Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/225fba25-a554-3bee-81ed-a75ccf371107.roa
File: 225fba25-a554-3bee-81ed-a75ccf371107.roa (raw, json)
Hash identifier: 0YbBIzVr8Ia2BzZiBQGhql+wmmMKhFNYUfFjlL9P8is=
Subject key identifier: 31:BA:CB:D4:24:7D:CA:0F:8C:33:BC:CB:D1:E9:AA:68:E0:3F:68:B9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340B86642879A1BF11377C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/225fba25-a554-3bee-81ed-a75ccf371107.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.209.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:b8:66:42:87:9a:1b:f1:13:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=94223640-6a43-4750-b097-19f64165dade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:0d:97:56:11:fe:55:06:f2:6c:82:b9:6f:
41:47:54:52:50:20:14:7b:8d:1c:31:7e:f2:2a:5f:
5f:40:a7:4a:0a:47:a5:61:7d:bb:fb:a6:76:d1:5a:
9b:10:fd:08:03:7a:da:8b:72:a1:cf:32:86:80:3f:
b0:e0:03:ca:a9:79:ba:48:5b:b9:e7:d6:a5:30:7a:
56:ca:16:6f:d4:a6:77:a6:bf:bb:94:af:c0:1c:7c:
97:31:ce:29:cf:f9:80:e0:3b:1d:86:13:0d:ca:66:
7e:c6:ac:06:0a:7e:d6:c6:d2:e3:1e:07:56:ea:90:
de:79:03:53:c5:0a:ed:b3:52:cb:92:cc:8d:89:6c:
cf:2a:6e:a7:c2:67:af:51:93:56:ae:e7:05:6e:4f:
bf:af:78:8c:4b:88:7a:ee:d0:6f:b2:4e:0b:8c:58:
05:bd:6c:6b:49:90:aa:7c:ef:f4:fd:05:6c:6d:96:
da:c6:da:21:c6:f0:e3:32:67:12:a9:f3:fe:51:86:
87:71:34:70:4c:bb:a8:2f:3a:f7:ac:ed:68:18:07:
86:fc:58:fa:60:65:eb:ae:5f:51:5c:7e:13:2c:91:
dc:0c:3f:95:09:f2:d6:bf:b7:a6:fd:ce:b4:4f:80:
8a:9c:ac:56:00:5c:d7:fb:6a:11:58:86:01:39:42:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:CB:D4:24:7D:CA:0F:8C:33:BC:CB:D1:E9:AA:68:E0:3F:68:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/225fba25-a554-3bee-81ed-a75ccf371107.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.209.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:84:1e:6e:c8:70:92:45:1e:8f:60:8b:ce:b3:60:5d:6c:75:
27:01:79:79:a0:fc:38:1a:be:dc:56:89:3c:df:c9:20:d9:09:
7d:6b:b0:7a:19:83:b1:3a:87:88:5b:e9:8c:37:d3:26:51:14:
60:5f:3a:67:4d:40:bf:62:d9:92:51:da:f9:78:a5:bd:10:ab:
a0:9d:60:21:b3:8d:f0:b9:e8:5a:7b:0e:be:b4:da:35:db:ea:
72:3e:58:09:6e:ee:69:a5:7a:e1:07:ab:7b:65:0d:86:1f:66:
d7:16:39:7d:27:65:1d:60:95:85:81:c5:6d:f1:0f:bd:b2:95:
e9:32:26:96:2e:ab:4e:5d:21:86:bf:e8:b2:15:73:3d:b7:c1:
d7:a6:18:a9:32:21:c8:06:4b:65:f1:98:b2:ff:bc:f2:22:ec:
95:c6:b9:ec:08:8b:d6:de:96:de:d6:77:db:66:fe:b3:89:ca:
06:28:7b:e8:6d:a3:c7:74:7e:88:80:03:c1:3f:01:03:7e:88:
54:4d:bd:1e:1e:3a:da:73:5d:d2:d3:9e:66:c8:b8:d4:08:32:
9c:74:d7:de:5a:5b:b7:9c:08:f1:93:e1:a8:dd:84:26:7e:85:
50:a9:b9:0f:60:2a:4f:7a:1d:d9:89:71:f2:08:4b:ee:6c:0b:
4e:bd:98:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:50 2025 by rpki-client