Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa
File: 3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa (raw, json)
Hash identifier: FkzG8K96RUfXHYuA85lDwCbaceGOhy9MBZAPMD4AkVc=
Subject key identifier: 09:56:AD:99:74:37:7F:DB:E1:2C:32:4D:01:FD:41:43:AD:D8:F1:C0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E9133B0DBD2E55B941B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.15.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:91:33:b0:db:d2:e5:5b:94:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=ae9da989-1209-40b0-a12f-3a274aae2dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:3b:f5:78:f1:9a:62:d1:a4:c9:1f:10:8c:
e8:6c:3c:ae:ac:2c:15:02:e4:3c:fc:8f:c5:d3:06:
f0:58:b1:ec:fe:f9:b0:e3:d3:8d:26:9f:da:e1:d2:
65:5d:f0:f6:e2:ee:75:8f:af:e3:91:77:32:4e:84:
2c:83:4f:36:b6:25:9a:34:47:7c:41:34:30:63:f4:
2a:91:53:c1:f9:90:08:03:eb:e6:a0:15:b4:eb:2b:
42:a5:4c:f6:d9:f6:7d:b2:ef:60:33:b8:c2:fb:70:
5e:28:2e:c1:11:9a:84:20:12:1e:c1:0f:37:aa:e7:
d0:b8:c8:6f:e3:93:f6:5e:88:8d:41:29:9b:e7:c4:
4b:2c:31:1d:ee:04:3b:45:bb:3c:af:9f:8e:bf:11:
de:16:5a:40:b3:bb:9c:48:02:64:0e:85:e0:87:2e:
9a:86:8f:e1:72:4f:3f:70:30:bf:d5:16:79:88:40:
a8:72:91:04:e5:1b:04:42:4a:5b:1d:68:1a:dc:cd:
cd:56:85:00:64:21:6e:4e:64:44:cd:be:78:9b:b7:
5e:40:5f:06:3c:fd:8f:48:46:4b:7c:b8:86:ee:49:
ac:35:1f:76:8c:72:c0:31:3c:a6:51:14:9f:06:61:
79:12:fb:60:17:6e:fe:a7:db:e1:2f:21:f5:54:b0:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:AD:99:74:37:7F:DB:E1:2C:32:4D:01:FD:41:43:AD:D8:F1:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c85a6a8-4a8f-3a58-bb53-c49f749a9eb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.15.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:c4:2b:c3:76:21:0e:56:a8:a2:df:a1:b0:f4:5d:2f:0a:b9:
b5:ed:88:56:97:ad:8d:d3:a8:43:7e:57:5d:95:66:6d:01:15:
44:ae:ed:cc:16:4c:06:db:15:62:20:c3:15:9d:0f:f8:7f:8e:
49:a0:0c:ec:f4:f5:97:e5:62:44:b1:68:37:8b:03:e4:26:f3:
6f:c0:e9:46:16:7a:4c:c5:ca:5b:0f:1f:e4:d7:d9:29:33:02:
80:e8:9d:39:e1:a6:e1:92:d6:c8:5d:b1:b7:a3:aa:7e:e5:ac:
84:a5:39:75:fb:88:f9:e2:fb:c2:e1:29:09:d3:60:15:20:c6:
94:ff:fb:27:13:5e:72:df:ad:72:a7:b0:89:80:4d:95:e5:b9:
f6:28:a5:ed:04:91:12:d2:48:02:97:dd:34:d2:77:04:1b:14:
de:84:e5:4d:98:ba:71:a1:41:ba:06:3f:7d:a2:59:bb:bb:c7:
b2:89:44:81:f6:46:06:3b:42:39:36:0b:21:07:31:d8:80:76:
29:6f:bf:c0:37:70:6a:0b:e0:e0:35:26:15:40:8c:c9:f2:a8:
d5:76:a9:b9:d2:dc:94:11:ee:61:ec:c1:02:a7:6e:14:90:4a:
72:37:8c:bf:b6:60:8a:ed:d2:1f:a6:d5:00:a6:9f:04:86:e9:
04:b8:fa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:43 2025 by rpki-client