Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d7101b4-d6c4-327e-a734-1a04eeb7b675.roa
File: 5d7101b4-d6c4-327e-a734-1a04eeb7b675.roa (raw, json)
Hash identifier: 1FWPE51Nt3JAjGONnQQn/rfA8hcgyyvkZ/aX3eDLAGg=
Subject key identifier: B1:11:1F:EC:A7:34:E4:B8:42:AF:CD:BE:D9:51:83:4C:E5:D4:94:C9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489340BB8A35C696D9AE532D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d7101b4-d6c4-327e-a734-1a04eeb7b675.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 20940
IP address blocks: 23.207.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:bb:8a:35:c6:96:d9:ae:53:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=05f5f14b-0660-4d71-a91e-18f7bb96d4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:c3:13:35:a1:00:88:25:9f:70:89:84:2f:
78:94:8a:e5:d2:fa:54:11:ef:86:3b:0d:64:00:44:
41:0c:16:4e:8e:28:51:7f:d9:27:63:8a:5f:b4:d7:
6b:55:14:9c:17:be:bb:6d:79:16:72:22:b7:75:4c:
27:3a:74:89:0e:63:d7:da:ff:f1:4a:83:67:26:a8:
5d:90:5c:b9:2d:98:10:ae:8c:7f:b1:0b:77:fb:05:
b9:2e:20:c6:ec:93:44:2b:6f:08:77:47:08:c0:14:
ec:ca:2a:f4:7b:c3:89:d0:b6:42:f1:a0:37:52:ec:
8f:9b:07:c9:a6:73:da:1c:1a:ed:ea:9c:b7:be:1a:
ec:d1:d8:40:5a:fa:23:de:09:74:cb:38:5d:39:18:
03:61:81:1b:8c:f0:3b:aa:50:9a:6f:27:06:24:ba:
4f:73:52:f0:a6:f5:f3:bc:fb:5f:60:cf:8f:ec:7e:
cc:5d:fb:06:8a:56:b8:43:cb:1b:92:13:56:75:89:
fb:18:d9:52:3b:7e:99:1a:b7:12:20:f0:fd:6d:f1:
1b:2d:c4:fa:b4:a2:3f:87:b9:a4:d7:2e:a3:7d:3d:
4d:0d:b5:90:b5:4a:76:d0:14:ed:22:6b:80:a0:b2:
0e:d3:df:f6:69:d0:a5:ed:fd:12:39:30:6e:60:a1:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:11:1F:EC:A7:34:E4:B8:42:AF:CD:BE:D9:51:83:4C:E5:D4:94:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d7101b4-d6c4-327e-a734-1a04eeb7b675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.207.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:e8:0e:fd:11:1c:e9:e6:89:53:19:0d:e4:9e:c9:62:39:f1:
c0:32:1a:42:e1:a0:2c:27:8e:f7:3f:8b:ac:87:10:28:17:b1:
3f:a6:d6:c0:f3:3a:c7:40:6f:8a:02:20:67:93:8a:c2:8e:81:
fa:f9:a8:f4:0c:06:f6:9d:d4:b5:53:84:aa:aa:3a:34:a5:47:
31:32:64:57:fe:71:77:2f:f3:70:b1:5d:f8:7a:cd:55:9d:4f:
d0:a6:2d:4f:0c:61:23:7c:50:7e:19:6b:e7:92:7d:0c:8e:05:
b9:3a:0f:ec:08:05:07:6c:4a:05:83:fa:71:d0:e7:7c:f2:a5:
a0:3a:78:2b:fc:8c:17:15:f5:00:8a:55:39:6f:eb:6e:11:3a:
d4:ee:ef:96:e7:cd:fc:ce:cb:0c:5c:60:d0:1f:43:c7:c6:14:
fe:94:27:64:53:5f:c8:33:5e:62:e2:32:7a:64:c5:77:78:3c:
67:f2:79:30:fb:57:34:98:3d:1a:ca:9c:20:86:13:2b:32:05:
6e:02:13:94:da:99:e4:ec:50:08:72:f7:89:3e:69:2a:9a:c8:
42:dd:88:fc:76:f4:8a:d8:ed:c8:4d:5d:de:66:64:69:5e:4e:
eb:80:95:6f:b0:30:7e:dd:f2:0b:95:73:fc:20:df:60:01:e8:
c8:3d:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:19 2025 by rpki-client