Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/693af956-2ebd-3994-af39-017001657b02.roa
File: 693af956-2ebd-3994-af39-017001657b02.roa (raw, json)
Hash identifier: VKg+NmVQQbuWT7dN4r1Q3fFcTNJ6CZ6Su9faOaVFiF4=
Subject key identifier: 20:84:89:27:BD:36:D9:50:90:0E:32:30:0D:67:F1:1B:8E:E8:47:1E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491D7165ED92ED5C24792BCA80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/693af956-2ebd-3994-af39-017001657b02.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.36.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:65:ed:92:ed:5c:24:79:2b:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=a94f9cf6-31a1-4978-87ce-5632fed52fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e5:0e:4e:05:96:1e:d9:05:c7:dc:b6:67:23:
95:bd:f7:d9:c3:72:69:c1:06:b2:3b:bf:1c:f8:f8:
74:be:95:8a:aa:0a:75:93:47:b7:58:0d:ff:27:ff:
2d:4a:73:65:66:90:b2:96:37:65:fa:ef:9f:9b:87:
87:29:ff:e0:22:a3:1e:68:86:b5:5e:82:e6:a6:15:
a5:9d:30:6b:b6:1c:fe:6e:fb:0c:98:b4:be:06:61:
1c:d5:f2:f4:e7:68:73:b0:36:22:fb:5a:44:12:2a:
17:53:fd:ff:22:40:f3:cc:af:56:17:fd:b2:be:6e:
9c:c6:23:37:8c:a5:40:b2:82:49:fa:46:bb:9d:8e:
24:33:7f:35:67:dd:e0:93:29:de:79:1d:02:5b:8e:
8f:6a:c2:5f:d6:87:68:e1:06:70:58:dc:58:2d:ca:
f3:ec:e1:86:4b:da:53:8e:85:61:66:d6:1e:d7:fb:
c0:f0:7a:50:27:5f:44:bd:d7:e1:63:2f:5c:90:c0:
a3:f2:ed:f6:1f:a0:33:c7:e6:d1:04:e5:48:0a:3a:
2e:c6:6c:a7:84:19:9a:18:ae:4b:26:ce:5c:41:09:
dd:e9:51:d1:43:2d:6c:84:0e:a1:bb:c0:45:a2:8d:
5a:28:f9:4a:aa:7e:10:41:c9:54:2a:25:21:e9:e5:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:84:89:27:BD:36:D9:50:90:0E:32:30:0D:67:F1:1B:8E:E8:47:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/693af956-2ebd-3994-af39-017001657b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.36.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:29:87:19:3d:23:39:4b:71:8e:37:d0:ab:2c:cc:cc:83:12:
64:67:6e:9d:08:72:31:52:b2:3f:71:73:61:b9:1f:7b:16:37:
ef:19:2a:3b:7e:ad:a8:b8:6a:bb:3e:14:7a:1a:f2:fe:5f:be:
43:c7:49:fc:15:97:f4:64:91:81:5a:e0:99:d0:02:8d:21:33:
ad:de:a7:9a:25:ec:94:8c:9e:cf:8e:96:d6:4d:e4:8d:81:46:
92:0a:43:0a:0c:9c:0e:9c:7d:6f:db:14:49:a3:d9:8d:0b:a9:
4f:96:54:1d:58:ee:77:b4:28:98:32:2b:af:8f:ec:36:66:cd:
49:20:97:ff:d1:2a:9e:1c:8f:61:8b:5b:16:8c:a0:e3:94:09:
54:19:13:bd:33:7e:a0:8e:3b:55:ce:20:b2:f9:2b:3f:1a:de:
cd:88:83:47:f7:06:e4:10:21:a7:2a:30:6b:14:9d:1d:cb:8e:
49:cc:10:55:19:c7:c7:0c:51:a7:ae:a8:d4:73:f8:fc:2d:ac:
8e:8f:6a:8d:4f:0f:bc:b2:b7:da:11:35:d5:c7:e3:f9:34:8e:
9d:ee:13:ef:ea:0c:f1:e3:68:c2:6d:25:f3:0c:9b:95:f9:cb:
a7:d7:49:88:38:8c:9f:72:d7:89:88:08:95:94:6d:04:98:94:
ae:5c:0b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:29 2025 by rpki-client