Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38621224-05a9-3246-879f-c8e159c8f3c3.roa
File: 38621224-05a9-3246-879f-c8e159c8f3c3.roa (raw, json)
Hash identifier: 6UV3wqDZg/RtdJEJ6oO3nCJ5mEYZW3LJjTY6jk30BH4=
Subject key identifier: 5B:B1:45:FF:D3:7E:C9:CD:CB:0C:C4:CC:A7:9F:12:E7:05:DD:21:E1
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209CDF9997CC941806EC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38621224-05a9-3246-879f-c8e159c8f3c3.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.40.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9c:df:99:97:cc:94:18:06:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=67b5ceb2-1f11-4d7c-8d0c-1ef20d368635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bb:de:4f:d8:13:48:18:d7:cd:eb:9f:d7:5e:
19:14:87:ba:f3:17:56:72:c0:69:cd:75:f4:60:b5:
6f:b1:40:2d:61:01:73:b1:72:b2:76:ad:8e:9a:3b:
b5:77:7a:2e:e6:ee:05:11:0b:40:b2:71:6b:73:85:
9e:d6:d6:bd:0f:a1:0a:5c:76:17:22:49:4e:67:66:
55:f0:f6:e8:ea:71:02:d2:52:84:7c:40:73:4f:d2:
b2:4f:ef:8e:75:81:7f:b2:fe:8c:d9:51:de:82:d2:
e2:7d:ff:1f:29:f9:79:11:87:a2:71:ad:98:11:97:
5e:8d:e4:4f:eb:35:a9:40:7b:e9:b9:9f:f2:61:2e:
f7:c5:f0:e3:8a:35:2c:87:b9:c9:62:8f:0a:c8:f2:
6c:00:cf:59:1d:9b:c0:3f:22:f5:52:89:d3:0d:b5:
68:81:0e:ee:77:60:0c:19:04:99:f7:b8:09:30:5b:
c6:09:41:62:6a:60:54:0c:be:34:f0:08:52:1e:3c:
ca:c8:a3:73:ca:92:40:bc:0d:a4:aa:0c:cf:f6:fe:
35:36:1e:38:5d:b3:70:96:7a:c2:3e:59:84:c5:61:
b5:df:48:4e:b8:62:bb:6e:95:36:b5:99:b5:13:aa:
df:3c:aa:0c:84:39:91:60:d2:64:3c:60:d0:0e:18:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B1:45:FF:D3:7E:C9:CD:CB:0C:C4:CC:A7:9F:12:E7:05:DD:21:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38621224-05a9-3246-879f-c8e159c8f3c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:6f:90:17:94:b3:b7:d9:ff:7f:4f:c4:d5:b7:ba:ac:c5:f1:
d5:3a:7b:db:f2:ad:c9:1b:81:9e:f0:ca:17:15:dc:40:a1:7b:
38:44:6e:7a:8c:d9:48:88:bb:b8:5b:ee:03:ca:af:e5:ac:5d:
c1:d5:4c:fd:bd:0f:d6:30:bc:33:98:7b:32:19:77:81:04:0b:
2c:78:e8:d5:2f:35:86:5f:a4:c0:0a:77:38:ef:41:0e:e8:b6:
d5:1d:b6:ca:2b:27:20:f3:dc:1d:e7:88:a5:15:9b:9f:a5:91:
31:f8:83:15:2a:4f:8a:c9:50:ec:db:e9:db:49:0a:81:2e:83:
77:57:0e:90:97:41:09:a5:87:ed:32:e2:ca:4b:59:af:87:08:
6d:5a:35:67:69:3f:1a:2f:6d:35:c3:b4:4b:d6:1a:5e:71:7a:
96:9c:ee:4f:03:d7:46:d8:9d:2f:7c:c6:d2:87:b9:51:b6:3b:
c3:ed:13:f5:69:28:7c:b7:60:ef:84:e8:e3:d1:1d:94:f7:58:
bf:82:87:5b:d5:0f:49:25:32:b1:55:f2:29:be:4e:ef:3d:59:
aa:36:37:87:d7:05:5c:64:7c:8a:ef:4c:61:a0:84:8d:9a:82:
9b:37:78:96:34:6f:8c:c1:60:36:de:3b:61:e9:01:43:e1:7b:
46:b5:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:48 2025 by rpki-client