Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a507a0e-dad5-3045-bf45-656ed3de12b1.roa
File: 4a507a0e-dad5-3045-bf45-656ed3de12b1.roa (raw, json)
Hash identifier: wcvGvaPz+PcyGPcpCf/U2hhmmz5EhZnmKghViFl7CyY=
Subject key identifier: 70:A6:DA:9A:25:C1:B8:3C:6B:DF:DB:A6:42:DF:69:12:B2:A1:54:F5
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487FB5EE51841E294B7D2BDB9A
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a507a0e-dad5-3045-bf45-656ed3de12b1.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.47.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:ee:51:84:1e:29:4b:7d:2b:db:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=bf7f8bda-18da-4a10-a50e-8ce594959e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c4:b5:33:f3:9a:50:b5:39:57:5d:20:1b:37:
8c:14:01:1b:ae:4b:87:53:d3:ad:52:1d:57:b9:ac:
3e:c6:2b:aa:84:ba:4d:eb:3b:06:36:92:a7:24:bd:
2c:1f:0f:62:af:c4:8e:75:ce:b6:d8:17:5b:01:59:
ef:d3:36:78:29:13:6d:77:62:95:bd:37:a9:04:ca:
73:35:64:e1:f7:1c:c7:cc:62:8c:ce:55:c6:fa:41:
36:7a:47:b6:06:1b:29:dc:de:1d:b8:24:17:87:94:
f6:1b:e1:c7:65:3b:6a:94:4f:36:6c:3d:28:8d:54:
4c:38:e7:ae:74:cb:a2:f4:02:88:63:ab:7b:5b:1a:
94:95:da:14:85:db:ff:41:20:1c:c7:ca:94:ba:41:
1c:ad:a3:27:4f:f1:4b:3c:44:f4:da:d6:44:92:fd:
1b:10:ba:fa:b5:01:27:05:5f:4b:93:b3:33:6c:7f:
47:4b:b7:93:0a:a7:b5:ff:0f:00:79:31:6c:82:a8:
8e:9b:2c:3a:e3:68:d7:fd:32:09:78:e7:61:23:e6:
b5:19:30:d2:96:10:38:22:53:72:b6:d8:30:54:11:
20:68:33:01:cb:92:03:78:f2:78:5f:40:52:75:d3:
a8:8e:e3:85:49:b3:56:3e:e1:e5:5e:32:af:8b:e5:
dd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A6:DA:9A:25:C1:B8:3C:6B:DF:DB:A6:42:DF:69:12:B2:A1:54:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a507a0e-dad5-3045-bf45-656ed3de12b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.47.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:ca:cc:e1:3f:7e:66:c0:e7:e1:e9:24:ce:c6:90:e9:c4:a5:
27:d0:bc:09:e2:32:83:88:ba:29:7f:53:92:4d:d8:b1:7f:3a:
b0:06:36:e0:ed:ba:7f:ad:79:b8:8c:d8:04:15:74:9b:f1:5e:
7e:ba:9c:90:ad:86:f7:4a:a7:d9:f0:9e:2f:83:5a:bc:44:dd:
5d:f0:17:e4:ee:1b:03:fb:26:c1:83:b9:86:62:55:f8:80:49:
d5:01:5f:26:c9:79:80:ad:3e:00:13:70:b2:db:73:43:12:52:
c0:6d:59:ca:da:39:72:66:24:68:3f:94:23:0c:83:53:af:49:
5a:01:14:33:87:96:54:31:3e:17:e2:3e:24:94:c0:d5:cf:a2:
7b:ba:38:7e:e3:49:83:5c:b0:25:c6:62:ed:20:15:77:e8:d8:
93:e8:62:4d:5a:90:dd:05:1f:89:ac:b4:4b:a0:67:1d:21:a4:
d1:11:67:4d:7c:6e:23:3d:0e:19:28:0c:10:78:58:55:a1:dc:
b5:39:86:71:29:cb:55:da:19:c1:e9:a2:63:bc:cb:ea:fc:b1:
eb:d9:1e:ee:15:70:9e:27:5b:03:94:a3:05:73:c3:3f:20:c8:
dd:e9:15:de:c1:ac:ee:1b:57:68:e6:b9:30:70:25:5f:fc:63:
cc:7d:43:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:51 2025 by rpki-client