Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65b6367e-13d5-39af-8a65-9ad6da67acfb.roa
File: 65b6367e-13d5-39af-8a65-9ad6da67acfb.roa (raw, json)
Hash identifier: 1tDAKBWMxNqJHqEU43ZSn6NMUzbtKcSXFqLEdEcwEO4=
Subject key identifier: 65:7B:6F:D6:17:22:67:A4:24:46:E2:61:51:64:E3:24:B6:31:3B:F4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487CEB49BF587BCCC9C0ED5900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65b6367e-13d5-39af-8a65-9ad6da67acfb.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.44.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:49:bf:58:7b:cc:c9:c0:ed:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=0d0e9ecb-3693-4cf8-82f8-1b754aa45098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:98:d8:7e:d2:e9:af:3a:27:f3:9e:e0:7d:
91:14:5e:87:f3:25:fc:60:9b:86:7e:9d:a8:a3:00:
db:ae:45:0a:d2:1d:2c:7c:5b:ab:db:ce:1b:d2:ee:
c4:9b:db:6a:cf:0c:9b:ee:18:88:8f:85:19:61:97:
84:26:c2:3f:6e:d6:ac:bd:5a:58:23:8e:eb:9a:89:
6e:82:a0:fc:3e:35:74:90:f7:56:0f:fc:63:28:6c:
69:c6:fc:35:8c:2d:8c:60:78:f0:3f:51:fc:92:6d:
8d:3b:8d:2d:1d:34:b1:4b:24:10:9e:ed:d5:dc:d9:
6e:34:2e:44:04:24:e0:2b:66:7f:6e:b6:e9:17:5e:
1f:59:d9:58:72:34:33:2c:2e:9e:01:6e:37:2e:98:
6f:d8:01:d7:50:42:35:bc:d9:a0:d9:96:69:cd:bf:
2a:87:88:77:0a:37:0d:7a:7c:12:bc:01:56:2c:9b:
60:f5:e5:e9:3a:67:cc:98:76:0c:e5:47:5c:3d:09:
a0:e8:7b:3e:89:65:2c:5a:70:f0:45:27:6c:87:39:
6b:88:c8:93:77:d2:2d:25:12:f4:88:56:9a:9a:6f:
72:e4:84:09:fb:bb:f8:54:a9:66:c8:07:48:fe:94:
39:99:1e:29:14:08:c5:b6:35:1f:ce:99:ae:f2:4d:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7B:6F:D6:17:22:67:A4:24:46:E2:61:51:64:E3:24:B6:31:3B:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65b6367e-13d5-39af-8a65-9ad6da67acfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.44.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:ad:d1:16:61:c6:55:89:f0:37:24:a5:f4:25:1d:30:f3:a8:
88:58:ce:a3:aa:75:aa:61:62:d8:9c:e1:ae:24:ed:8d:32:89:
f2:ba:f3:6b:c2:fb:a9:37:3f:b3:ed:72:8f:3a:1a:4d:58:6c:
e6:24:28:1c:47:d7:88:4a:d8:48:76:03:ce:78:49:cb:14:24:
ff:85:5c:62:59:2b:1f:49:ee:a4:08:b4:5d:46:f8:31:c3:64:
d7:8b:41:03:73:bf:e1:b1:b7:b6:51:e0:78:2f:9a:bd:e7:ec:
18:c2:8b:a6:61:c6:e7:a4:2a:d4:50:55:68:b3:a9:cc:44:eb:
6c:80:14:e9:88:3b:49:60:08:f2:e3:bf:5d:0e:b4:58:db:b0:
54:77:0b:77:f2:23:b8:03:c4:b0:b3:02:b9:2b:04:e1:b4:50:
84:b8:ab:29:2f:eb:b3:6e:37:19:96:36:28:35:df:9a:e5:b9:
f1:37:ad:f8:43:76:85:18:5e:4a:9c:f4:4c:23:d3:f2:8d:47:
93:d3:ac:a8:cf:17:c1:f7:f0:ad:7b:ea:47:50:96:7e:00:fc:
c8:83:f2:67:88:f0:7d:c1:de:01:17:01:c7:d7:68:03:b9:7c:
36:4c:d9:68:a7:69:75:92:5e:65:89:c3:71:a4:ae:e9:3c:a6:
d5:75:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:08 2025 by rpki-client