Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708736cc-6bb7-351c-8bbd-c46d652acb06.roa
File: 708736cc-6bb7-351c-8bbd-c46d652acb06.roa (raw, json)
Hash identifier: tLNWdY/RU4271l4kv0lfSKUTlTmtEiLgV3QRQ/eCXFo=
Subject key identifier: 0D:1A:6E:F9:0E:F1:18:07:3E:B8:52:4D:E1:81:BC:A4:88:3C:D9:E4
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848BBBB982ED67D03BC10F9C000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708736cc-6bb7-351c-8bbd-c46d652acb06.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 20940
IP address blocks: 23.212.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:98:2e:d6:7d:03:bc:10:f9:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=081c8fcc-707b-4982-a29f-29d388388c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:d1:2e:b7:36:4e:bf:92:80:56:cf:eb:5b:
16:7f:f7:7d:18:3e:ef:8b:cf:3e:cb:07:21:26:6e:
87:94:53:cf:b2:0e:c4:30:fc:6a:61:47:fc:a7:72:
50:05:76:f2:8a:0b:ed:79:a0:bc:30:7b:b4:fc:c8:
02:57:e6:1d:0f:d9:8b:8c:ce:b9:55:36:16:24:81:
f2:a7:d0:e4:3c:ac:77:8f:c1:3f:dd:a7:9b:1e:8f:
c1:04:c6:5f:54:47:e1:62:95:cc:29:ac:0f:a3:9c:
53:da:ae:a8:65:dd:f1:00:53:b6:0d:2a:10:8a:8f:
27:d0:8c:03:bc:55:bf:18:c2:b3:ee:98:5f:71:b5:
78:36:a5:af:19:a8:fd:66:08:54:e0:6d:93:7a:e1:
88:c2:6c:bd:78:c7:b7:53:a3:72:23:f2:e5:46:2d:
8c:8f:7c:3a:52:72:d6:7d:0b:30:32:ab:9d:98:33:
44:2a:18:35:f3:63:d6:18:e7:30:c9:63:be:11:6f:
95:dd:3b:0d:29:5c:99:8a:8d:a9:ad:5b:13:a8:ea:
30:26:ea:77:b9:ce:17:0d:a9:32:ea:f2:45:38:ee:
4a:60:8a:2f:be:a3:a3:1b:02:69:ba:89:c5:34:10:
70:0c:c7:83:21:b3:84:98:55:bf:71:50:a1:bd:4b:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1A:6E:F9:0E:F1:18:07:3E:B8:52:4D:E1:81:BC:A4:88:3C:D9:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/708736cc-6bb7-351c-8bbd-c46d652acb06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.212.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:51:03:0d:c1:99:a7:4d:e6:1f:12:27:a9:ef:53:a1:f8:84:
ad:62:44:db:7a:c6:21:39:a0:4c:d0:bb:90:c1:4d:aa:52:19:
ee:55:91:5d:43:6f:7e:5e:58:40:42:a9:bf:a5:1d:94:e8:c7:
2c:4b:99:49:3b:15:c9:5d:20:4e:e6:5d:77:2d:b4:ef:0b:28:
b4:35:7f:00:f1:52:5c:3a:f6:6f:b7:0e:57:be:e1:fd:57:c3:
f3:52:0b:02:ea:4a:60:99:26:9a:b0:98:18:3c:2b:81:85:ac:
c0:99:44:a9:3e:80:7c:2b:ad:f2:55:56:fa:63:e3:4d:bd:c0:
6c:8d:e6:d2:bc:5f:91:c8:66:0d:0d:c1:b2:06:d7:ed:92:53:
09:ba:b5:5a:ac:42:93:80:51:fa:fd:98:b0:9d:0a:bb:90:83:
b9:cc:b9:6a:b6:36:e0:b9:6b:c5:3b:27:c1:1d:47:c4:a3:92:
3b:19:c5:23:26:c3:c5:96:69:ce:1b:3a:8a:39:c7:58:9b:37:
8d:ee:71:4b:18:55:d0:74:7a:a9:e0:ea:b0:86:7c:9d:8d:79:
26:d5:52:12:8d:01:b1:9d:7d:63:81:07:db:c8:f6:ee:7a:91:
23:c1:5a:4d:5a:75:03:f8:b8:a9:bc:34:8c:10:1e:f9:3d:03:
77:1c:fc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:26 2025 by rpki-client