Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ca382ae-20b1-367d-bdaf-2d232275981d.roa
File: 1ca382ae-20b1-367d-bdaf-2d232275981d.roa (raw, json)
Hash identifier: Nx7/k781BWSnNlpPkW5nxagzAex6HdHmXmv0X5mE2t0=
Subject key identifier: 54:D2:C8:05:DC:B2:66:E1:51:64:67:73:1B:92:FD:A5:A8:5A:C8:26
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB90A121ADDE09C3EEC4C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ca382ae-20b1-367d-bdaf-2d232275981d.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.213.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:90:a1:21:ad:de:09:c3:ee:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=1ad7b4f6-64f7-4cb9-b075-b0cc72d196f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ac:f0:c5:3c:51:78:de:5f:0f:e3:0e:9e:2a:
6e:c4:5e:a3:a5:59:8a:6a:e0:88:1d:de:ee:2e:99:
86:61:59:81:50:32:77:95:7f:63:0b:ed:e3:60:db:
28:d1:88:1e:3e:22:a5:d4:b6:ee:fe:fe:36:bc:3d:
47:52:25:28:2f:62:9d:4b:bc:8a:d2:b4:e2:2a:1e:
d2:2b:08:70:09:ef:44:04:e8:96:fe:a9:7e:6e:94:
c7:dc:5e:74:ba:ac:50:0b:01:45:f4:ef:ab:44:34:
36:a7:bd:33:7f:a5:22:a5:05:62:53:57:44:8a:28:
75:49:fd:ad:6b:c1:73:51:9c:9d:b8:33:ee:a9:6c:
51:ff:57:21:64:9f:33:08:b4:74:ce:0d:11:79:a2:
7b:7b:f4:53:05:7a:c9:1e:d9:00:67:ea:be:ba:d8:
7c:35:6e:21:19:be:95:6c:e1:87:8b:7a:1c:55:c2:
7a:c3:54:35:cf:56:a4:ab:bc:a8:5f:25:22:13:33:
a0:2d:8e:0a:28:4f:84:01:39:02:2d:e8:be:c0:f8:
a0:5b:35:3b:3f:fa:da:f2:c7:82:d5:21:50:fa:f9:
0c:92:8b:94:52:93:78:57:3e:a5:99:99:48:80:51:
8e:a6:62:1b:eb:9c:00:1f:f4:b0:10:89:ac:05:9c:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D2:C8:05:DC:B2:66:E1:51:64:67:73:1B:92:FD:A5:A8:5A:C8:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ca382ae-20b1-367d-bdaf-2d232275981d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:9d:08:70:f6:ad:e1:fb:a7:e9:a0:da:b7:97:80:da:5e:51:
49:b1:20:41:2c:8c:76:71:1d:8d:ba:d7:68:48:85:dc:3c:18:
10:3d:23:64:74:4a:2e:70:b4:f0:2d:2d:43:23:17:95:61:65:
0a:d2:14:71:fd:68:d8:f3:cb:11:05:8a:e2:55:72:03:65:6f:
d9:d0:d2:a9:ef:0a:8f:04:e3:0e:dc:bf:67:ec:2f:85:2b:c3:
bc:ae:32:3d:bd:f0:7e:9a:0c:04:a6:fc:fa:2a:0d:8f:86:11:
22:8b:e2:de:e4:ff:27:04:d4:e3:7e:49:29:bf:bd:16:53:1e:
ac:0e:8c:ca:27:75:c0:52:55:1d:4d:88:8e:73:89:ee:c2:7d:
e5:66:8e:7c:af:fc:fe:db:d0:ea:4f:a7:c9:ef:da:93:4e:d5:
f0:4e:77:60:86:a1:d8:98:18:95:24:3b:1d:9e:60:c5:b9:6f:
c4:29:c5:ac:b9:b3:99:0b:ee:8a:90:2e:de:93:9c:bd:4b:b3:
cb:ad:1d:97:c2:2f:47:d6:e7:5e:80:68:15:f2:f8:b9:43:4d:
b3:f1:0f:13:97:c8:ea:e2:82:3c:a5:9f:5c:56:22:43:9f:54:
e1:af:f9:8a:20:b4:28:5f:31:74:56:51:95:40:9e:ec:3c:f8:
c1:d4:c3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:09 2025 by rpki-client