Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a000c71-8f2c-3cf1-8dc2-db01266a5a85.roa
File: 4a000c71-8f2c-3cf1-8dc2-db01266a5a85.roa (raw, json)
Hash identifier: wKtpxPR0F1S4m9Lf5PU+sDt//hSV6RsWNAMXKsEZcQA=
Subject key identifier: D6:9C:F5:9F:E1:E5:E8:1D:CE:29:9B:12:17:95:05:7C:87:32:8A:95
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848EC96962C90BADAA4C0E167A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a000c71-8f2c-3cf1-8dc2-db01266a5a85.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 32787
IP address blocks: 23.45.90.0/24 maxlen: 24
23.57.100.0/24 maxlen: 24
23.57.105.0/24 maxlen: 24
23.213.138.0/24 maxlen: 24
2606:6c00:109::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:96:2c:90:ba:da:a4:c0:e1:67:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=2beb44f8-607c-4b01-a2e0-e57b86539843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:18:ab:67:99:b2:73:3b:ef:c4:e3:92:56:
d3:cd:fd:c5:75:e4:ff:70:9f:e1:e6:c6:8d:7b:18:
b9:a5:9f:9f:f7:2c:82:6a:61:05:94:2a:95:6b:94:
41:d6:b5:6a:49:fb:cd:eb:7f:79:94:36:67:b8:c7:
00:0a:88:57:73:d8:5a:3c:d6:6b:bf:47:e3:94:1e:
55:68:58:5b:5d:ae:0a:d5:61:13:8f:8d:1b:a9:96:
9d:c2:82:6b:f1:84:9f:5b:3e:8f:98:ec:33:a9:fa:
84:8b:a6:ff:80:9b:9f:a6:5d:7c:1c:fa:bf:45:ec:
47:2b:31:c2:9c:89:22:08:b0:3c:00:83:d9:b9:57:
6d:d6:9a:79:b9:35:54:4e:a0:c2:f7:31:c5:25:6c:
66:b0:3b:33:b6:de:90:a2:74:40:ed:7d:e2:7c:1d:
09:91:45:2a:6a:6f:7f:c3:a1:40:c8:f9:2d:5d:b2:
ae:33:dc:7d:0c:1d:19:10:36:cc:2c:09:1b:34:bb:
c4:69:b0:d9:8a:3d:b2:f8:cf:d7:a7:e1:18:6d:e7:
f5:22:e8:8d:ac:15:60:02:ab:ac:29:3c:81:aa:6e:
b0:d6:82:ca:fb:73:ed:1b:43:38:ac:d8:56:7e:d1:
09:48:60:68:df:07:39:2a:3a:b1:a0:80:77:ca:02:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9C:F5:9F:E1:E5:E8:1D:CE:29:9B:12:17:95:05:7C:87:32:8A:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a000c71-8f2c-3cf1-8dc2-db01266a5a85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.45.90.0/24
23.57.100.0/24
23.57.105.0/24
23.213.138.0/24
IPv6:
2606:6c00:109::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:db:b1:db:cd:52:a2:91:24:9f:8a:03:10:46:f0:5f:39:39:
04:67:60:3b:42:87:2c:3b:24:0a:0b:46:13:a1:bf:f9:33:ec:
f3:20:78:6d:96:df:c1:4f:ff:92:48:49:0d:06:04:20:89:0c:
88:fc:11:3c:25:ab:fc:a7:e1:02:37:2a:71:63:14:87:2c:a1:
41:f7:6c:7b:e9:b5:05:63:2d:22:74:c8:56:d3:d4:17:e4:21:
d7:d1:ed:ff:47:ca:43:4c:4e:4e:d6:ba:c8:54:de:c9:58:0f:
25:70:a3:99:0b:38:9f:c8:2b:46:05:39:e8:09:27:13:bd:a3:
58:d6:63:b3:b9:5b:47:64:3e:33:fa:fe:f9:b9:08:98:87:f7:
74:4f:17:55:ab:ad:ab:6c:59:3f:22:16:93:55:7e:cd:80:3b:
40:8c:78:6a:32:75:a9:3c:f7:1f:15:4d:38:b1:9d:2f:87:42:
22:3c:7d:49:b2:09:e3:47:b7:db:c9:71:d5:c8:c6:26:cd:80:
5b:b3:20:93:9e:27:17:6f:a8:8f:89:0e:8f:8e:fd:bc:7c:9b:
34:87:29:1a:1f:54:e3:ae:3b:69:35:94:cc:90:23:c7:c7:c6:
c0:fa:50:68:11:08:5a:3c:a3:8f:3f:b6:ef:71:b6:bb:bd:d4:
0c:7e:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:13:06 2025 by rpki-client