Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/304cd7fa-6e7a-325f-a619-305f397b1a16.roa
File: 304cd7fa-6e7a-325f-a619-305f397b1a16.roa (raw, json)
Hash identifier: Buy0mjwvl+xDyLYACnzHCmFLMsxBiWEa4AM5n2DItF0=
Subject key identifier: F4:0F:FE:98:A3:64:74:A7:75:DD:FC:84:8E:F8:1A:6E:69:F3:47:2A
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848F65BD9E8853CEFFA41F88180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/304cd7fa-6e7a-325f-a619-305f397b1a16.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 21342
IP address blocks: 23.2.10.0/24 maxlen: 24
23.2.11.0/24 maxlen: 24
23.2.19.0/24 maxlen: 24
23.59.162.0/24 maxlen: 24
23.193.22.0/24 maxlen: 24
23.193.23.0/24 maxlen: 24
96.16.208.0/24 maxlen: 24
96.16.209.0/24 maxlen: 24
96.16.210.0/24 maxlen: 24
96.16.211.0/24 maxlen: 24
184.29.148.0/24 maxlen: 24
184.29.149.0/24 maxlen: 24
184.29.150.0/24 maxlen: 24
184.29.151.0/24 maxlen: 24
184.29.152.0/24 maxlen: 24
184.29.153.0/24 maxlen: 24
184.29.154.0/24 maxlen: 24
184.29.155.0/24 maxlen: 24
184.29.156.0/24 maxlen: 24
184.29.157.0/24 maxlen: 24
184.29.158.0/24 maxlen: 24
184.29.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:d9:e8:85:3c:ef:fa:41:f8:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=48e6d248-70bf-43cd-8823-be86257cb396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:6d:b8:96:0b:ad:71:24:87:ac:08:b8:d7:
b2:85:f7:6f:48:1d:37:bf:07:10:ae:fe:ad:31:3c:
84:22:ed:a3:6f:a7:dc:3d:38:a9:2e:d2:7d:60:95:
e3:d9:b0:a4:45:22:1d:ba:ea:c8:d4:9f:79:1f:bc:
df:91:c0:bc:14:b4:81:e3:c3:bb:48:3c:a8:e5:ab:
5e:03:cd:b5:a3:3b:0c:cf:e3:97:6d:a6:c6:34:a7:
04:15:66:2f:79:cb:2b:11:27:66:33:7b:5a:09:e8:
e3:fe:16:65:29:5f:bf:00:b4:5f:20:d9:40:56:0c:
4e:ee:38:02:96:ba:53:23:de:83:44:49:6d:69:1b:
9f:bc:f0:59:5a:3c:2e:55:38:ea:ab:a3:b6:0b:b9:
69:33:51:04:f6:0f:c7:b1:28:0f:27:9b:8d:aa:ee:
08:77:55:a7:a1:d9:a4:69:ac:b9:a7:5a:c4:d9:df:
62:55:35:87:3e:6b:61:33:8d:65:bb:5b:e0:61:e8:
d2:09:b3:17:26:74:6e:fc:7a:27:e2:c1:1d:59:b5:
84:c6:6d:8b:97:ab:29:1e:9f:c7:bd:19:2b:87:d0:
58:e9:0c:c4:1f:d5:dd:58:4a:8a:cd:cb:c5:0f:61:
0a:96:33:51:d6:6d:71:4d:d5:8f:ae:9b:61:d8:57:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0F:FE:98:A3:64:74:A7:75:DD:FC:84:8E:F8:1A:6E:69:F3:47:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/304cd7fa-6e7a-325f-a619-305f397b1a16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.2.10.0/23
23.2.19.0/24
23.59.162.0/24
23.193.22.0/23
96.16.208.0/22
184.29.148.0-184.29.159.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:cf:f5:28:a4:69:be:8d:07:d2:f2:65:54:cc:24:11:51:65:
12:b5:a2:97:2c:bb:1f:3d:df:59:69:95:da:4f:f4:83:65:4e:
44:12:ee:65:87:99:68:54:35:7c:ae:97:1c:1f:c0:b2:f3:1e:
99:dd:43:51:0e:dc:ca:00:4f:11:1a:6a:89:2e:de:ee:25:46:
6b:61:89:3c:2f:9b:16:a2:25:3d:0d:03:f8:3e:b1:96:97:fc:
fa:fc:43:c5:bf:92:00:21:65:76:18:d1:c4:77:bf:e9:4c:83:
66:28:7c:12:bd:11:23:85:bf:a8:9d:94:95:f1:ec:7d:d1:ee:
2f:aa:0c:c8:23:0a:91:f7:5b:59:86:27:85:27:a4:f1:f2:e4:
0e:23:01:40:77:76:60:64:74:41:65:f3:03:a0:28:f0:a6:6d:
31:d0:70:af:e7:69:92:53:e3:62:ac:a0:e6:67:14:fa:1f:98:
6f:f2:a3:5a:c0:dd:e2:dd:64:c8:8a:2b:61:e0:9d:e9:44:ec:
59:b7:0e:33:54:41:a3:7c:47:9e:89:7e:32:4f:38:e1:85:dc:
64:1e:9b:e5:a3:46:b9:e2:89:6d:ff:81:1c:3e:87:6c:3b:a9:
20:03:da:66:b4:01:c7:54:68:66:2a:54:da:e0:1b:d4:3f:7a:
2f:5c:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:48 2025 by rpki-client