Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2e1158-6288-35a2-854d-8f8d6f81ca89.roa
File: 5f2e1158-6288-35a2-854d-8f8d6f81ca89.roa (raw, json)
Hash identifier: LFqu/XZwVpmCoz+3k+90lD64VnxVK0XLEb43E8e+qdw=
Subject key identifier: CD:62:15:D0:52:B9:7E:53:88:5F:CF:EA:F7:55:69:BD:2B:80:0C:30
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848D21132C39D5C5AAAF020AB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2e1158-6288-35a2-854d-8f8d6f81ca89.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.32.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:32:c3:9d:5c:5a:aa:f0:20:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=3d4bc774-650b-4f06-8a97-3c616cd90612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ba:a0:5b:8d:5b:7f:d3:6f:4f:8f:a9:f2:a7:
70:99:29:d7:a6:e7:a3:6c:07:3f:13:ce:5c:13:32:
61:6d:ca:86:e1:aa:be:af:b3:c3:66:72:a0:9e:e1:
68:0a:d6:0b:75:2e:df:7d:3b:35:5a:b3:80:02:cf:
8e:1e:bf:48:77:8e:27:c8:0a:5c:f6:8d:61:55:f0:
e6:a0:9b:8f:5d:4a:e9:42:d9:57:1e:71:95:c1:0e:
e4:0a:48:24:f5:2b:98:37:b8:71:43:b8:4d:51:b1:
60:ed:e3:44:81:ce:46:1c:2c:44:89:c7:35:66:0d:
cb:b6:a1:9e:2a:5a:19:09:a9:35:7d:50:45:a8:b5:
fe:c2:cb:20:ae:ca:ed:26:06:8a:e3:ab:fe:c1:e9:
9e:c5:46:e3:7f:8c:fe:7a:5d:00:50:9b:d7:4f:34:
58:1d:3e:c1:4e:10:75:78:50:22:3b:a9:9d:8c:41:
da:69:f6:16:dd:2a:af:fd:95:8d:02:94:ad:d2:ea:
0b:97:69:83:60:10:da:73:68:d8:83:09:86:a8:35:
f3:2b:60:0a:aa:28:0a:ce:73:a9:71:5b:2b:d6:85:
dd:13:b8:2e:a3:9d:9d:2f:9b:8e:e3:74:b2:20:de:
46:ce:2f:ed:d3:35:0e:db:31:ad:e8:78:37:2c:fb:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:62:15:D0:52:B9:7E:53:88:5F:CF:EA:F7:55:69:BD:2B:80:0C:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f2e1158-6288-35a2-854d-8f8d6f81ca89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.32.92.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:c4:90:78:79:ac:5b:ce:ef:73:9c:3c:57:0a:7a:cb:43:7e:
12:ec:fc:be:a5:54:c7:f5:b3:f7:56:f0:69:8a:c9:ea:2f:37:
46:a1:0e:44:d6:a1:bd:be:44:7b:e6:86:51:c0:a4:bf:e7:90:
c5:17:d3:df:45:75:a8:6a:4e:5a:b7:6c:49:c6:03:38:74:58:
6f:70:2d:22:79:08:24:21:5a:a3:e4:a6:e2:6e:8f:ee:fc:a9:
8d:fe:ad:62:bb:81:2c:ff:87:c9:2c:8a:6a:a7:b2:96:64:bd:
09:64:6a:26:fd:c3:6a:f2:d7:15:c2:45:ef:a8:b2:4f:d1:14:
80:33:dc:d3:f4:25:a1:18:3c:91:95:7c:82:95:c1:ba:43:27:
ee:65:97:f5:ef:2f:b4:52:c6:85:c0:a2:8c:89:2e:04:09:82:
3b:15:a4:fa:0d:bb:e1:19:3a:f9:51:25:46:b0:f3:35:ac:55:
6f:35:75:42:c1:94:61:f5:3e:33:f8:cd:95:62:cd:39:45:85:
60:02:fc:e1:a1:8f:8b:4e:6a:af:14:48:33:97:1f:80:4f:e4:
8b:18:29:7f:fb:43:18:9a:af:c9:e9:58:25:db:5a:a2:0d:8d:
63:84:2f:b5:15:fd:68:ec:9d:23:f6:bb:60:4e:1b:da:e3:58:
66:01:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:40 2025 by rpki-client