Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43ebc051-a371-3c4d-aa9c-af2aee6ead5f.roa
File: 43ebc051-a371-3c4d-aa9c-af2aee6ead5f.roa (raw, json)
Hash identifier: 64jA32E36SDzUBHESkTvmaaR/mVrUzxz45O3BJST36s=
Subject key identifier: 5D:89:D2:A2:EC:AA:7A:C3:E3:6E:5F:58:1D:CB:7D:31:57:C6:ED:26
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A20950D9F779459AA3B9F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43ebc051-a371-3c4d-aa9c-af2aee6ead5f.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.39.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:95:0d:9f:77:94:59:aa:3b:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=d1486a66-239e-4205-b9fe-ff39fcecf330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:bc:6e:1c:d5:44:d7:aa:8a:b2:5e:32:aa:
f9:fb:b8:bf:7b:bd:a9:ff:5e:e5:3c:c3:65:a2:ec:
37:b2:78:2d:f3:85:41:56:44:90:cc:79:b3:0d:82:
af:2a:c6:da:da:58:35:84:f8:78:21:63:5b:79:30:
f0:54:27:34:13:d0:91:32:ba:51:f0:c5:05:23:57:
67:e5:e7:08:41:c4:ec:85:3a:95:17:e5:13:0d:f3:
39:c0:3d:c5:4c:fd:e3:85:49:09:0f:9b:3b:c9:39:
c7:24:7d:81:f8:0e:52:df:9a:78:60:9b:9b:73:43:
9b:a5:1c:90:99:31:96:02:ef:9d:c2:69:d7:1a:73:
66:aa:d7:de:f9:36:7f:11:f0:65:32:39:00:69:55:
2b:44:11:2c:f7:fa:04:ab:2b:b9:44:ae:8a:7b:21:
f9:e7:44:f9:84:e8:cf:45:f2:44:31:b7:6b:8a:0b:
b5:43:8b:13:36:52:fa:94:cc:22:c7:5b:47:d5:df:
cd:d3:e6:fd:cc:f0:58:c4:e8:9d:9d:43:0e:4f:37:
e2:78:13:35:a7:26:b4:dc:a0:cc:11:ea:0e:66:d7:
b1:40:7c:56:94:ad:b7:f8:26:02:61:64:0b:72:61:
cd:d2:0a:dd:22:ae:53:6e:8d:0a:e9:8f:28:6a:c9:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:89:D2:A2:EC:AA:7A:C3:E3:6E:5F:58:1D:CB:7D:31:57:C6:ED:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43ebc051-a371-3c4d-aa9c-af2aee6ead5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:27:09:1f:0c:98:70:94:ff:e9:ca:25:6f:1c:67:6e:04:9e:
2d:c2:27:54:36:9c:67:b4:df:39:8b:9e:55:eb:0e:b1:d4:3f:
ed:78:02:08:d4:72:cd:06:12:d2:81:94:f7:40:24:08:de:6b:
de:2c:93:85:14:3e:3f:76:67:8e:60:b0:2f:92:a6:b5:52:4f:
c2:3f:81:75:66:87:34:d2:75:5a:db:6b:1b:fe:aa:18:69:3f:
e0:28:6f:9e:23:5c:a2:4d:d6:66:52:62:d5:83:d1:77:94:79:
a8:24:1b:c0:e7:f7:23:b0:31:11:f9:7b:59:2d:06:9d:61:a1:
c9:cd:72:96:75:ac:4d:e9:92:f1:a7:11:80:0f:41:a9:38:41:
73:fd:4b:50:e8:35:75:ae:64:52:94:da:a4:02:f7:a5:86:61:
cb:f3:68:e8:63:98:40:94:14:fd:cc:b8:af:b0:d9:56:58:22:
82:fa:aa:51:0a:f8:d6:e0:46:71:b0:dd:07:06:e3:31:15:8b:
c3:3d:a3:49:fb:54:39:29:fc:55:99:99:10:7f:f7:43:73:6e:
f4:a0:66:31:b6:1a:3c:f4:e5:92:db:f0:d8:e0:56:65:8d:99:
98:76:1d:e9:9b:f4:80:66:9f:55:7d:63:eb:a3:29:a9:24:78:
a0:95:f9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:30 2025 by rpki-client