Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbe0581-f768-3d9a-8c3f-bfc802eb85af.roa
File: 5fbe0581-f768-3d9a-8c3f-bfc802eb85af.roa (raw, json)
Hash identifier: fTVB4C6R0DgCuBzjfdLX2i/UhhcpwxxIL1qfXE7KBTA=
Subject key identifier: 92:FB:38:54:37:FE:48:7C:65:EB:2D:7D:DD:5A:94:4D:C9:88:99:76
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858494E2EBA85546763667FB6F2B0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbe0581-f768-3d9a-8c3f-bfc802eb85af.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.35.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:ba:85:54:67:63:66:7f:b6:f2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=93c840d0-7f81-4ddf-b01c-b8da549f9b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:14:3c:9d:3e:0a:78:e9:fa:6e:36:3e:67:
a6:1f:0e:c5:0d:38:56:9d:3b:6f:5f:65:73:91:73:
84:e7:05:e4:48:94:8a:f0:0b:da:ac:3c:71:ba:de:
4f:9c:cb:0e:3a:bc:9e:af:42:f2:14:bd:cb:32:29:
b9:5f:8f:c2:c3:7c:f2:c8:87:e9:40:18:f2:cc:a4:
97:d3:2e:28:a8:db:96:3b:ca:30:d0:05:55:d0:3e:
46:8a:1e:9c:60:4d:ad:77:6b:a7:74:63:ac:1a:c0:
d2:97:50:ee:9b:9e:d9:d9:09:98:8c:e4:c4:04:6d:
a6:d8:a6:41:dd:78:15:63:cb:de:21:4b:e5:a7:ba:
77:a9:bc:24:18:c8:a7:b5:88:ff:4e:49:3a:2c:7b:
26:e1:ef:ad:72:b7:5d:f9:71:65:35:a4:3e:4d:12:
30:ef:fa:83:e9:46:33:2a:19:44:34:d7:03:6d:7b:
2d:03:d8:9e:f6:17:87:58:60:be:5f:f2:e0:13:a5:
fd:a9:4d:6d:2f:63:36:1d:61:96:11:51:f5:86:42:
17:b0:35:84:fe:1f:15:e0:12:fc:1c:be:a8:a3:63:
fb:a6:f1:2e:02:fd:73:23:10:a5:45:9d:22:7e:32:
be:46:0e:80:71:2e:3d:93:d4:da:d7:ad:b0:7a:e0:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:38:54:37:FE:48:7C:65:EB:2D:7D:DD:5A:94:4D:C9:88:99:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fbe0581-f768-3d9a-8c3f-bfc802eb85af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.35.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:de:d6:a5:61:b7:82:52:11:07:5d:6e:f9:92:25:a7:05:c9:
9f:57:46:5c:7d:ae:fb:6f:45:b4:ff:45:76:cc:52:8d:22:98:
a0:ae:f0:2a:8c:1e:c6:06:bb:da:83:8e:c2:36:11:a0:02:38:
2c:41:7a:fa:0d:71:71:6a:df:44:5b:a4:d7:f8:fc:f5:19:cf:
aa:5e:62:a5:c8:1b:24:f6:f6:e5:2b:cc:21:75:54:7f:36:f9:
0c:50:f2:ea:ac:32:e5:a1:84:24:9a:d7:a0:a6:c4:eb:74:32:
7e:d8:fc:d7:5f:90:28:9b:f5:8a:8e:4b:8b:61:f3:8b:ca:fc:
88:1c:69:8f:39:23:c4:48:8f:6e:26:55:82:a3:21:64:2d:e9:
21:5f:d8:b8:24:c3:00:a0:eb:e5:d6:cb:80:7b:f9:d5:24:d8:
aa:d6:4a:20:f7:aa:79:08:62:04:cb:23:ae:d4:d1:cb:d5:23:
73:60:a7:bc:60:e5:de:1d:fe:11:21:4d:78:cf:8b:ca:d7:af:
13:be:3e:15:fb:ec:9d:c5:d0:d0:9f:91:8f:52:b2:19:30:94:
c0:ac:1f:ef:fe:68:c8:4d:d4:1e:1a:09:01:f6:81:86:bb:ce:
a0:f6:7f:20:2a:87:f5:17:cf:41:a8:20:df:82:7a:eb:5e:fd:
ec:9d:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:52 2025 by rpki-client