Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c128d0a-0a26-3c51-82d2-4b69b79875fd.roa
File: 5c128d0a-0a26-3c51-82d2-4b69b79875fd.roa (raw, json)
Hash identifier: IUxTW141igXmSb1ege6lFi6uKwmfEw/kWtK47sthid0=
Subject key identifier: F9:83:51:1F:10:63:5E:8F:C7:6A:BD:3D:C6:BD:E3:92:41:AE:E8:D8
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285849244E9B4E0EEA67D21D409C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c128d0a-0a26-3c51-82d2-4b69b79875fd.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.2.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:9b:4e:0e:ea:67:d2:1d:40:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=df889a1c-a607-4194-bc45-e4eeae5d32e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:72:06:64:cc:80:eb:c9:6c:a0:3b:78:c4:79:
07:15:d5:07:85:4b:9f:92:86:bf:3e:24:5e:a0:ed:
cf:f0:d4:6f:95:2e:c1:1f:3b:5e:55:29:2b:4d:74:
6d:f2:26:3e:05:7f:70:0c:7f:36:c6:a5:a8:1b:27:
88:9c:86:8c:92:52:55:88:43:65:d0:c4:1f:78:24:
f7:5f:84:2b:c8:9d:6b:a2:41:72:68:ab:e3:47:80:
fa:25:03:d3:7d:72:32:c4:a1:1a:98:54:f8:36:27:
1f:c6:74:83:7f:a0:8b:b8:67:76:42:89:cf:0b:c3:
8e:4c:4f:23:0e:f1:33:ca:8c:27:0b:26:de:1f:06:
d3:58:6b:34:f4:eb:ec:ff:65:60:dd:af:e1:3a:17:
79:63:b6:1c:21:44:48:49:9a:92:76:9b:3d:40:84:
d4:8f:2f:12:01:a8:c1:9d:e4:9b:2a:de:6e:fb:37:
56:6b:a9:4b:c8:9d:81:d7:ad:bd:56:4b:c1:a4:c9:
08:20:e3:4b:97:0f:27:51:78:3d:54:fd:40:6e:92:
d1:43:88:4a:2b:20:4b:36:85:12:e6:23:80:68:df:
ce:1a:45:32:18:d7:e0:2f:60:e4:df:4b:f4:86:2c:
ce:05:d0:0c:0f:3e:e8:25:75:23:5f:ea:f0:01:46:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:83:51:1F:10:63:5E:8F:C7:6A:BD:3D:C6:BD:E3:92:41:AE:E8:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c128d0a-0a26-3c51-82d2-4b69b79875fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.2.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:c5:f5:71:74:bc:24:ca:16:d4:a4:c6:9b:15:f9:cd:21:97:
db:42:5f:d5:1b:9f:50:45:3c:74:e6:23:cf:e1:dc:c7:68:19:
67:8b:9b:25:a5:38:bb:3b:68:58:47:87:4b:60:34:52:56:d9:
b8:5d:e1:4d:f0:65:9b:f6:87:ea:c3:9d:c2:45:22:d6:26:1c:
a9:ef:4e:59:a1:24:67:4a:86:0f:f4:2d:26:0d:6e:66:f0:10:
eb:ac:6d:23:34:83:ee:95:a9:89:88:fd:d9:b8:fc:b1:27:56:
f1:24:ff:92:19:87:34:4d:17:b9:f1:b2:59:5d:09:05:41:b2:
a8:24:ad:05:fd:67:ff:a9:fd:37:65:e1:b0:4c:0b:24:62:78:
12:b4:b7:2c:85:1c:8c:cb:aa:3f:11:d9:f9:57:9d:5d:78:d7:
8a:7b:36:a9:f7:c0:95:c3:16:2d:92:aa:e3:4d:d3:22:6a:19:
cb:35:31:67:47:3e:33:6c:d7:50:e2:a2:22:03:33:d5:1a:3a:
b8:eb:6b:f9:ae:86:95:51:09:f5:30:37:f2:88:b1:f6:7c:6b:
68:9b:8b:b6:db:6a:e4:13:2e:43:3b:62:d2:ba:96:d0:d7:1d:
f4:30:e9:14:41:67:04:6c:74:6e:e5:7f:73:77:d2:2c:f0:38:
c0:fa:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:17:09 2025 by rpki-client