Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74bc9244-95a8-3b31-afee-34cea81bdf19.roa
File: 74bc9244-95a8-3b31-afee-34cea81bdf19.roa (raw, json)
Hash identifier: OMjcnwkpNJDxQBfVXEDpmx5cQXUqq2hvDuH48F5z/L4=
Subject key identifier: 8D:8B:FC:18:F4:F1:F5:22:0D:7F:7A:86:2F:7A:53:4E:8E:01:75:C6
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858489BA0AD19C395C68531B10C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74bc9244-95a8-3b31-afee-34cea81bdf19.roa
Signing time: Mon 20 Jan 2025 14:00:51 +0000
ROA not before: Mon 20 Jan 2025 14:00:51 +0000
ROA not after: Sun 20 Apr 2025 13:00:51 +0000
asID: 20940
IP address blocks: 23.206.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9b:a0:ad:19:c3:95:c6:85:31:b1:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jan 20 14:00:51 2025 GMT
Not After : Apr 20 13:00:51 2025 GMT
Subject: CN=7a0dcafe-ed2f-4806-84c0-dd30946eac5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:b9:d0:da:a6:78:42:37:47:95:2b:d1:a0:
f4:df:b8:00:cf:bf:f4:e9:4e:1c:75:d0:f6:15:14:
ab:51:07:3e:48:71:6d:5a:6a:5d:53:52:99:ee:11:
7d:49:bf:53:ce:d9:e8:54:58:1d:05:2b:97:70:35:
42:81:18:cb:47:93:de:23:2e:9e:7c:f9:c0:53:b2:
12:da:21:9b:6a:04:e8:94:75:4c:31:d7:27:91:3a:
bf:d1:58:48:1b:ce:d0:1a:76:5d:40:a0:81:80:4d:
d1:9f:e3:4d:69:c3:8c:ed:ae:5f:24:34:ce:29:48:
cb:9c:4b:b3:da:34:7c:28:d8:b4:bf:d7:a1:83:3d:
c9:97:1b:01:85:60:b5:a6:37:10:30:97:b8:bc:14:
8f:e9:46:3d:b7:61:d4:d3:2c:a0:ed:6b:67:8a:52:
e7:c0:38:73:e9:ce:fb:54:91:d3:9e:a8:6f:80:0e:
b8:4d:c7:a4:0e:74:e8:ce:4b:1e:a5:11:3e:da:5a:
40:35:05:bc:fd:4b:35:4a:2b:59:47:32:8d:e7:ee:
38:24:67:e3:ec:1b:79:ad:be:7a:a2:2f:9d:74:1a:
49:f9:af:92:de:9b:d0:2b:6f:09:e9:07:93:fd:22:
30:86:d8:ee:51:84:d3:bd:42:86:79:d1:74:0f:e0:
ce:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8B:FC:18:F4:F1:F5:22:0D:7F:7A:86:2F:7A:53:4E:8E:01:75:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74bc9244-95a8-3b31-afee-34cea81bdf19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.206.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:19:73:35:da:18:60:2f:39:35:9e:88:d8:fe:56:31:97:46:
f5:fc:e9:21:93:6b:ca:f4:99:d5:2c:a8:94:ea:24:ad:d0:e4:
66:6a:71:69:1b:27:5a:08:d9:06:ae:bb:35:a9:00:fc:73:78:
ff:85:4c:ee:4d:09:84:51:be:06:11:08:d1:46:00:99:7c:1d:
83:a2:ba:08:25:0a:a0:87:a0:94:1a:ad:19:8f:52:8f:80:09:
7c:48:28:49:50:be:8c:35:40:ae:5d:d5:c2:25:88:d0:2f:cb:
52:07:1b:89:2f:6f:66:54:24:b7:e3:b1:53:a8:72:45:68:ea:
57:96:40:7f:80:56:44:de:f0:45:fb:60:49:99:46:c2:9d:2b:
3b:3b:ca:14:26:eb:49:b1:df:d7:af:ae:5b:3b:d9:f9:03:0d:
cf:39:bc:94:b9:af:3c:d0:10:3a:aa:a5:35:8a:f0:57:93:77:
44:bb:8d:e1:4a:34:48:bf:52:6c:ba:05:28:a0:28:ac:a5:24:
c5:73:f1:34:47:d7:10:e4:75:d3:1d:0e:9c:f6:2a:b9:21:6e:
a1:42:00:c7:1c:cb:63:06:8b:56:6e:7e:d7:dd:35:af:fe:de:
99:91:ab:97:8f:d5:1a:74:02:78:2d:7b:8a:26:6f:cd:dc:7c:
a4:1f:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:39 2025 by rpki-client