Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74023690-c063-32d6-a9b1-d99817afe9f5.roa
File: 74023690-c063-32d6-a9b1-d99817afe9f5.roa (raw, json)
Hash identifier: wAZq1ymhS6ZwIBHN5xJjWiCkX7qdZ3GkiuB4oFBhA7k=
Subject key identifier: 70:51:16:79:00:54:B1:7A:C0:60:81:A1:CA:86:49:89:54:9F:3D:46
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858491ED6F5C361C2571DA92F1400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74023690-c063-32d6-a9b1-d99817afe9f5.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 16625
IP address blocks: 23.77.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:f5:c3:61:c2:57:1d:a9:2f:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=96ce1895-9979-44cd-8f0f-4cb9316627d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cf:9c:21:45:b5:af:47:f2:ff:95:85:84:02:
d5:17:be:d0:4c:69:88:f2:12:b2:11:6b:40:7b:b7:
9c:d9:43:a1:3c:93:4c:ef:75:9e:d2:89:18:a2:a7:
c9:74:ba:f1:2a:0b:78:f9:dd:b6:ed:7f:f4:d9:71:
79:21:5c:82:20:93:e6:2a:48:d4:cd:56:4c:5d:31:
7a:d6:4b:25:85:eb:de:9d:db:b1:31:cd:b1:4d:47:
81:30:14:51:38:98:5f:6e:2c:3f:b9:a8:c5:2d:fc:
41:86:10:e1:d5:f7:8a:c9:f5:5f:c1:79:7d:5d:ce:
b1:a6:93:03:1b:4c:75:2b:28:88:5a:33:8b:94:fc:
a0:4a:bd:16:1a:be:c7:25:11:c9:57:1f:4a:c2:95:
c4:8d:9f:be:5b:ab:8d:35:74:7f:b1:64:07:51:69:
35:9a:60:ec:69:9d:c2:da:c9:d0:9d:46:6a:d9:31:
97:66:b6:f7:b4:66:39:2d:86:d1:5a:24:e3:ab:ab:
74:20:0f:22:1e:d4:d2:7a:07:9a:b0:bf:1b:c8:26:
a7:10:9c:28:c1:b0:21:6a:ec:ed:05:34:f1:32:04:
33:7b:a0:c9:5b:9f:14:72:e6:65:94:01:f4:07:df:
3f:cf:25:45:a0:da:eb:b7:ee:26:3e:1e:36:18:bc:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:16:79:00:54:B1:7A:C0:60:81:A1:CA:86:49:89:54:9F:3D:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74023690-c063-32d6-a9b1-d99817afe9f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.77.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:24:f1:7b:00:9b:fa:4c:a4:fb:ef:38:95:59:36:b6:12:04:
a2:2a:91:8e:6d:4a:fc:61:aa:b4:c6:e0:55:8a:8d:a2:45:a0:
24:60:ce:42:f0:a3:c5:01:b6:d9:4d:66:49:fc:7d:38:20:50:
37:ab:c4:b3:87:f9:ab:5a:89:87:f3:d0:b3:8c:c9:32:c3:05:
40:aa:97:43:97:f1:be:43:bd:ca:55:9d:d9:49:d2:72:e0:f6:
72:15:ef:d5:6c:ee:3c:cc:69:4d:67:e1:8c:a1:de:0a:9f:ee:
01:12:9f:f7:56:6c:76:43:22:f7:20:d2:b1:bb:8c:14:e8:fc:
49:19:ca:36:f4:b6:a5:a7:34:11:9b:73:d9:11:a7:53:8b:20:
a2:c5:bd:9b:e7:e6:d3:88:68:87:39:88:05:a5:66:64:e2:f7:
f6:ca:c6:9a:9f:17:a5:d9:28:29:2d:3d:8c:96:f0:83:b9:26:
ba:f6:65:ba:ee:c8:82:28:ba:69:ed:67:81:7f:3c:72:87:a6:
b6:18:97:15:70:e1:ab:ee:7c:05:c2:cb:76:15:09:29:80:5b:
17:07:24:a6:a9:12:7c:95:44:3b:36:35:0a:7e:9f:2c:b2:d6:
55:1b:2f:44:56:dd:a4:6f:9d:82:b3:5a:bf:9f:7f:d7:d4:4e:
0b:d1:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:42 2025 by rpki-client