Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254b66fe-32ed-32d6-8ece-59e39ff5e240.roa
File: 254b66fe-32ed-32d6-8ece-59e39ff5e240.roa (raw, json)
Hash identifier: 3usSW8FX1eAe+6Xg91Dhk888/Qn2MQ4/afHIyLTMH+A=
Subject key identifier: E3:E4:C9:2B:13:B9:B8:A1:F4:F4:47:81:CC:A2:8D:E6:AD:B4:7B:50
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848B8F0D3F54A6323E76BC69680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254b66fe-32ed-32d6-8ece-59e39ff5e240.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 16625
IP address blocks: 23.204.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:d3:f5:4a:63:23:e7:6b:c6:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=1d3383b3-6f95-459d-9864-a81fc497a195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:9b:ed:6b:fe:98:79:b5:0a:9b:5a:32:e5:
53:15:da:aa:26:9a:28:04:9c:f6:2f:38:3b:25:4e:
b3:a7:cf:3f:ac:0e:1d:52:7f:39:40:9a:5a:5c:1f:
81:34:3c:00:57:57:ea:4b:67:3b:da:42:58:34:e1:
ac:6c:cb:96:c0:a6:ce:d8:ba:9e:67:47:d2:a8:07:
09:cb:ee:4a:b1:29:f0:2a:fc:81:a5:a1:78:a5:1b:
51:f7:0c:20:19:9e:fd:80:6f:17:99:1c:3c:a3:81:
e0:37:8e:77:b7:99:51:8d:5d:e3:a0:4a:92:83:de:
cb:03:39:e1:1c:a8:fb:b2:8f:1a:34:41:a1:9d:a5:
b2:e0:cf:96:09:94:a9:d7:d9:48:be:a2:7e:d7:06:
89:89:32:fe:8e:71:d6:2b:13:bd:eb:b7:9b:82:58:
1e:cc:7c:55:a4:f5:63:85:ae:67:40:78:16:2f:45:
10:e9:72:de:df:97:7b:8c:0e:c0:87:25:bf:bd:c3:
73:c2:dc:f5:b7:ba:a2:58:87:75:c1:44:61:8c:7e:
2b:23:b7:b4:7e:de:2b:da:24:8e:b7:6e:f8:11:9d:
1f:a4:e2:5d:5b:17:92:53:6a:d3:7e:2d:d8:2c:b6:
77:b0:7a:06:b3:e7:16:9d:03:91:3b:0a:70:11:90:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E4:C9:2B:13:B9:B8:A1:F4:F4:47:81:CC:A2:8D:E6:AD:B4:7B:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/254b66fe-32ed-32d6-8ece-59e39ff5e240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.204.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:e6:7e:cc:29:55:80:69:f5:d4:a4:88:b9:ee:c9:f6:fd:19:
10:5a:b6:db:c5:65:15:84:a2:24:b0:e7:00:43:b2:e3:36:a3:
aa:24:e2:85:12:b1:e1:55:05:c1:88:20:11:76:05:2f:90:51:
87:f8:be:a6:59:53:71:0d:58:e2:a6:63:32:be:fb:52:1c:ef:
be:43:04:47:67:33:c4:41:ad:23:65:da:2e:b1:e2:66:5a:27:
7c:f6:9a:2b:6c:0a:64:0d:07:4f:d4:4c:f5:17:8a:67:76:ce:
5b:59:28:d5:0d:8b:47:ac:41:81:bf:6c:8e:e2:76:ca:40:80:
3b:8c:6e:94:af:c0:70:98:d8:21:3f:cd:b3:f7:b0:fd:b0:4b:
5d:69:53:ea:f4:98:59:57:14:76:76:c0:f3:f5:51:e3:7e:b4:
b9:7b:ac:b5:46:1a:d5:63:d7:03:d3:87:91:78:17:96:d3:66:
a6:98:ca:73:fc:ed:f5:8d:5a:d7:2a:2e:5a:08:ac:ac:fa:b0:
83:e8:fc:47:53:a8:b5:14:1b:5d:b5:d2:5a:0b:e9:f2:ff:a2:
00:82:79:20:d1:53:f7:91:2f:ad:89:54:6a:95:d5:3f:d7:00:
1b:e8:38:ce:62:ab:56:ae:33:96:ae:41:5b:a8:5a:ab:e1:30:
ec:73:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:00 2025 by rpki-client