Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa
File: 37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa (raw, json)
Hash identifier: U3CEsLCpxPI82NGgy2mMF6QcAu0HNFsCTv/M33gJxYQ=
Subject key identifier: B6:66:2B:91:0B:6D:5D:55:9F:0F:22:0D:EF:36:E2:C8:DA:72:12:5E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB902E2FD2952B67773798
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.213.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:90:2e:2f:d2:95:2b:67:77:37:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=1bea244e-747b-4442-8919-8b2eda842056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:59:89:79:ac:4e:05:fb:c5:14:00:f2:5d:39:
36:31:45:51:d7:c7:90:0f:08:c1:28:f9:05:38:a2:
16:0a:b3:a0:67:75:24:e5:83:78:41:21:d7:a3:c2:
9a:05:6b:d8:31:b6:dc:73:0b:4f:7d:2c:0c:12:25:
11:db:46:eb:dd:d4:4b:61:93:5a:cb:8f:48:81:ab:
0e:aa:78:5b:52:8c:20:c0:8f:f5:87:d4:59:52:d7:
1e:e4:4a:1d:db:b0:8f:ed:7a:98:68:2e:fd:87:12:
86:42:e7:68:f6:58:2f:e2:a7:6f:89:8a:8d:9e:b9:
c6:cf:5a:d2:e1:9b:e3:37:96:5a:cf:06:19:a8:d4:
2a:9d:46:dd:45:49:ce:54:8c:d7:ba:35:41:87:d6:
f0:2f:2e:8c:4d:56:e8:bc:87:18:90:2b:e7:46:60:
74:4e:a9:56:f2:23:4e:0e:a7:b8:7d:f6:98:d3:77:
f8:d3:b5:33:2d:d1:b0:8f:d6:2b:f1:9d:9f:0b:b7:
73:77:f8:ef:92:d9:1a:73:fd:fb:1d:97:92:da:aa:
26:87:f5:ff:f5:47:93:41:0b:92:5d:45:ca:cb:0e:
ec:c1:7e:c3:6e:ad:48:ec:f7:11:d0:d2:b7:0a:59:
84:5d:8f:04:0e:f9:f5:41:05:64:56:5a:a4:3d:1a:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:66:2B:91:0B:6D:5D:55:9F:0F:22:0D:EF:36:E2:C8:DA:72:12:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37f0effb-9d60-3b35-b7a6-9d0754f41ef2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.213.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:62:26:39:34:c5:44:b3:7c:ff:31:da:bb:09:a5:63:83:f4:
d4:ac:01:93:e1:e1:cb:56:9a:70:9b:17:63:72:79:5a:69:07:
79:87:db:f6:ca:af:91:9d:9c:65:49:2d:1f:32:38:e4:4d:6c:
09:df:1a:57:13:3c:89:9c:7c:a3:5b:f4:17:97:24:f2:b9:69:
00:c1:9a:99:07:54:c1:48:52:8f:57:b0:97:1c:37:1f:bd:df:
7f:f3:56:10:56:c5:a9:37:4b:89:e4:5b:98:39:13:21:b0:0b:
45:73:f6:bc:dc:f4:e9:04:88:3d:ef:7c:34:c7:18:1c:b7:84:
2b:75:a6:a0:35:2e:d4:62:2f:ab:70:a7:b5:f1:57:a6:a1:84:
22:83:1e:a3:3c:58:57:64:e1:49:b3:a8:03:fe:df:d2:88:ef:
b6:d6:bd:ba:63:22:d3:3c:d0:61:ae:a8:91:63:ef:03:a2:e2:
79:f2:be:ff:09:f6:a7:89:69:ae:ec:cf:d6:65:94:00:4a:b9:
ae:0d:de:08:71:f9:91:c5:5c:25:a8:19:7e:47:ed:82:73:2a:
8d:56:15:20:a1:aa:22:46:c4:41:04:75:11:62:1a:eb:f4:73:
84:b6:a9:5f:53:69:1b:31:55:ba:e1:20:1c:32:c0:07:d1:3a:
e8:91:ff:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:08 2025 by rpki-client