Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa
File: 606a4411-5047-3e42-9ccf-b65d55d53a12.roa (raw, json)
Hash identifier: DsLDQeHAW2h/rzInRYwGg6MVdPTxNPU23yyQ7FOI3aY=
Subject key identifier: 11:C1:E3:C6:A5:D7:B1:53:EC:C1:36:FF:2C:A0:AC:49:CC:06:F7:91
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584913AC3E71D59AE34F44B56780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 55644
IP address blocks: 23.40.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:3e:71:d5:9a:e3:4f:44:b5:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=1ad8f75c-fe41-40d6-aee8-967f2ed0661c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:ed:67:50:b6:3d:87:57:b9:5f:80:ce:83:
20:b2:dd:de:5c:54:e4:68:3a:f4:b6:15:09:ce:ed:
a5:89:eb:e7:b8:21:27:68:de:5f:38:6c:9f:e8:a7:
69:ca:29:5d:c6:15:87:e6:36:5b:f7:ee:cc:04:3a:
5d:37:1d:96:87:cc:9e:22:ab:a6:d5:22:88:f3:05:
97:0c:8c:69:ad:18:de:b0:b6:72:01:59:95:1e:62:
76:7e:83:73:38:fa:8f:b0:58:3b:a8:77:5c:0f:49:
88:e2:73:e4:ad:24:c9:80:39:88:b4:dd:60:4b:b3:
02:5d:64:94:b8:a6:22:4c:21:c9:97:17:59:18:cd:
2b:25:9a:b8:ec:6f:88:60:6d:1e:87:f4:9c:dd:3a:
64:61:5c:12:61:58:04:bf:08:24:9f:d7:5a:d8:47:
68:8f:85:9b:25:51:c6:23:a7:29:56:aa:40:ed:82:
75:95:43:f7:ec:7c:e0:23:93:35:df:aa:1c:df:f7:
ea:63:fe:90:f2:bd:3a:6b:ec:db:d3:b0:02:f0:90:
80:e3:27:80:8c:8b:9c:73:20:49:54:32:3a:46:c4:
04:e0:2c:8c:af:ad:bf:1b:8a:f0:cf:92:ea:d4:8b:
ef:b9:70:57:4f:90:4e:59:9a:95:ec:d2:5e:bf:f4:
62:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C1:E3:C6:A5:D7:B1:53:EC:C1:36:FF:2C:A0:AC:49:CC:06:F7:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/606a4411-5047-3e42-9ccf-b65d55d53a12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:51:e9:27:fc:b2:f6:7e:96:db:d9:ed:5e:69:73:f2:7c:01:
0d:60:54:17:7c:e3:00:e1:71:33:3c:9e:af:12:2d:23:b9:c1:
3e:73:0b:65:32:dc:0c:28:ef:94:2e:52:4d:59:b5:0d:26:79:
bb:ed:6b:2f:0e:7f:de:8d:16:7f:a6:85:23:25:f6:c6:74:98:
4e:0e:12:bb:36:3a:c5:0f:1b:ba:3a:e9:c1:51:f0:6c:df:ec:
e5:16:7f:36:51:98:d4:8c:b7:e3:9a:40:7a:3b:68:15:24:16:
58:7e:17:a8:86:aa:6a:89:6f:84:d8:5a:3b:8e:39:c2:3f:a2:
b9:2e:c6:48:87:d3:2c:3c:a5:d1:7a:ed:b1:d8:d7:12:b7:a4:
a3:1f:62:e8:e4:4e:19:9c:fc:51:7c:cd:bf:49:23:e5:1f:7b:
ad:4f:ef:8b:d1:6c:3e:6e:2f:de:72:7f:ac:21:0e:27:b0:74:
87:f1:2a:d3:e0:32:58:76:4d:91:f7:fb:03:06:10:57:66:55:
ea:b9:44:e2:6e:fc:a1:c7:9e:e8:8a:48:6a:87:29:90:0a:cf:
0d:5e:f7:79:88:d2:af:e4:5a:d5:0b:0f:5e:5b:c1:8f:00:ca:
7f:71:d5:0c:c7:ac:2c:c1:af:79:ae:90:3a:c1:5f:56:c8:af:
d9:28:fe:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:15 2025 by rpki-client