7:68:62:73:e0:01:7f:d1:4d:5a:37:
9b:c4:98:35:f3:b0:2a:2b:5a:ea:2d:69:60:9b:fd:
d9:20:68:49:61:86:47:49:92:95:d1:ae:32:ba:8a:
12:90:9c:8d:dc:51:b0:4a:fe:a9:51:34:fa:b4:fa:
7a:8c:be:3e:4d:79:b0:5b:3b:84:8f:48:4f:e1:39:
6c:da:5e:09:0a:80:8d:1c:af:95:eb:40:36:bc:bc:
9e:dc:46:73:0e:fb:e8:bb:b0:bc:1f:08:62:44:e6:
b5:bc:c6:de:7b:28:73:bd:95:a3:8e:28:c9:3d:db:
ef:8e:14:b7:f7:dc:d1:3d:4d:bb:65:af:69:5f:8e:
5e:a1:61:67:10:10:15:d4:f3:50:ec:63:d1:0d:92:
26:9a:a0:7d:5e:bb:4a:77:c1:2c:70:45:d9:e6:16:
e2:7f:71:9b:44:2b:3b:89:77:74:eb:59:05:95:74:
0b:77:bb:34:a0:ea:c0:aa:02:f5:25:1a:1e:0d:79:
91:5c:f5:71:d4:db:97:c0:e2:cd:b2:43:ee:31:71:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:68:24:48:45:06:0B:41:36:F9:89:6C:86:A4:6A:D7:98:60:B6:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b0298bb-fd5f-35df-97af-6bd44d88fccf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:10:6f:9c:59:e4:f2:03:19:98:5d:07:5f:da:cd:25:9e:f9:
2c:b5:88:fa:dd:7b:13:cc:7b:ae:4b:78:ec:2d:ea:58:11:30:
af:7b:fd:ee:04:cc:48:ae:04:86:4b:50:8b:07:75:e2:5b:5c:
82:00:f2:3b:66:8a:f7:d0:20:29:ae:96:35:f1:ad:95:f3:d4:
3d:11:cc:80:f8:55:e1:47:d3:4f:d5:fc:87:1e:99:99:c9:ef:
00:e4:d5:eb:31:de:32:58:5f:bd:a0:7b:f6:9d:28:93:4c:3d:
f1:8d:2f:ed:5b:fc:7c:1d:f4:a6:fb:a9:96:cd:65:2e:cc:cc:
8e:75:0b:63:43:38:3e:a2:95:9e:d8:76:18:37:33:5a:20:3a:
2e:3b:8e:d2:a2:b3:f4:cc:f8:22:18:78:6c:8c:f9:73:47:56:
e5:25:f1:34:f5:c1:66:92:7f:2b:90:65:2e:a2:44:37:c9:c2:
dd:f0:3c:48:20:42:17:a4:22:92:37:95:79:03:c3:30:1d:e5:
89:14:8e:3d:5c:eb:ce:52:b9:9d:b9:3a:a8:83:e4:c7:3f:08:
94:0c:ea:1c:db:bf:33:a1:5f:ed:c7:8f:f3:8c:21:50:91:0e:
04:0b:1c:74:b0:1a:10:c7:11:0e:e1:21:48:14:af:5b:66:e9:
3d:63:d8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:24:43 2025 by rpki-client