Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa
File: 3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa (raw, json)
Hash identifier: 7XtMbvCZPqeZ3ajDQPvus3iJd/Q+MWZjfYQDpb/KUJE=
Subject key identifier: 60:F1:00:69:52:EE:CC:A3:9A:B9:89:16:59:C7:4D:52:FF:B1:36:C2
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848854B6EC963FEA39691F78CC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 24319
IP address blocks: 23.53.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:6e:c9:63:fe:a3:96:91:f7:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=316e805b-ba29-42c5-b804-d1227d0f114c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1c:fa:72:fe:d9:12:fd:3a:f9:df:bb:26:29:
0c:54:b2:44:44:95:96:01:8a:26:07:5c:3f:e7:57:
43:48:6a:64:8c:64:28:a1:5a:2a:01:29:0d:96:42:
f0:7f:84:00:b2:77:1b:62:fe:ab:4a:ac:19:4d:13:
71:c3:bb:d5:e4:f7:95:8a:bf:31:b0:a5:92:8c:ae:
96:a6:52:52:79:7f:c3:25:f5:80:37:63:32:ce:3d:
c2:68:3c:d5:40:e7:bc:dc:1b:cf:51:4b:0a:fc:3d:
ab:3c:c6:68:34:4c:2c:bd:5d:5b:16:41:99:d4:20:
22:37:1d:90:a7:d6:59:45:48:31:99:c1:60:11:f3:
14:fe:b3:69:f9:40:da:eb:4a:8a:df:a6:ba:08:52:
89:30:78:06:40:8c:30:ab:c1:11:5c:4c:5a:9c:43:
95:49:7d:c7:a1:7a:b6:cc:89:e5:83:ee:2c:63:f4:
e0:37:c3:4a:c2:22:16:fe:e7:aa:fb:1c:0b:51:00:
fd:58:51:c4:14:94:75:d6:ce:ef:cf:95:a9:ef:4f:
0e:5d:14:b2:b3:aa:a5:0e:00:8a:67:2c:ba:52:17:
71:90:f0:3b:86:5a:c4:91:26:1d:56:55:c1:d9:8e:
81:86:60:29:e6:34:53:56:82:ba:62:aa:2d:b8:74:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F1:00:69:52:EE:CC:A3:9A:B9:89:16:59:C7:4D:52:FF:B1:36:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f5d4f10-7410-3f40-9a67-9ab76fe1885f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.53.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:12:fd:52:81:4f:14:25:f0:19:0b:73:0b:31:80:5e:fb:a2:
22:b3:23:dc:05:bf:98:57:43:bd:dd:2e:ab:ff:90:05:d8:d3:
f6:ca:ba:ca:2f:9a:91:49:d0:a8:65:bd:09:d5:c2:29:1a:f1:
b5:f3:94:c5:56:b8:4f:81:ae:2a:5d:05:f9:ca:ac:f7:f1:38:
31:6d:6c:d2:ae:ff:ce:3b:72:e3:5b:fb:86:5e:d9:7f:62:13:
aa:b9:bb:bb:eb:f1:3a:c9:6c:59:81:c3:e7:af:d8:65:ef:fd:
44:6d:ff:2d:9c:87:34:df:01:ba:b7:34:e2:b1:4a:7c:9b:d4:
8c:c3:6b:b5:6c:1f:bd:77:75:57:ce:79:76:ef:92:9b:70:4c:
08:55:f2:5c:03:33:f8:09:06:6d:0c:13:3e:ce:a9:70:c3:64:
2b:7c:8e:5e:85:60:6d:a4:d1:b2:95:9a:0e:7f:ba:0d:8f:10:
38:c8:61:d0:14:76:23:5e:0e:23:e7:bc:61:ae:72:d7:cc:2b:
06:e5:0e:ac:d1:8d:ae:0a:fa:bf:fd:c6:ee:d9:e0:20:e4:3e:
fe:e3:4e:dd:38:12:3b:c4:fe:20:cf:7f:61:97:ea:8a:d0:65:
af:43:b4:36:af:44:dc:29:fb:0d:5a:8d:4b:a5:74:60:d8:b0:
25:ee:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:31 2025 by rpki-client