Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48e2db72-4477-31a9-9d3c-bfeb99dfd504.roa
File: 48e2db72-4477-31a9-9d3c-bfeb99dfd504.roa (raw, json)
Hash identifier: fvUTZLYcuPzkJjYNoF4QqOX7XTvDn5FGvgRUmGjOPnY=
Subject key identifier: 98:00:1F:3A:13:C5:60:68:19:73:6B:1C:6D:05:BC:B8:92:DC:E2:2C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848B8F0D7ECA61F3D035C5D3C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48e2db72-4477-31a9-9d3c-bfeb99dfd504.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.206.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:d7:ec:a6:1f:3d:03:5c:5d:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=71e73e37-8151-41ae-bf38-e94d93278b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ac:82:92:e4:4a:b3:5b:7a:63:18:9a:d1:40:
26:f8:17:52:66:05:9e:b7:8b:bb:f4:46:a9:2b:c9:
a8:5a:b2:94:c4:6e:ff:4a:cb:f8:8b:14:51:81:00:
eb:7f:e5:23:c7:b7:52:59:af:f2:f9:ff:bd:75:b3:
7b:08:8a:03:f9:1f:72:03:d6:69:80:11:28:5d:72:
eb:1a:d1:e2:f1:37:9c:85:b0:98:6d:96:27:9a:c9:
2b:44:a8:ca:a0:d2:75:ce:54:4e:ec:be:5a:1c:c6:
f0:d1:e3:ec:03:4d:f7:98:bf:97:b5:e6:e8:8b:53:
96:c2:6c:77:2a:6a:0b:bd:1c:37:b0:cf:0a:3b:d6:
3e:ac:1d:a7:53:bc:b7:2d:ae:55:f9:10:39:04:7d:
11:2e:4e:09:00:06:55:f8:e6:00:64:d5:86:09:af:
68:43:e6:12:5a:a1:bd:7f:7a:ce:62:86:55:0c:3b:
64:13:13:71:b9:5b:80:48:7c:38:ab:94:1c:35:40:
5a:82:6a:ce:89:cc:bc:22:51:c2:0b:ed:9f:f8:40:
0b:e0:44:4f:d7:cd:51:f0:00:d0:c5:46:88:0a:e7:
08:13:a9:e9:8b:c8:d8:6c:22:20:dc:4b:60:6a:91:
36:62:2c:57:d2:ef:1a:34:d3:fb:c4:28:f1:b3:30:
80:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:00:1F:3A:13:C5:60:68:19:73:6B:1C:6D:05:BC:B8:92:DC:E2:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/48e2db72-4477-31a9-9d3c-bfeb99dfd504.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.206.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:0b:45:ed:76:d8:98:1a:d7:e6:cd:99:97:d9:ea:fa:ee:a1:
1a:d6:5a:08:5c:e1:37:b4:87:4e:4c:e3:71:df:98:76:00:3b:
24:c1:53:6c:ad:70:fd:5c:11:7b:63:82:38:8e:ce:22:24:ea:
7d:18:f6:02:ea:72:90:23:ff:a3:42:d8:f2:20:21:14:0f:a9:
2f:53:0b:4c:71:e9:c1:e8:6d:da:7b:d1:bf:63:8d:72:1e:9e:
4a:60:d8:e7:b4:8d:5b:a2:75:97:d0:4f:41:02:96:53:c0:13:
d4:13:be:91:f4:97:d3:c3:f5:62:5e:5e:31:f5:d6:60:99:eb:
1b:9a:c4:a8:f2:c3:b6:76:89:f7:70:7a:3d:08:27:98:76:65:
27:a0:bc:b2:5a:b4:6d:62:8f:e6:dc:5f:7e:cf:ec:ec:6f:93:
0b:90:f2:3f:9d:dc:14:c6:58:15:44:dc:64:f2:df:15:01:80:
b9:0b:41:e0:46:4a:d0:21:85:ef:d0:aa:d9:75:29:c8:95:b9:
c4:f6:89:09:b2:11:a7:f3:df:79:a7:13:a3:b9:9e:a9:a9:60:
c4:4c:10:65:29:8f:d2:0c:0c:ee:f2:97:90:c7:2c:3f:c1:87:
df:eb:58:e3:c0:a1:eb:9b:57:1d:50:33:c3:a4:b0:d7:97:4a:
1f:c7:a9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:48 2025 by rpki-client