Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493baa5e-31de-3a50-847a-98c44918dd26.roa
File: 493baa5e-31de-3a50-847a-98c44918dd26.roa (raw, json)
Hash identifier: 8buf7bFSjyRGXaY71ZNP6Yzq+LFhiDYkfB03FqfjZM8=
Subject key identifier: 52:FA:35:FC:4B:7A:92:17:C5:1D:7D:D7:42:17:87:57:6E:FE:71:6B
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209489DE2119211CAA35C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493baa5e-31de-3a50-847a-98c44918dd26.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.39.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:94:89:de:21:19:21:1c:aa:35:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=fdbc5885-7766-40ba-a2f1-f7180d69e1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:43:52:37:eb:29:15:94:b4:0a:b5:a0:0d:
44:b9:05:64:33:e2:fc:d1:78:a8:6b:30:04:e2:c9:
88:66:74:e4:73:da:04:01:ad:d2:2f:f1:1d:e0:74:
5d:29:50:90:0a:5d:b6:94:4b:7a:45:f8:65:b4:83:
69:05:3f:d3:50:5b:fb:a3:aa:6b:c8:1e:ca:a4:f9:
f8:df:46:b5:7a:52:5c:ef:3a:13:3d:8f:93:be:82:
f5:3b:95:92:cf:0b:70:bb:44:97:f1:61:b6:42:03:
04:70:b8:ee:1a:1c:43:fd:b7:d8:e1:85:c9:54:45:
6b:be:d5:bf:28:a5:ff:2a:31:fa:e9:6d:08:58:ec:
40:46:49:b9:4b:a6:31:b1:fa:b7:30:2b:90:50:8f:
0b:54:4b:ff:aa:aa:77:39:7a:49:4b:fa:56:ad:07:
40:8b:6a:a7:d4:48:e5:03:73:b1:0c:46:2d:e2:61:
dc:2d:bd:10:05:9c:f3:03:df:f4:9b:0f:20:63:5f:
10:6f:1a:fb:86:2f:0b:ea:8e:f3:73:86:07:c6:43:
d0:c3:1d:27:1a:11:f2:05:25:6a:b3:48:7d:3a:79:
cb:3b:d6:51:d1:63:d8:01:c6:33:16:47:4e:88:d7:
54:26:85:b7:3b:a9:b5:ef:01:1a:62:30:fb:5e:68:
36:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FA:35:FC:4B:7A:92:17:C5:1D:7D:D7:42:17:87:57:6E:FE:71:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/493baa5e-31de-3a50-847a-98c44918dd26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.39.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:ef:54:b2:e0:04:98:b6:77:9e:db:e0:bc:f2:de:c8:cb:17:
cd:85:62:04:9a:69:65:bc:9c:24:6f:59:20:73:05:ca:0c:1a:
d5:b1:29:7f:a8:3e:24:34:3a:f3:6b:cf:be:da:5f:fb:88:63:
89:13:0f:59:a5:f5:53:04:4d:54:5e:dd:41:aa:6c:9c:c3:3d:
73:ae:74:71:b8:1b:ba:8c:04:60:86:63:99:43:f9:3c:11:d2:
e2:fc:aa:de:97:45:35:bf:9e:43:7c:d0:da:bb:e7:6a:6a:6a:
60:22:09:17:b6:09:c5:b1:d8:4c:48:cd:23:10:ef:31:e5:25:
03:91:e3:c3:aa:3f:8a:85:33:d4:e1:0e:da:05:a4:e0:9d:b8:
60:96:70:3f:f8:69:79:a7:89:ce:41:7e:40:b1:b0:d3:fc:1b:
e3:7b:e8:ed:e8:9d:16:b8:f4:ea:14:98:6d:de:8b:e6:1d:73:
59:b9:e5:03:61:b1:ec:cd:17:b6:e2:4d:25:99:98:1a:2a:7e:
fe:98:fe:a9:3e:30:64:10:d6:3a:50:3b:92:90:bd:36:1c:d9:
f9:6b:18:a2:7e:99:08:ea:6b:c8:98:db:bb:12:7a:03:95:31:
25:92:b2:88:c1:e8:e0:0f:54:72:83:0f:42:9d:3a:6c:2e:cf:
b0:f7:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:07 2025 by rpki-client