Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be9869c-5329-3bde-8721-16fce92e7c1d.roa
File: 1be9869c-5329-3bde-8721-16fce92e7c1d.roa (raw, json)
Hash identifier: hoVEfCzpJE8hPOsOGxripk86kOSp3tCG+LOsh7MqCik=
Subject key identifier: 7F:BE:DB:C4:F3:BF:58:D9:42:12:AA:8D:E5:06:67:53:68:D4:FF:49
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487E506BF860F0C391C9EFC400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be9869c-5329-3bde-8721-16fce92e7c1d.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 35994
IP address blocks: 23.46.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6b:f8:60:f0:c3:91:c9:ef:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=1f28861d-845c-4ba6-be2e-71f25f759ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:3f:ce:6e:36:ec:a6:66:94:40:df:75:f7:
da:18:cb:2e:8a:43:69:97:0c:dc:65:cc:33:b2:90:
45:07:17:8f:55:4e:c9:89:32:b1:50:f9:86:c5:ab:
c1:6f:39:57:68:0c:b8:91:eb:22:48:da:a4:f6:ed:
5c:73:de:75:b2:06:99:0f:4b:21:1a:4b:af:61:3b:
4e:bb:c7:e4:c9:4b:e2:af:50:a2:3e:87:ad:7a:0e:
0e:98:af:ec:ae:46:42:67:48:b9:62:c5:01:ff:2b:
94:e9:9d:ce:9e:fd:f6:df:9a:9e:36:96:c7:19:d3:
fd:93:7a:84:fb:32:96:dc:96:c1:e5:86:ee:7d:f7:
3a:c7:7b:4c:7f:d5:bb:b3:ba:17:9e:42:73:98:0a:
fd:b1:d0:00:ad:c5:f4:00:16:c2:2c:73:15:fc:d3:
62:a0:fa:06:d8:00:ac:cb:75:06:35:b6:1b:da:ed:
33:91:ff:12:81:14:26:5f:9c:13:a7:a5:45:aa:85:
e6:6b:a8:65:43:f6:a7:36:69:6e:a7:a5:30:32:db:
77:17:cf:67:c8:c2:c2:c3:c2:69:59:6c:2b:8e:a7:
29:45:39:50:7b:a5:f4:7d:63:80:34:81:0d:c6:36:
00:cb:e3:22:8e:72:28:ca:24:22:65:56:34:20:5f:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BE:DB:C4:F3:BF:58:D9:42:12:AA:8D:E5:06:67:53:68:D4:FF:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1be9869c-5329-3bde-8721-16fce92e7c1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.46.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:3a:cb:82:f3:05:0e:10:f5:b1:54:56:52:fa:bf:71:68:6c:
2d:6d:ec:51:cf:69:1d:9f:56:27:28:36:69:c6:fb:38:ec:4c:
c0:c9:fd:0a:e7:1a:23:a6:f0:3d:5f:82:07:62:97:88:4e:50:
57:b9:c8:fd:0b:6e:42:4b:59:04:5e:f1:92:ad:3e:46:42:fd:
41:f0:72:23:41:74:9d:d5:d5:ae:0e:40:40:6e:73:70:6b:2d:
24:5c:ba:c2:5b:c4:75:61:15:6b:d5:a8:d2:2c:1c:32:e9:67:
51:eb:60:ac:45:41:5e:5c:b0:59:59:9f:c8:b7:ad:ef:39:12:
20:67:ed:21:a3:c7:44:52:ca:30:ef:10:c7:06:af:0e:0f:50:
00:ad:cb:9c:cc:d7:8d:ec:6f:e3:a0:70:06:a2:5e:b7:3c:24:
4b:74:79:a7:32:48:a6:80:50:59:d4:17:a7:fc:55:eb:a8:74:
2a:af:0a:36:9a:3f:f3:10:e9:33:e3:71:4a:7c:da:89:bc:1e:
06:2f:d3:d8:af:b2:c9:e0:70:55:87:63:f1:8f:a7:b2:48:38:
41:77:61:fb:37:7c:56:13:a4:49:54:11:89:5d:eb:0d:33:fb:
6a:d0:0a:7d:7d:72:14:33:08:f5:d0:ff:94:be:b5:0f:f3:01:
f0:bb:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:20 2025 by rpki-client