Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56eb9528-e402-31fb-811c-ec4bd777a83d.roa
File: 56eb9528-e402-31fb-811c-ec4bd777a83d.roa (raw, json)
Hash identifier: Mrh2i7N/i8QsZ2ZO4HyXWJ1TqtCQM+WUSyh++MplTZE=
Subject key identifier: CA:10:11:6B:50:32:35:E1:F1:22:26:2E:A7:05:1A:2F:FD:89:37:F0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848A9966974F0AAB7AB859AC400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56eb9528-e402-31fb-811c-ec4bd777a83d.roa
Signing time: Sat 25 Jan 2025 14:00:52 +0000
ROA not before: Sat 25 Jan 2025 14:00:52 +0000
ROA not after: Fri 25 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.203.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a9:96:69:74:f0:aa:b7:ab:85:9a:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 25 14:00:52 2025 GMT
Not After : Apr 25 13:00:52 2025 GMT
Subject: CN=011db3c9-5d72-47cb-92b5-891ea18d6b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:88:a5:d4:c9:da:f0:f8:23:49:1e:dd:db:
0f:14:9d:37:0e:c8:e8:48:5c:c9:6d:4c:df:42:16:
01:60:f7:6d:21:41:31:48:c3:5c:70:e5:82:c3:36:
13:30:8b:b5:fc:ce:4c:a9:0f:77:80:2b:70:ec:a8:
9f:32:42:bd:e5:91:c6:03:74:41:36:0b:e8:aa:1a:
06:b9:46:aa:51:ef:f5:81:f9:92:90:ce:39:0d:8d:
66:97:3f:c8:7e:b7:97:f7:d6:4a:ec:0b:16:ba:8f:
93:6a:49:d8:58:22:89:5e:36:b7:da:c9:a3:fc:00:
67:a7:31:c6:99:d5:a0:ce:eb:8e:6c:bf:9e:ea:cc:
2e:9b:46:84:7f:6b:de:92:13:f5:a6:d0:09:ee:9f:
a7:35:3b:4b:87:8e:86:b5:78:01:40:02:dd:4f:67:
6b:8c:d0:46:75:d4:ac:0b:23:d0:0b:54:d8:9c:81:
16:01:84:22:6f:b4:11:98:4d:8e:0e:97:ea:1b:2f:
94:5a:88:15:de:96:80:f6:21:12:c3:22:03:f0:6c:
d3:14:fb:3f:a8:7e:22:c7:9f:27:99:ef:6b:f6:0e:
f4:34:2d:ff:e6:cf:ed:5c:a1:3f:9b:b0:38:80:60:
7f:da:bc:96:c6:b3:cc:41:93:1d:d5:c5:a5:3f:db:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:11:6B:50:32:35:E1:F1:22:26:2E:A7:05:1A:2F:FD:89:37:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56eb9528-e402-31fb-811c-ec4bd777a83d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.203.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:4a:07:89:1c:55:13:0e:52:3c:84:d7:58:c3:9e:b9:1a:f7:
06:fd:17:57:d1:26:07:95:91:b4:74:09:77:45:6a:c5:09:49:
4c:3d:9d:88:b3:e0:65:cb:9a:95:ef:54:67:25:7b:0a:8f:94:
3b:61:85:11:8d:68:1d:d3:04:5d:7c:89:59:a6:d0:3a:9b:95:
7a:5b:e8:ff:55:e8:dd:53:8c:8a:37:50:be:7b:1b:ce:ce:f2:
59:c0:03:dd:ba:3c:4e:58:3c:90:0a:fe:b7:08:4c:31:bc:c0:
cb:1f:61:ca:36:45:53:ee:4e:fb:70:ee:8e:d1:ad:40:53:d4:
0b:72:84:d9:58:11:1a:dc:46:29:a7:c0:28:77:2f:01:b0:2d:
4b:20:fe:0c:d0:cd:ae:9f:6b:f9:43:b3:99:4c:4f:e0:9c:c6:
40:71:47:8b:79:bf:cf:f4:be:eb:93:7f:ab:da:fb:80:49:90:
ef:93:7d:cb:3d:4c:77:2c:24:d2:85:b5:09:af:85:ab:00:7e:
3e:b9:de:eb:66:23:87:6c:4c:5f:f8:25:cf:ee:64:37:7f:0f:
a6:ab:5b:86:0e:41:1d:44:6b:4f:0f:40:52:8a:bf:ec:6a:f0:
bd:61:d6:21:39:5d:98:ec:10:45:7d:2f:37:30:69:ae:d6:7d:
55:5a:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:57:22 2025 by rpki-client