Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b951b3-7d5c-3c6d-a937-61e9b953860f.roa
File: 32b951b3-7d5c-3c6d-a937-61e9b953860f.roa (raw, json)
Hash identifier: FPX6n10RFD3p+bxcqM+j/8dNJC5HbbgW4I80huTPGYo=
Subject key identifier: 1A:11:AD:27:01:0C:90:C2:A1:1E:FA:67:56:E8:DE:BE:A6:2D:D3:5D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848B626216EA549819DF4739D60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b951b3-7d5c-3c6d-a937-61e9b953860f.roa
Signing time: Thu 30 Jan 2025 02:00:40 +0000
ROA not before: Thu 30 Jan 2025 02:00:40 +0000
ROA not after: Wed 30 Apr 2025 01:00:40 +0000
asID: 16625
IP address blocks: 23.35.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b6:26:21:6e:a5:49:81:9d:f4:73:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 30 02:00:40 2025 GMT
Not After : Apr 30 01:00:40 2025 GMT
Subject: CN=c7097693-12b9-4bbd-ae12-12a855c9d001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:45:6a:a3:9d:35:dc:39:43:95:df:39:25:
54:1b:84:35:36:74:1f:5b:b5:3e:21:42:37:0d:33:
61:75:b9:2c:7e:87:1a:c8:0c:db:a5:0f:3f:32:d9:
8e:0c:84:cb:fa:3a:dd:a1:bf:4c:f2:35:b3:fb:c2:
bb:51:b0:6d:2a:4c:b1:79:ac:76:1e:11:67:89:cb:
7a:4c:91:ae:54:fb:9c:8b:55:c0:fa:f7:92:72:7d:
6a:48:c7:ca:cf:b4:aa:be:b5:d4:af:f8:f0:54:7a:
78:75:b1:7b:96:86:75:48:8b:a8:89:84:a0:a7:bf:
b6:27:b8:5e:5f:ce:44:99:26:0a:2a:d9:e8:da:c6:
26:0f:ce:c4:08:d2:3f:8b:5e:d4:3e:5a:61:8c:e3:
7e:6d:03:96:46:2d:7a:7e:1c:34:f1:e2:61:76:74:
81:6b:51:80:16:c1:7e:74:9b:3e:35:07:01:54:19:
62:d3:ce:34:28:32:27:7b:5e:03:89:75:18:b1:bb:
bb:48:4a:99:9c:b3:3b:46:43:1d:2a:c0:a6:c8:3f:
43:8c:d4:f4:dd:7e:2c:21:c7:0b:8f:81:47:aa:45:
d3:53:d7:10:6a:59:c6:34:16:a5:f6:1e:1f:a6:3a:
46:fd:1b:ac:88:f8:b6:c8:69:9a:ac:0e:04:3a:fd:
16:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:11:AD:27:01:0C:90:C2:A1:1E:FA:67:56:E8:DE:BE:A6:2D:D3:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32b951b3-7d5c-3c6d-a937-61e9b953860f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:5d:ab:df:07:de:bc:5f:84:08:d9:56:bb:dc:b0:53:62:4f:
ae:b1:55:7f:97:99:84:6b:2b:07:54:0c:bd:ac:62:0d:85:54:
53:34:99:77:c0:0d:ea:b6:e9:f7:9d:d7:e3:51:d5:45:d5:c3:
ac:f9:5b:c8:98:f9:25:45:aa:ec:5b:68:99:21:e7:9d:28:7b:
79:80:b3:7c:3a:05:d1:02:34:88:ab:cd:ce:79:26:61:72:59:
c8:11:58:36:29:6e:1a:97:80:75:dd:1f:6f:f7:eb:69:b4:10:
3f:fc:0a:e2:61:08:61:6a:a3:05:94:f9:70:13:58:13:a8:e7:
2b:9a:8a:cd:13:77:dd:fe:85:b6:1c:cf:ba:8c:05:7c:b7:bd:
07:b3:e3:a1:c8:de:33:ac:ce:53:67:72:25:2d:6c:f9:7b:e4:
7c:b0:14:e4:fb:f0:6f:9a:3f:06:95:bf:8a:2d:16:6e:d2:20:
ad:5b:6a:39:ff:3b:a7:ab:83:25:f4:7b:b6:28:ca:6e:2c:1e:
28:5f:58:2b:db:3e:3d:1d:d5:e0:b1:a1:21:6d:4b:2f:5e:94:
66:7b:08:9b:2c:51:4c:f3:43:da:7b:32:df:26:7e:5c:bf:f2:
4b:a6:f6:62:5f:71:51:61:b2:f0:c4:c3:bc:fa:4e:bd:15:33:
70:c3:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:52:03 2025 by rpki-client