Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c023405-e30c-3f94-a89b-98a745767f6a.roa
File: 3c023405-e30c-3f94-a89b-98a745767f6a.roa (raw, json)
Hash identifier: 6wrQ9106zsw9gxwWjz8wGm1d13jrNz5YUJSG237avcs=
Subject key identifier: 95:CA:98:FE:6C:93:F0:60:B4:CD:76:E3:9B:59:C4:A5:CE:E1:09:4E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487B85BF5D7CA2F4D4A87DD980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c023405-e30c-3f94-a89b-98a745767f6a.roa
Signing time: Thu 09 Jan 2025 02:00:40 +0000
ROA not before: Thu 09 Jan 2025 02:00:40 +0000
ROA not after: Wed 09 Apr 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.41.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7b:85:bf:5d:7c:a2:f4:d4:a8:7d:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 02:00:40 2025 GMT
Not After : Apr 9 01:00:40 2025 GMT
Subject: CN=1fa9a4b3-da60-490a-ac31-f617cf268e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:8b:06:0c:82:24:f3:20:ad:bc:37:3d:cd:
77:fe:f9:f9:ab:03:86:75:09:e7:05:97:04:ea:47:
a3:ec:5f:4b:fc:ad:b0:04:51:6d:a5:15:1d:7e:a7:
0b:b8:60:ef:29:1c:e5:32:46:5f:39:c1:29:43:a6:
84:7c:77:3c:90:86:6e:3a:ff:29:a7:f4:53:4f:ce:
c7:d8:ad:40:ef:5e:c4:1a:eb:ac:12:21:22:f3:c3:
79:ba:69:70:8a:12:ef:bb:31:37:10:96:80:66:8e:
5c:97:cd:4f:d4:80:3f:cb:8b:19:e3:1e:49:bd:65:
90:69:0d:cd:7b:97:2a:ab:be:3e:de:ff:e8:b6:ce:
5c:fc:c4:20:4c:37:c8:8e:b2:9c:53:a4:a6:c9:05:
f9:c3:ba:4d:8c:5a:9a:c6:cf:8b:6d:37:49:a0:54:
2e:5f:3e:cc:52:c0:4c:a8:b8:dd:f6:8f:54:8b:01:
2b:d9:72:e1:e1:78:d8:71:9f:d3:1e:f2:ad:f9:b4:
e7:8f:27:3a:04:f4:da:c6:b4:9d:38:d4:6a:f0:5b:
42:7b:fd:48:b9:cb:eb:14:e7:80:21:84:af:f9:e7:
cf:19:d6:d6:ca:ae:c7:37:12:f5:ab:f6:8e:b6:3b:
69:24:91:a7:8a:1a:2a:c3:2a:b6:6e:be:a3:96:70:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:98:FE:6C:93:F0:60:B4:CD:76:E3:9B:59:C4:A5:CE:E1:09:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c023405-e30c-3f94-a89b-98a745767f6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.41.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:4d:d5:b2:93:94:09:5b:63:4e:3d:6f:3a:9a:49:72:33:2f:
72:b3:d6:0a:e5:e0:33:46:d1:96:6d:31:be:c4:a3:03:9b:de:
63:c9:c6:99:27:6f:0c:c8:4d:3e:97:a9:aa:39:3b:15:07:85:
37:cb:d8:3e:ea:60:e5:f8:00:03:e2:b7:26:7e:fd:a1:22:87:
fe:92:fc:24:e3:93:46:74:4f:1a:fe:93:0b:51:5a:6c:f4:1d:
bb:2b:b7:1a:d6:c1:79:3b:38:52:46:9d:75:1f:35:96:e7:b3:
1d:a7:99:6f:53:ed:b0:5a:b2:a1:5b:59:d3:26:1e:4e:92:20:
d6:95:c0:f9:85:58:2f:10:7a:b8:68:d5:90:1e:1f:c3:c9:48:
4e:7b:a8:4a:1d:2b:8d:17:81:02:c1:92:3b:6f:d9:8f:76:c3:
9f:6b:b3:99:2d:e1:a1:bf:02:47:d7:7d:00:ed:82:20:ba:20:
b1:fa:f3:84:f1:15:37:95:f9:1b:ab:3d:73:f5:a6:79:52:63:
80:59:0c:7c:c3:58:53:80:2d:a1:a7:f0:bd:b5:51:03:70:36:
5b:5a:d0:0b:01:9f:61:f0:4a:55:0d:fb:92:71:6c:30:92:9b:
11:e4:94:2f:0b:2a:64:0a:e9:c6:c4:f5:da:c7:e4:95:7f:b7:
76:df:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:05:09 2025 by rpki-client