Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67d1142a-9846-3835-b647-f3126b8c0b83.roa
File: 67d1142a-9846-3835-b647-f3126b8c0b83.roa (raw, json)
Hash identifier: W4WLMHF8TFtN5mP/aEefg8eIwKBn5KjlN+8mJJ1xrNw=
Subject key identifier: 8A:EA:8B:94:21:AD:FD:1E:27:9C:D6:FF:D5:F3:2B:00:C7:E1:F1:C3
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858487A209D1F090F6A5944EFD200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67d1142a-9846-3835-b647-f3126b8c0b83.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16625
IP address blocks: 23.40.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:9d:1f:09:0f:6a:59:44:ef:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=85f8e934-d9f3-4703-8dd1-4ff5934d8863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4a:d2:be:a8:7d:d4:cd:91:ff:82:e9:63:3f:
59:bc:3a:a2:ae:89:f7:ef:ce:0e:71:8b:fe:a9:fc:
6e:99:96:87:3b:80:30:ba:82:dd:75:11:b0:ae:59:
fe:0d:3d:7a:2b:3a:69:9e:e0:6f:dd:8b:49:77:21:
91:90:d9:93:bb:62:c8:f0:6e:bc:16:32:a8:6a:3f:
85:c8:d1:43:eb:e1:c9:46:90:b7:dc:19:9f:85:88:
61:a3:7d:ce:6e:ac:26:46:73:e2:70:23:88:0f:6f:
68:f4:4e:78:19:9d:59:e3:29:ba:4f:00:30:83:4f:
1d:97:c1:b1:c0:22:50:64:ff:31:c9:df:cf:73:a8:
15:95:2a:99:eb:ec:ab:49:06:03:01:41:ae:0d:36:
d1:3c:18:b8:7a:df:f1:e7:0d:18:04:4f:75:a9:42:
8e:aa:29:58:fc:55:b5:c8:ce:76:60:c6:aa:90:55:
ce:3c:27:b1:3c:84:f7:1f:cb:a6:64:8c:5d:e5:5d:
86:a4:75:4f:2b:0b:31:9a:7e:a3:92:1f:db:89:bb:
3e:13:d8:8b:61:07:9a:85:61:fe:89:41:d1:9c:5f:
87:82:10:f3:58:62:a1:74:65:2d:74:1d:bf:cf:3b:
b4:a1:aa:ad:1c:c7:91:2a:36:c1:41:45:f7:aa:b0:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:8B:94:21:AD:FD:1E:27:9C:D6:FF:D5:F3:2B:00:C7:E1:F1:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/67d1142a-9846-3835-b647-f3126b8c0b83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:8d:1a:45:c8:1b:75:e6:69:83:cf:0f:93:eb:5c:6c:97:38:
d6:8b:90:ee:93:db:49:eb:04:8a:c5:bd:98:49:bb:a5:fd:76:
52:05:6a:42:4c:80:5b:cc:9c:2c:5b:a0:fd:bb:e0:9a:04:6c:
8f:46:c4:ac:93:b9:4f:7f:28:06:0c:cc:fe:dd:47:db:45:5d:
66:92:37:8a:03:18:f2:3e:79:cb:a5:7d:90:6e:6b:eb:29:22:
d9:94:1c:ed:27:52:e6:b1:16:8e:d0:48:1f:51:fe:e5:80:39:
1d:f4:35:8f:9f:a9:26:e2:5d:86:c3:a9:86:5f:7c:e3:b8:cc:
12:17:2e:87:0c:93:f4:73:9a:8d:91:f0:a0:3c:2d:32:27:af:
20:17:17:a8:a8:f6:20:97:72:f0:7e:34:ab:e7:f6:cb:97:4e:
b6:de:4c:bf:1f:93:4b:d9:59:38:37:1c:ab:7c:2a:e6:c7:3d:
ee:d0:c0:63:8d:58:f4:fb:d8:a7:3a:4c:df:a4:26:c9:f9:bb:
29:48:4d:4f:43:96:69:c8:e1:4e:63:09:89:c3:e9:de:f8:28:
b8:7f:fa:d7:52:1f:92:f8:40:b5:63:bc:ab:f6:04:83:af:e7:
b1:e4:c8:7a:38:cd:df:c5:da:a9:fb:2f:4d:aa:d8:7f:cb:a8:
f6:3c:1d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:44 2025 by rpki-client