Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3287b267-bdbd-38b1-b454-b42414286dc9.roa
File: 3287b267-bdbd-38b1-b454-b42414286dc9.roa (raw, json)
Hash identifier: ZVDqXVAwaCpGBBWFtD1i1mimQ9us7p7aV8EjEuY55D0=
Subject key identifier: 75:F0:96:B8:CF:FF:90:49:0B:80:7F:B8:3B:86:4B:E1:B7:FA:6F:FA
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858488DAB5D158FD34DE946355EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3287b267-bdbd-38b1-b454-b42414286dc9.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.57.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:5d:15:8f:d3:4d:e9:46:35:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=2970f4a0-f2d7-412a-9c29-3a300e39197c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:02:d7:b1:29:de:32:e9:d1:5e:1f:76:57:
78:94:a5:a7:c9:d8:93:fa:7a:f1:4f:30:3c:9d:e5:
c1:3e:8d:14:19:57:88:7d:82:99:aa:d5:17:2a:5a:
bf:c4:28:6e:1b:85:9e:75:66:2f:dc:b3:fe:10:b5:
06:bc:19:1f:d8:ee:3e:1a:80:f7:a7:76:02:fd:af:
e9:57:69:eb:3e:50:c3:5c:72:b4:7b:92:c7:64:24:
62:f0:c2:1d:2c:bf:41:41:5a:0c:eb:66:5e:56:db:
65:85:09:00:74:d7:ad:06:c2:21:c3:b4:3b:a9:75:
4a:a1:c4:39:42:91:c0:19:5a:13:51:b5:bb:90:b5:
7c:27:6b:ce:8c:76:6c:f6:1e:4a:da:c6:74:df:35:
ab:ae:9e:4e:1b:ef:14:07:a3:4c:5b:23:ba:ba:cb:
a9:ce:65:bd:44:d3:3e:ae:65:a0:bb:ae:43:51:b9:
2c:4d:02:0b:44:88:cb:f6:45:a6:63:a2:32:75:f1:
df:fe:ce:fd:2f:81:4c:bb:ad:de:cb:a7:e5:43:41:
d5:6d:00:8d:fb:42:35:13:ef:90:04:16:97:6a:79:
57:60:ea:7f:ab:8b:12:1a:40:84:8e:0d:cc:d5:45:
35:47:31:c9:5b:79:50:37:4d:ad:cd:80:e3:25:da:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F0:96:B8:CF:FF:90:49:0B:80:7F:B8:3B:86:4B:E1:B7:FA:6F:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3287b267-bdbd-38b1-b454-b42414286dc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.57.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:2c:c3:0b:37:53:54:bf:e3:e2:e3:4e:9a:ad:09:d3:f0:4a:
96:9c:3e:45:63:2f:0d:e5:8d:37:7d:47:2f:80:f3:1b:6e:4d:
2c:e0:57:1a:b1:18:3d:05:e5:bc:e5:3c:96:88:7c:60:14:39:
84:f1:dc:11:17:02:6c:17:c9:3a:1b:3f:9e:07:bd:64:dc:8d:
40:9e:46:c3:79:9b:8c:79:8c:69:2d:8b:cf:c6:1f:1e:4b:ab:
3b:a3:69:39:c9:14:f6:4b:21:48:d6:d4:fe:a9:a7:9e:3e:1a:
ab:b8:1b:4e:73:a2:73:85:a1:05:b5:35:c5:db:5d:1e:3c:84:
05:f4:ed:47:8d:7e:71:82:50:51:8e:87:5d:54:7f:71:eb:5e:
6e:0b:9f:36:56:57:69:04:64:65:99:f0:5f:9e:4d:a1:92:fb:
77:9e:cb:36:a5:7e:50:84:e7:88:d5:06:f7:4f:1e:26:b5:0f:
c1:5e:9e:97:5d:fe:1e:ed:db:4a:d6:10:81:19:42:5f:16:8b:
b1:8d:50:9f:9f:40:9d:87:4a:d8:98:d5:a7:4d:aa:92:47:55:
59:e7:14:2e:b4:0f:ed:e3:e2:97:ec:31:e0:5d:98:7f:f5:19:
fa:4b:fa:22:6c:49:9b:4d:77:70:92:e8:1b:03:5f:32:9e:ae:
b3:0b:2e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:44 2025 by rpki-client