Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7204ee62-1a1c-38f6-99be-b6f508f89321.roa
File: 7204ee62-1a1c-38f6-99be-b6f508f89321.roa (raw, json)
Hash identifier: VRmWvD9pr0C7OoWQGVBCByDJBJZEY2x1vBPzzgFAV8Q=
Subject key identifier: D1:36:65:F2:2D:73:E8:54:5F:D1:8E:22:C2:A1:C1:28:A3:97:3C:4D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491ED6EEA561961A472D1D1100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7204ee62-1a1c-38f6-99be-b6f508f89321.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 20940
IP address blocks: 23.73.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:ee:a5:61:96:1a:47:2d:1d:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=b9d72dde-47e7-4c41-aa03-d2a7ed206965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:98:7d:6d:40:a8:57:87:c1:80:c6:34:96:
2f:85:c5:08:64:4e:62:bf:06:a5:c9:15:90:7d:12:
c3:3c:34:bf:34:d3:e7:f0:b0:87:11:ce:7f:82:6a:
5f:d8:20:5f:8d:d9:b6:2b:0f:bb:cf:a9:89:ec:ca:
ac:eb:6b:3d:c9:4d:7d:0b:71:ec:d5:13:a8:6b:0d:
00:fd:a7:73:02:cc:43:04:0f:f9:f5:eb:3d:6c:ab:
78:63:dc:ad:2a:35:c2:60:d7:22:f2:53:57:63:3e:
e0:9c:27:37:d3:59:15:91:c7:9d:3f:f3:e0:d9:10:
42:73:eb:a2:27:57:a3:52:81:6d:ee:b0:90:7e:56:
4c:03:45:ce:98:1d:f9:20:09:50:25:41:a1:f6:68:
39:2f:c4:81:47:84:e8:97:71:62:1c:47:45:cb:9e:
f3:f3:46:fa:c8:5b:98:80:9e:54:90:ed:c0:70:83:
2c:57:97:92:73:9f:4e:42:b4:7f:0f:7d:f1:5b:c7:
14:c7:51:e8:5f:f7:45:0a:8c:c3:40:32:28:7c:ce:
cc:ec:54:d1:b6:be:23:85:12:15:f1:8b:91:a0:d8:
a1:06:ba:ae:a8:b3:9c:e9:75:09:19:20:d4:00:98:
f8:da:b4:13:e9:46:e5:5d:a7:3d:ff:ba:52:e4:ee:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:36:65:F2:2D:73:E8:54:5F:D1:8E:22:C2:A1:C1:28:A3:97:3C:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7204ee62-1a1c-38f6-99be-b6f508f89321.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.73.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:2f:1c:6e:ec:e3:3c:57:02:25:65:52:e4:55:f8:5a:3a:1e:
cb:61:6f:60:45:8a:d1:16:0a:30:89:59:cd:ac:02:54:60:72:
ac:1e:0f:9d:cb:d8:83:82:d2:88:04:0c:c5:6d:10:3c:b0:4f:
12:d5:76:bc:05:14:15:4f:3d:8a:6c:a2:94:e5:e1:da:b6:0c:
98:7a:3b:55:fe:44:0f:2a:0a:fd:15:64:f3:75:a5:06:c4:56:
18:87:7f:e7:a2:d0:f5:08:ed:90:78:17:7f:99:ec:97:ee:7c:
b1:50:bb:fa:5c:b4:1f:cc:89:37:2d:2f:b2:13:ac:29:e6:0a:
f9:91:b7:20:e4:ac:e0:08:9d:16:0b:98:58:74:ce:72:3a:57:
9d:08:e8:40:84:b8:fc:03:20:1b:cf:8f:43:cb:2c:e5:90:b9:
4c:ca:9a:b6:51:63:88:d2:86:52:a0:5d:93:a5:50:69:4a:c4:
9a:31:f1:da:0d:f2:e0:f8:49:80:dd:a3:ae:e8:e1:0d:ab:9d:
88:15:dc:3a:0e:15:eb:fa:c8:09:f2:cd:5e:94:89:2c:16:ed:
4d:2a:f7:f2:13:0b:da:12:44:bc:9d:b0:ec:78:e0:d4:ef:b0:
b5:8d:25:01:c2:96:9a:64:25:f3:79:79:9d:67:8f:97:6e:e3:
18:3a:61:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:57 2025 by rpki-client