Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/527d2c41-2250-336e-b4d9-5003ac2d5429.roa
File: 527d2c41-2250-336e-b4d9-5003ac2d5429.roa (raw, json)
Hash identifier: kt09mEmQYYP3ipGI8K/Xv5pQHQYHixIBBtVSIzGs1Dk=
Subject key identifier: 8D:B5:BC:5D:84:FB:5C:03:D8:CF:62:62:CE:10:89:0F:00:EE:97:13
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487E506F190F7958499FB88E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/527d2c41-2250-336e-b4d9-5003ac2d5429.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 20940
IP address blocks: 23.46.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6f:19:0f:79:58:49:9f:b8:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=8e3498e5-403b-449d-b2a5-ca9e2eeae74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:71:3a:fb:e6:cc:b9:2e:5e:9f:28:e7:3a:
24:88:8d:a3:bf:30:b9:ab:83:dd:82:e8:15:de:11:
65:aa:cc:8f:02:30:aa:e3:f9:12:f3:af:c4:0f:39:
06:d5:a8:3e:54:50:5c:a1:e3:ef:20:74:9a:88:38:
7b:99:f0:ef:d4:b7:40:f3:0b:58:b6:b9:1b:78:aa:
60:06:da:35:0a:0a:62:e0:2c:fe:52:14:29:09:15:
97:12:7c:63:38:6e:cb:44:5f:bc:f8:db:8c:a9:b4:
5f:6b:09:11:e2:01:9a:17:11:cd:28:99:ab:da:3c:
ae:b8:f7:6c:37:17:f3:09:68:15:3b:b1:b2:b8:1b:
c8:ae:ab:b2:5b:65:8d:4b:22:6e:0b:1f:ba:ad:ae:
26:ab:7c:be:9f:51:45:46:61:64:79:37:ee:d1:36:
5b:06:a7:6e:3d:c6:21:18:ab:5d:a3:39:42:74:c2:
2d:65:8d:06:9b:97:2e:c1:40:ef:5d:33:93:9e:4f:
bf:56:52:72:bd:d0:3b:24:b6:2a:89:56:34:32:4d:
74:8e:d6:03:a6:a8:8e:56:3c:2b:35:ea:5e:e6:9c:
bf:b5:c0:af:91:e4:8c:66:aa:4b:70:99:9c:07:50:
a9:0b:c2:21:1c:d0:a1:96:15:fa:3d:60:34:f5:70:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B5:BC:5D:84:FB:5C:03:D8:CF:62:62:CE:10:89:0F:00:EE:97:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/527d2c41-2250-336e-b4d9-5003ac2d5429.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.46.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:d5:1f:d0:eb:4e:21:fe:6d:c2:4e:d0:1a:b5:f8:8a:21:12:
11:26:a5:f0:cc:c1:18:bf:74:bd:ea:87:50:37:7c:41:a6:39:
a8:ca:e2:77:11:34:41:8f:4f:4b:f7:0b:fe:0b:3c:c4:2a:c2:
35:c6:6d:2f:2d:f9:bd:26:ce:ee:09:b1:67:06:be:20:76:e6:
d2:08:0b:0c:7b:5c:c3:dc:a2:05:38:f5:d1:e1:12:92:96:6c:
cf:61:eb:38:7e:9d:b6:ce:d7:3d:70:74:c3:af:ed:55:20:c1:
ee:7d:2c:a6:f9:c5:0d:df:ae:8a:aa:5f:2b:bc:95:26:92:7d:
d4:4b:f5:f9:59:56:49:e9:34:49:a9:30:4d:46:8b:94:38:0e:
a6:1b:ea:b9:86:ca:a7:26:36:b3:7c:5a:5e:4e:9a:d9:04:71:
41:df:ea:4d:ab:a8:5f:07:52:7b:2a:2c:09:15:27:c0:85:a3:
33:53:b0:6e:df:aa:bd:0d:22:66:3c:9a:ac:91:9e:b6:bc:ff:
5d:36:5a:5d:dd:2c:29:bf:fc:7d:eb:ad:ba:a0:85:41:c1:6d:
d9:de:24:7f:cd:9d:07:ff:3a:67:77:e0:36:69:71:69:49:16:
31:9b:b2:a6:de:be:f7:92:e9:85:12:c3:bf:3f:f8:34:c4:21:
59:35:9d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:19 2025 by rpki-client